Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.mft
File: OO5CsHmLtsmznyBYZ0__0hOyDmo.mft (raw, json)
Hash identifier: gL9mO3RpJ/HSTUjw5w3YASHfKSDvTLurvbj2yYJ04ts=
Subject key identifier: DB:DA:E8:C7:C8:C9:02:8D:55:6C:D1:A9:65:61:1C:1D:8B:67:FB:7B
Authority key identifier: 38:EE:42:B0:79:8B:B6:C9:B3:9F:20:58:67:4F:FF:D2:13:B2:0E:6A
Certificate issuer: /CN=38ee42b0798bb6c9b39f2058674fffd213b20e6a
Certificate serial: 0199FC21C9A3A500D14AA6CCF0A20DFFDA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OO5CsHmLtsmznyBYZ0__0hOyDmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.mft
Manifest number: 5B
Signing time: Sun 19 Oct 2025 11:01:36 +0000
Manifest this update: Sun 19 Oct 2025 11:01:36 +0000
Manifest next update: Mon 20 Oct 2025 11:01:36 +0000
Files and hashes: 1: OO5CsHmLtsmznyBYZ0__0hOyDmo.crl (hash: /dbb/9DTIQZccxKy238XVmIgE/L1yuqqN+2ZOLdc2Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OO5CsHmLtsmznyBYZ0__0hOyDmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c9:a3:a5:00:d1:4a:a6:cc:f0:a2:0d:ff:da:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ee42b0798bb6c9b39f2058674fffd213b20e6a
Validity
Not Before: Oct 19 11:01:36 2025 GMT
Not After : Oct 20 11:01:36 2025 GMT
Subject: CN=dbdae8c7c8c9028d556cd1a965611c1d8b67fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:7a:f4:d6:e3:07:8e:d7:7b:fd:82:f9:a9:
19:b6:c2:83:8f:56:ed:5a:62:19:f0:7d:68:3c:d4:
bc:10:dd:11:ca:7b:34:32:f7:2d:a9:34:43:86:a7:
63:a0:8e:33:44:03:78:ef:a0:0b:44:b1:bd:65:f8:
9b:59:cd:9e:4f:be:cf:d2:c6:ab:cb:c5:ea:cc:18:
eb:ac:f1:71:56:2b:a3:2a:a5:b9:90:7c:fa:4d:a0:
4a:38:34:17:a9:ab:86:ba:1a:82:99:99:39:50:c2:
14:e8:d5:9e:cb:b1:c3:0d:41:ee:f9:3b:88:6a:72:
94:4d:d0:69:d3:a1:cf:b0:fa:42:75:23:cd:fe:53:
41:b3:60:c3:bf:17:15:4d:6d:c7:85:07:6a:a6:79:
2a:10:0a:45:de:b1:a8:28:48:eb:38:8a:8b:1b:3b:
97:72:54:08:8e:c1:7a:c8:dc:e2:41:c2:88:bc:2d:
fa:9c:3e:0c:e3:1f:1b:b8:b8:72:18:66:1b:b1:3c:
87:c9:e1:ab:82:12:f2:ef:3e:06:e3:94:10:29:2d:
24:0d:b1:2b:08:06:83:f1:20:99:b1:13:99:09:fe:
84:1a:9e:f9:3a:af:e6:43:1d:39:ca:f4:49:37:b0:
e9:71:d5:0f:40:22:7d:0d:43:6d:e3:de:1b:de:8d:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:E8:C7:C8:C9:02:8D:55:6C:D1:A9:65:61:1C:1D:8B:67:FB:7B
X509v3 Authority Key Identifier:
keyid:38:EE:42:B0:79:8B:B6:C9:B3:9F:20:58:67:4F:FF:D2:13:B2:0E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OO5CsHmLtsmznyBYZ0__0hOyDmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9db7a3-37f3-4013-985b-4f8005686822/1/OO5CsHmLtsmznyBYZ0__0hOyDmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:17:5e:2b:14:b0:e6:c1:0f:fe:c8:84:c9:77:e3:6b:78:dc:
44:76:32:ae:b1:83:c5:74:89:f7:b8:c0:ec:bf:7a:bc:d4:49:
f3:6d:61:88:39:90:98:37:b9:c8:fa:05:f0:93:94:75:7c:32:
6e:4a:f0:f1:ac:c6:bd:5e:63:a2:5c:73:08:cb:90:63:0e:e3:
7c:de:22:2c:85:91:d3:86:ba:ba:93:81:91:1e:5a:52:ab:9f:
aa:d2:52:af:e3:a8:44:83:2a:b7:27:8a:ab:5c:fd:9a:59:99:
fd:85:d9:bc:7f:2d:0d:69:27:17:20:19:ae:05:82:10:d1:eb:
0f:a6:89:fb:30:2e:f4:ee:78:21:fe:14:dd:8e:9b:8a:fd:a8:
6d:5d:47:d4:5b:64:32:fc:7f:c8:48:79:f3:2a:11:53:80:59:
71:fc:5f:30:4a:50:03:88:b6:17:26:95:7a:51:d4:77:f1:ec:
6f:0f:49:a1:4d:b5:1d:cc:71:b8:f4:41:82:50:e6:e2:ad:a9:
c5:6a:30:f9:9e:d0:72:03:b0:0e:80:07:08:30:88:ca:57:e7:
c6:9a:df:7b:76:66:71:36:a4:42:6d:9b:f6:64:0d:c2:41:65:
db:f9:05:59:4d:51:7a:43:5b:3d:13:c6:69:49:de:9d:1d:60:
97:25:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:58 2025 by rpki-client