Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: LTqJIPe/OFSoYBo1DyTjQ8tH30mw8zh4YyHZrG7Qdv4=
Subject key identifier: C9:7E:CA:70:CB:83:33:E5:B2:BA:52:40:40:91:6D:C4:50:D0:BD:11
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 0199FBEAA8A3036421850EB42F226D1E852B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: qTdSVEPxd+cnlBv5dVzFrE7fYe8vpFqKmfqy+B/u7XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a8:a3:03:64:21:85:0e:b4:2f:22:6d:1e:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=c97eca70cb8333e5b2ba524040916dc450d0bd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:c8:b8:bf:ca:21:c4:e4:42:f5:f1:cf:8c:
c6:b5:16:ea:89:49:c2:af:29:f5:fd:a1:a8:bf:ab:
52:3f:69:30:8c:1e:71:b2:cd:e8:68:6e:79:2d:6d:
51:b0:e2:82:5f:e2:f8:45:78:5b:35:a7:1d:e8:5e:
f4:fc:f8:bd:26:d0:f1:99:4f:4c:b4:dc:d5:e1:98:
32:85:ad:e2:ff:1c:3d:32:16:a4:3d:37:1d:13:4c:
bc:a6:1d:c6:b9:c8:10:da:46:26:20:e0:13:0a:2e:
66:57:9f:0b:13:6c:e0:5d:1f:75:1e:99:db:7f:b6:
20:00:aa:98:b8:fb:5f:7b:95:be:4b:54:cb:22:2a:
ef:ac:dc:f0:93:4d:d7:21:52:e1:83:0b:db:f3:4f:
fc:d2:22:03:53:cb:4b:c1:5f:36:b6:ba:c2:49:79:
6e:47:03:3b:bc:87:18:7c:85:44:d4:9f:98:e3:5b:
08:99:9b:44:4f:b5:af:54:cd:87:bf:ed:b4:94:3c:
fc:80:8d:68:d4:eb:c6:c4:a8:21:70:eb:8f:55:4c:
7b:9a:30:1c:f1:59:b1:50:8b:b4:eb:f8:61:93:a1:
c6:5b:df:fe:7e:88:c3:a5:3d:f0:a0:99:7c:17:20:
88:c7:22:0b:95:57:01:84:f2:99:64:ed:b3:8e:72:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7E:CA:70:CB:83:33:E5:B2:BA:52:40:40:91:6D:C4:50:D0:BD:11
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c8:78:f4:51:b4:58:0d:7a:c4:90:6c:e2:90:bd:39:e4:31:
7f:db:95:fb:ef:ac:e3:c1:cd:3b:b7:f3:d4:51:c6:86:e8:49:
6b:36:d4:e6:32:13:8a:43:a2:9c:23:c4:4e:a8:d3:9f:cc:b1:
7a:e2:cf:e7:aa:e1:28:17:83:53:10:1a:87:e5:69:e6:fc:e1:
b4:a8:77:9d:e3:cf:98:7f:69:95:36:72:66:71:80:40:df:dc:
2a:6c:04:4d:18:c1:71:2e:63:f8:c2:0f:72:d5:5d:c8:be:05:
b7:77:32:d8:75:77:8b:e9:60:1f:62:e0:a8:19:b1:6c:12:ec:
f0:5f:e8:e8:14:40:c7:2f:c4:ad:b4:9f:4c:a4:b8:40:52:08:
29:11:47:79:d5:9c:0e:aa:6e:20:2b:74:b8:67:10:d3:77:fc:
da:b2:d5:43:67:cf:a5:96:f2:6c:e1:a4:38:8f:9a:c6:93:2f:
a0:ff:9b:24:6f:1d:81:8b:21:f9:93:4f:8c:0e:ac:df:76:ac:
63:05:ef:49:35:f3:3a:44:5c:8a:1b:af:94:30:f8:aa:23:79:
3c:c1:e3:71:4b:d0:43:9a:13:a6:e9:c5:6b:19:33:fd:55:3a:
ac:bc:9e:6c:98:8d:ee:76:99:ce:9e:ba:bd:f2:d7:e2:c1:74:
8b:fc:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:13 2025 by rpki-client