Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: ftmeo1edxj72b03/jdFqZ5mIU4BATMKv/qNaCRruHNY=
Subject key identifier: B3:89:6E:55:ED:B5:27:DF:44:DD:F4:10:2A:73:AF:39:F7:51:DF:DC
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 0199FCFDAE2A86960C1F7E1BAE83BDB398B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0DD6
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: o9psTwRDyoxmPwzzIGBk5ACrC0u5sHkldOG8DsQ6vE4=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ae:2a:86:96:0c:1f:7e:1b:ae:83:bd:b3:98:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=b3896e55edb527df44ddf4102a73af39f751dfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:36:45:56:fe:07:d8:4f:a1:07:c0:ed:8e:
74:9d:e1:cb:95:84:9d:59:9a:41:36:50:dd:eb:36:
6e:9d:93:e6:5e:a5:44:06:46:df:bf:f3:99:16:0b:
cc:da:d9:e5:32:41:55:c0:90:0a:56:d3:cf:c4:32:
01:60:cc:5c:ab:93:b5:2e:a3:96:50:39:8e:49:de:
a9:14:b4:81:61:17:e9:17:c0:47:f3:63:8a:f3:37:
ef:67:42:20:c7:2e:a1:4b:80:01:61:f0:87:b3:34:
33:f6:65:d0:f1:32:ab:cf:f8:87:59:5f:45:0f:0f:
ba:75:21:0a:26:f5:6a:57:ba:fa:36:d3:2a:59:3b:
ce:83:c9:e1:fb:2d:fa:06:71:dd:ed:58:5e:0c:9e:
7c:e4:e4:57:6a:db:af:76:89:e8:25:a2:a2:87:93:
d5:e0:a1:ac:b3:73:89:d1:3a:67:ed:db:d6:e9:1e:
75:63:b7:3b:bb:d4:37:11:91:99:04:27:51:d1:e9:
53:a0:52:71:db:ae:c0:87:19:5d:b7:c1:9c:ad:f6:
9d:ec:b6:b8:82:23:bc:b5:f3:75:c1:1a:ff:a7:72:
73:67:82:16:24:1c:af:f7:bf:30:7d:91:ce:b5:4b:
7c:34:4f:a4:c9:e3:cd:f7:47:2e:2b:96:9b:b7:60:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:89:6E:55:ED:B5:27:DF:44:DD:F4:10:2A:73:AF:39:F7:51:DF:DC
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8e:37:09:6f:24:4e:47:39:05:dd:00:2f:aa:b9:62:79:b1:
b0:c7:26:6d:ba:b9:f4:1a:f2:f7:55:8a:15:13:09:04:d6:50:
b3:ce:f8:41:11:fb:bc:46:ef:f8:b7:06:fd:b7:73:09:01:67:
8b:c5:dd:eb:fc:06:8a:0e:e6:f4:12:76:1b:91:8c:61:9e:01:
9e:f3:f3:ab:78:91:49:f7:1c:1c:06:74:7d:a3:c8:b0:6f:8a:
83:8b:fd:d2:72:06:19:21:51:81:9b:c3:fe:4d:6a:60:09:e7:
c8:b9:9b:71:f4:24:10:e1:a6:da:96:a1:96:71:9e:4b:ce:eb:
c8:a2:42:10:98:0e:a7:5b:88:1f:d3:0c:f8:f7:13:92:7b:06:
7a:ed:a0:c0:b2:66:a3:3c:67:1f:55:ca:55:db:40:d6:7e:85:
57:8a:30:17:83:94:1a:d1:b9:20:69:d7:aa:10:41:ba:b8:d4:
e2:de:a5:59:80:3a:06:37:57:e1:23:99:a4:27:25:19:1b:7b:
9d:c5:ce:34:b5:fa:fb:d3:26:d3:8d:59:fd:39:c2:2a:2a:92:
f2:a1:72:5a:4c:09:b7:5e:d7:f9:95:d3:6b:9a:2d:c5:30:47:
f4:d7:be:11:82:9f:54:38:e8:88:55:9e:c0:26:6e:f6:73:68:
2c:7d:48:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:24 2025 by rpki-client