Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: KW4+GPyzydGSQljpOxvZceiApECljEbi0nRiFs0+B/I=
Subject key identifier: 48:C2:49:66:D6:B5:5B:3B:31:EE:30:8D:0E:30:BC:44:8A:04:C3:DA
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 0199FF22CF97C16E11443DD3FEA5AA83060D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 0734
Signing time: Mon 20 Oct 2025 01:01:35 +0000
Manifest this update: Mon 20 Oct 2025 01:01:35 +0000
Manifest next update: Tue 21 Oct 2025 01:01:35 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: +G4DD6YYYC0FeaDgPIeQMRXm+K7f07W1JofXdsXiY40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:cf:97:c1:6e:11:44:3d:d3:fe:a5:aa:83:06:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Oct 20 01:01:35 2025 GMT
Not After : Oct 21 01:01:35 2025 GMT
Subject: CN=48c24966d6b55b3b31ee308d0e30bc448a04c3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:91:2c:6d:fe:61:2d:c4:a5:b8:a5:ba:9c:
a9:8c:8b:99:70:8d:5c:c2:ca:e8:84:b7:0b:40:62:
38:a8:dd:a3:71:80:65:a3:6c:76:8e:27:62:71:44:
57:b8:30:f5:3d:0b:c8:74:23:0c:3c:12:14:bb:be:
a7:79:0c:15:58:20:34:b8:6f:66:e9:00:d3:eb:8c:
25:b8:ee:7b:92:01:c1:f0:50:b8:40:5f:92:5b:0b:
e3:0b:cd:be:bc:30:2b:2b:c4:5d:c1:83:6a:55:ea:
9e:77:0c:30:6c:73:5b:75:27:6f:29:6c:1f:9a:9c:
fc:04:ab:e0:1c:30:56:4b:22:65:95:3b:f9:b5:c3:
bd:4e:0b:47:cd:3c:cf:c6:c6:25:37:dc:8c:49:3f:
1b:47:0b:53:5f:2f:94:25:4f:9e:55:8b:63:27:9c:
11:74:c3:e4:40:38:f1:75:38:1d:f7:71:26:f1:6b:
a6:f9:0f:90:37:df:03:a8:d6:f5:22:d3:85:68:60:
ca:8c:14:c1:7d:1e:26:4e:34:cd:79:a5:30:82:51:
00:43:bf:bc:95:70:3f:f5:88:3f:ea:4f:21:5b:f3:
9e:13:6f:5d:9d:ed:55:1a:2c:1d:54:eb:15:22:a0:
b3:b3:71:35:52:fd:00:6d:0c:3d:5f:3e:b4:b3:9a:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C2:49:66:D6:B5:5B:3B:31:EE:30:8D:0E:30:BC:44:8A:04:C3:DA
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4b:bf:44:91:81:18:0b:5e:9b:59:93:b2:35:4a:12:72:cd:
4e:d1:f6:75:ea:77:98:5c:0b:12:44:18:97:a6:20:68:7d:4e:
62:e0:8f:a0:13:ed:8b:79:06:cd:76:9f:d2:de:c0:d6:43:d6:
c5:61:79:c8:91:a8:19:e1:d1:c7:73:c5:b7:d7:9d:a6:5b:f5:
db:17:e9:a0:a9:aa:f8:fe:29:fb:18:5a:76:cb:61:f0:4b:15:
98:ee:bb:d6:cf:66:17:8c:87:40:33:d0:c6:01:51:12:46:de:
07:ca:b0:8a:a7:3e:b9:e2:3e:71:8f:ec:b3:b0:36:57:c1:7b:
0e:c3:51:72:41:bb:32:ed:b2:88:4b:4f:79:10:82:e6:70:70:
1d:1d:2a:5a:34:2f:5d:e9:d9:df:ba:eb:9c:6c:bb:71:d1:6a:
89:1f:3e:aa:9c:a4:f8:02:38:da:20:1f:af:63:9f:10:a3:b6:
37:51:70:6b:87:7c:77:bd:f5:aa:57:d0:c5:94:4c:9e:65:89:
91:82:ca:2c:64:d8:ee:2c:53:8e:ec:1c:47:40:64:10:21:0e:
5b:e2:42:e0:6b:16:2f:9e:14:d0:92:47:3c:4b:2c:3f:f0:8c:
8a:08:fb:84:57:e9:2a:ea:18:f5:e4:4c:4d:12:10:9e:72:60:
c1:3a:89:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:17 2025 by rpki-client