Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
File: Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft (raw, json)
Hash identifier: NjdH1a5O2xY909AQzrJ3DWtuuLZQoJxVceMzAtgoGlw=
Subject key identifier: C3:19:D3:EA:DC:87:3D:25:F0:DA:2E:33:EA:13:FF:7D:68:7E:AB:99
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 019A4E86AC169E83BF322E0F7DF52967C2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
Manifest number: 1089
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl (hash: cwtaM6Bu4iO8glXGb/UszFhF2Ja6+6cXCfQQYir8rtY=)
2: X2ZWwlq5JgdZCBhrE-skZo9Zodk.roa (hash: jm4EeR/8LyEqdFtytjbhKQG8mWbwHJBMpiLCK8D6HPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ac:16:9e:83:bf:32:2e:0f:7d:f5:29:67:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=c319d3eadc873d25f0da2e33ea13ff7d687eab99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:40:48:b6:68:2d:76:fb:b1:df:e2:37:b6:
67:bd:4f:10:39:12:ca:63:7e:79:3f:2a:be:a1:c5:
99:a3:cd:c0:3f:03:f4:c8:da:af:9c:bf:b3:ef:75:
9c:09:72:0b:a1:cf:fb:43:b7:1d:e8:7c:09:e9:7a:
b6:88:ab:45:c1:c5:52:81:0e:4f:77:93:71:0c:ed:
95:90:f3:1e:d7:04:b7:95:53:e4:77:a5:e2:9f:fc:
3f:c7:e0:47:da:ab:4a:f5:bb:15:2e:5e:82:f3:27:
f8:30:68:a8:d7:38:75:e7:85:61:69:d4:34:7e:c7:
0c:7e:17:ae:12:ef:7e:95:c7:80:e0:44:3e:22:45:
91:7a:78:93:75:e5:0e:39:e6:c9:15:ed:78:de:08:
48:00:54:26:9e:61:96:57:69:26:78:fe:ea:65:1e:
ec:d1:d1:90:2f:8c:89:92:a5:9e:d2:48:e2:70:63:
c2:75:1b:97:1e:16:c3:e1:43:bd:15:1d:6d:91:14:
21:56:22:be:df:50:1c:b9:5f:1b:eb:34:de:9a:a3:
9a:ec:7a:1a:db:9d:50:f8:a9:14:ac:3b:94:dd:18:
60:ef:e6:e3:2e:72:57:ed:2e:a3:a8:80:27:67:f6:
65:f1:7d:e2:c2:14:35:27:0d:85:f6:5c:fc:71:d0:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:D3:EA:DC:87:3D:25:F0:DA:2E:33:EA:13:FF:7D:68:7E:AB:99
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3e:6e:6c:83:ff:eb:71:c0:69:21:44:45:84:65:a0:9e:86:
2a:02:cb:8d:45:71:5f:68:72:08:66:6f:63:42:e3:ee:1f:5e:
ea:a5:9c:ca:71:43:97:36:72:dd:04:e9:62:73:2b:38:da:b7:
6c:16:6a:78:bc:2e:99:6a:bd:e3:da:ec:2b:e1:55:52:d9:b8:
79:10:5d:52:02:3e:b7:a6:c1:1e:95:2b:18:26:20:8a:36:b0:
be:50:7b:ee:10:a2:3e:9f:48:ae:b9:b5:fb:6d:ed:f7:25:86:
e5:6f:21:98:c1:c9:b0:87:21:4b:60:fd:e5:33:1d:56:fb:f1:
4b:58:3b:cb:77:a2:6d:a9:15:28:f8:99:da:58:f3:89:0a:95:
33:31:e6:4c:b4:64:19:75:f8:bc:ff:c5:7f:bd:55:41:2b:66:
5f:53:a1:85:f6:9a:b6:8f:34:77:08:48:e4:03:ea:bf:12:19:
ab:33:79:7f:15:fd:b1:a6:1f:6c:f1:8e:17:a3:09:09:0b:38:
2f:23:23:cc:48:e2:b7:13:71:47:93:1c:58:5c:35:f6:d9:95:
be:2d:8e:4e:9f:dd:aa:8c:74:0c:f8:2c:02:ea:30:73:93:64:
45:d6:c2:91:7b:72:ef:fe:5c:0a:34:65:a1:26:dd:e5:7c:5e:
b4:a9:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:43 2025 by rpki-client