Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: T3F9eHQtmtVMTRWQaGlRzRYPQI0MsmyUUzwc4i73YvM=
Subject key identifier: C6:3A:5C:97:3D:E1:89:BC:CC:0B:B9:54:69:77:EE:32:CF:43:FF:33
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019A4EBD44250FE37152FF00BEA798621CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 0332
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: AOJppdPiYdL7oLK0/w10vvqGoi6bkTIQVxmqevFdwd0=)
2: nQ2QOCXNiBhA_oIbltotIC2riD4.roa (hash: 1MmZzBOdKL/dvmTjwcqKsATX+RAPJW/TTlWipI0mLW4=)
3: v7E-tTxflPnqxg3MpmR53F2Z6QU.roa (hash: Ghunk7sqbhHZuCust1Ewo+nGVQQe1Aek1JX2tRRm0JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:44:25:0f:e3:71:52:ff:00:be:a7:98:62:1c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=c63a5c973de189bccc0bb9546977ee32cf43ff33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:a0:23:6d:fb:69:cb:07:04:90:e2:b3:6f:
f4:3d:38:84:11:c9:8b:c3:d6:3b:1f:f5:bc:52:5b:
f2:a9:6d:cc:ab:04:e7:b9:af:d4:67:9c:72:d0:f5:
5a:54:98:18:97:fe:9f:05:91:bf:a7:9f:cb:0c:51:
7d:02:fe:cb:7e:e6:90:a3:d4:7c:16:0f:7a:db:ee:
e9:67:0f:b1:1a:62:94:de:70:52:8e:56:03:1d:12:
90:e1:cd:c5:fc:b4:22:b3:70:50:5d:0e:e1:99:81:
e1:e0:f3:29:7d:cc:0a:d6:15:83:69:e3:d7:ac:f5:
bc:57:78:13:b4:cb:25:fa:b2:7a:6f:94:21:7a:a4:
14:2b:45:57:ef:a2:5d:2a:34:4b:e4:6d:1e:11:c4:
4b:5b:d4:1e:5f:12:55:00:28:c0:0f:44:e6:dc:21:
4b:56:c7:fb:a1:df:5b:99:44:71:a5:c5:1c:dc:c0:
5b:4f:f4:e4:9a:2d:ba:55:ec:83:ca:12:d7:4a:b2:
a1:ac:23:e5:ce:ae:be:ac:48:c8:ef:3a:9e:9c:2a:
28:9a:df:25:74:e2:9d:ff:9f:2b:dd:7c:c1:d7:d2:
a4:56:08:ae:5e:68:ce:43:b6:68:11:e0:85:71:d4:
83:a6:72:30:74:40:f0:24:7d:ab:e5:3c:2a:d4:0c:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3A:5C:97:3D:E1:89:BC:CC:0B:B9:54:69:77:EE:32:CF:43:FF:33
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:18:bf:f7:a7:fe:c2:5d:5d:a0:16:f5:2b:b4:9e:c1:c3:fe:
32:d9:ed:3e:f0:83:78:06:6b:7d:d1:d1:7f:3e:4d:8f:ca:53:
eb:98:f5:3c:13:53:4b:65:b0:59:08:60:ea:73:82:a6:14:67:
b0:ff:22:19:6b:27:48:5b:f1:99:6f:97:f3:bc:90:35:e1:09:
23:fc:a2:c7:df:26:1d:06:8d:c1:85:58:ca:c9:e5:92:15:99:
21:bd:51:fe:06:e1:02:87:f8:f3:1e:31:08:67:65:7f:ed:34:
d4:06:f5:03:79:6d:18:49:c5:aa:c2:b0:5d:35:36:0e:af:d1:
00:db:d0:3b:f7:b7:82:0b:0f:48:da:5f:0a:c7:64:f9:42:1d:
e0:d7:60:e2:b6:9b:ff:cc:d4:53:be:fd:4b:4e:13:1d:36:12:
93:2f:aa:fa:50:e9:16:38:68:6c:7c:56:fe:7c:78:aa:34:b6:
1c:68:64:ba:63:ec:1f:96:a1:9a:69:93:27:b2:b3:c7:6c:e8:
93:65:bb:03:bc:4d:21:32:b2:04:89:f0:6c:e2:58:2b:51:20:
72:95:67:5d:63:65:2e:aa:ed:1c:eb:cc:4b:bd:b8:53:bc:09:
14:70:21:97:d9:6c:8f:eb:ff:02:d2:f0:0e:47:ad:61:b3:de:
43:02:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:29 2025 by rpki-client