Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: BJ+V6xWsr5TtloEk6Tw2pQ++ofe2B5gCRio1TIwzHB4=
Subject key identifier: 23:4A:BB:CD:95:C7:06:6B:4D:8A:24:35:A3:4C:33:D2:85:0F:4C:EB
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 0199FCFD3E023C71E0D704F5306258B25161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 05AB
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: +gQQmpaEk71xaZKbnLT0yFjrSa38ro2gDYsek8/oOJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3e:02:3c:71:e0:d7:04:f5:30:62:58:b2:51:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=234abbcd95c7066b4d8a2435a34c33d2850f4ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:e1:fe:4c:75:a5:88:14:d7:7f:c6:66:5e:
69:8b:8d:c1:f6:e6:d7:ba:e9:00:5a:3a:b8:87:31:
42:56:c8:9b:27:80:6d:4a:77:85:7e:92:04:a9:69:
0c:2a:b9:df:79:30:a0:74:2d:3f:6c:fa:f9:5c:d4:
08:78:36:86:3c:a6:df:a8:bd:ba:15:61:ad:9f:ca:
25:2d:82:6e:23:f8:e5:91:00:10:0b:39:71:ac:69:
eb:ad:9a:a9:6f:d9:73:29:85:a9:57:0f:78:9b:c0:
09:ef:2a:1c:7d:e8:67:4b:37:64:c9:a8:c8:2d:6e:
58:53:3d:ad:9d:76:33:bf:5b:d4:de:cf:af:e2:d2:
72:2b:74:09:4e:4f:6f:44:68:e2:47:7a:13:57:a6:
96:11:1f:7a:c2:c3:e8:28:57:ab:88:6e:93:27:d7:
3e:d0:a4:93:f5:d8:17:06:23:f8:f2:29:8e:08:9e:
43:79:1c:5a:93:2d:ab:a2:89:ce:52:c1:a9:73:76:
08:de:4a:4a:95:69:3f:0f:72:46:f1:04:9b:8c:59:
c2:bb:30:00:9c:8b:db:31:95:fd:47:4f:17:18:f8:
fe:3d:cc:86:a5:35:7e:e3:e5:5d:92:ec:d6:c1:e3:
8c:77:41:d6:5b:82:f5:38:1a:89:bf:2f:76:35:f2:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:BB:CD:95:C7:06:6B:4D:8A:24:35:A3:4C:33:D2:85:0F:4C:EB
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:19:ae:02:c9:cb:d8:2a:29:5b:b6:9f:f4:4c:0b:f3:cb:
60:32:3f:a4:d4:ad:2f:1b:a8:3c:16:00:89:0c:8f:18:bd:ab:
78:5c:79:e5:cd:aa:92:e1:5f:04:70:b8:9d:35:55:28:d8:51:
a8:a5:55:0c:ef:af:d6:85:be:23:02:df:aa:81:2a:8f:87:a4:
16:bc:60:05:72:ef:91:4f:16:db:2e:0d:b4:5a:53:69:70:c6:
34:6a:bf:5a:51:69:5c:ef:c5:0c:23:2b:1a:d2:28:61:fc:dd:
e7:44:4e:52:f8:b3:bf:27:7c:cb:ef:0e:83:26:8a:73:70:f3:
57:14:4c:dd:85:fa:7c:d6:07:a4:df:55:ad:0c:e2:bc:bf:f1:
a9:0c:27:3c:ed:9d:43:3d:1f:37:c8:e8:8c:d6:27:0a:bc:61:
99:51:84:31:80:80:6f:d3:a2:0b:2a:7a:88:b0:ea:55:6f:2b:
74:4e:7b:1c:02:b0:09:0c:c2:40:a1:8f:25:17:fb:19:50:c8:
7b:8e:85:f2:e5:6b:99:51:ca:53:fe:d3:67:1b:75:2c:61:ec:
d2:14:a2:15:b1:d3:3c:99:bb:c8:8c:d2:f8:f0:4b:1f:b4:53:
fb:27:ef:a0:a1:e7:af:fd:f7:75:5d:c5:06:e9:99:f3:02:db:
e5:82:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:54 2025 by rpki-client