Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
File: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft (raw, json)
Hash identifier: XsLkxOe2RafCPUlLsPoUe57yHOKbAWviWdwuNQQh+v0=
Subject key identifier: 8E:B2:F2:0A:B7:CC:25:E7:28:DE:61:F8:95:F9:90:54:D7:63:CA:CB
Authority key identifier: 38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
Certificate issuer: /CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Certificate serial: 019A4EF5EBF4DB9D93B25DEDE4AE3AFA153A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
Manifest number: 128A
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl (hash: dg2ypM8J0pXLdFmT7YPTbVPbWepqlC/k8Yi9t0IYohk=)
2: hbt7WcwBqBoPW6rBuDIQ3SNZmzc.roa (hash: gFxs6hHw3FxfMImk+yNCzFI6L94MQhx1psEtxtAsjbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:eb:f4:db:9d:93:b2:5d:ed:e4:ae:3a:fa:15:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227a96fa64ad95240f0aee0bd374646c6bbee2
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=8eb2f20ab7cc25e728de61f895f99054d763cacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:59:8a:ee:41:34:e4:ca:54:69:36:31:ef:
f1:cd:a1:3b:d6:42:97:76:5d:a3:45:42:1d:82:6b:
79:91:e2:e1:c7:f0:86:23:06:08:46:d7:a2:22:39:
9c:1c:ba:86:28:a1:b0:a9:39:d6:ba:21:aa:e5:71:
69:6c:de:08:05:3b:33:3b:80:4c:bf:39:ca:ab:7c:
71:a2:9c:31:03:d1:ef:bf:02:d3:ed:92:08:85:10:
20:5e:f5:54:a3:be:fa:8e:11:b0:3c:22:d7:77:58:
df:01:1b:f8:60:e2:e1:05:6c:2f:bb:a6:a4:c4:9b:
6e:32:2f:f0:dc:d3:ee:44:e0:cd:75:e8:f7:36:e8:
b1:0d:ee:18:15:bf:5f:01:82:ce:75:e6:87:7c:5c:
01:91:78:33:7e:d9:b1:3b:f6:89:ad:06:54:6b:3c:
08:60:6f:78:70:0f:75:0d:3b:31:fd:e3:84:1b:1c:
ae:a7:02:27:48:ed:24:2d:2e:bb:a6:c4:05:ca:1c:
16:83:27:d6:8e:25:96:11:06:03:e1:ad:9e:da:0b:
c9:45:e8:be:77:06:4b:2d:06:ab:40:1d:dd:43:43:
e5:df:b8:a1:ec:fc:14:a8:ef:b0:21:23:c0:a7:02:
af:a9:4c:33:77:46:83:ec:76:55:bb:fd:21:35:1b:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B2:F2:0A:B7:CC:25:E7:28:DE:61:F8:95:F9:90:54:D7:63:CA:CB
X509v3 Authority Key Identifier:
keyid:38:22:7A:96:FA:64:AD:95:24:0F:0A:EE:0B:D3:74:64:6C:6B:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1cf9ac-10d4-4a5e-a706-d1c9ba08f559/1/OCJ6lvpkrZUkDwruC9N0ZGxrvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f5:0b:6b:ad:ff:50:ee:37:24:04:e1:f4:a7:2b:e0:d3:f6:
0e:cd:0f:46:6b:17:5f:30:e9:e9:17:42:ef:86:f4:b2:c6:06:
17:80:60:35:5d:0e:7f:22:f1:73:ee:bc:d0:da:4a:60:2e:ac:
6b:94:8d:e6:0a:38:22:b7:92:23:12:6d:6f:ff:c8:1c:9f:86:
62:fe:51:9b:f7:3a:f5:e4:67:bb:a2:67:29:e3:42:43:35:03:
8f:1b:8c:a4:a1:3c:cc:3d:4a:c4:a1:aa:fd:5a:ec:22:8a:1d:
18:96:ae:b3:05:b7:51:71:ae:36:ce:f5:28:c2:88:d1:ac:c9:
35:b5:fe:7c:d0:32:cf:0f:2f:3e:f2:93:ab:04:3e:0b:ed:30:
35:26:ce:20:b7:59:ef:a7:19:3a:cf:d9:56:62:1c:f4:5c:e5:
93:b8:12:c3:57:a3:80:a1:ed:b3:b8:b5:0e:b0:2c:93:bd:f2:
ca:62:b4:28:d1:d8:c3:05:63:0f:2e:41:4c:90:d6:fa:d4:e3:
1f:68:2e:74:1b:c8:02:f0:44:4f:c7:7a:cc:17:eb:08:fb:7c:
58:0b:b6:22:67:ee:28:14:6f:59:42:13:46:64:d6:99:4b:53:
39:79:2e:24:53:56:bd:33:20:e6:ef:0d:7b:00:67:4b:50:7a:
8b:08:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:55 2025 by rpki-client