Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: 2gvSayT3jGSGjvFWJwOg/mEPhvOboBQuDatg/1C33qQ=
Subject key identifier: 37:87:3C:D8:B9:77:42:B0:34:5E:4A:B4:95:2E:EE:EA:C5:09:D4:A3
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 019A4E1918B5D7240B20E18C8BABE88A0B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0FCB
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: /9JyzPAKxigocQ3mKpOuDpPuNOn/0GNkIKkF1hEILkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:18:b5:d7:24:0b:20:e1:8c:8b:ab:e8:8a:0b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=37873cd8b97742b0345e4ab4952eeeeac509d4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:ae:88:a1:f3:71:0a:0d:e2:c3:b6:88:43:
71:cf:5b:51:f4:8d:89:fe:e8:ee:46:2c:11:aa:4a:
df:2d:56:ba:c8:0a:40:b4:53:d6:48:f8:45:84:f5:
96:3c:d1:74:5c:df:f7:ec:38:1a:f8:e9:5c:7a:cc:
0c:1d:f2:cb:25:23:c3:ce:1e:86:af:36:a5:aa:a2:
b0:1e:0a:ee:9f:b1:f6:eb:b0:57:89:5a:75:1e:d8:
70:9f:f1:31:b3:4b:0e:81:a9:54:ef:d1:d6:3a:cc:
4e:18:b2:11:a6:97:3a:5e:dc:69:99:e1:36:7f:98:
b6:0a:28:7e:12:08:46:e2:fd:38:7a:78:98:ab:7e:
f2:71:c5:cf:7a:9b:56:77:8a:3e:f9:59:1b:c2:98:
bf:84:7d:48:b7:53:8f:d2:a0:aa:c8:8c:de:39:28:
5b:ba:15:a8:20:d6:0e:d2:32:fe:e7:78:35:4e:6b:
55:2a:87:bc:9d:7b:42:0b:75:f6:a2:5c:17:aa:ea:
05:b0:12:f4:66:c8:57:06:7b:7b:98:0a:52:24:58:
05:c6:f5:ae:a7:d0:f8:c5:89:9b:c4:4d:b4:09:e2:
32:57:71:cd:27:c1:d8:30:0a:9e:3f:aa:60:23:a9:
5f:66:fc:c7:80:c7:ae:8b:fd:8c:b6:11:3f:73:57:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:3C:D8:B9:77:42:B0:34:5E:4A:B4:95:2E:EE:EA:C5:09:D4:A3
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6c:d5:52:13:57:37:0b:3e:c9:75:3d:73:98:91:3a:03:82:
4f:32:ba:eb:2a:d2:02:58:f8:42:bb:f6:f6:18:bd:c5:dc:6f:
5a:db:18:a7:92:3c:ed:99:76:41:aa:fa:d6:da:2b:ec:2e:d8:
cb:27:a7:94:47:a2:3b:21:64:15:34:3e:e2:f2:58:86:1e:4c:
1a:ab:29:ed:82:31:d6:74:62:e3:3e:7b:1a:28:6b:c5:a5:31:
54:fb:f6:ed:6e:69:02:ba:56:d6:40:19:91:5c:32:56:a5:49:
e8:2e:43:10:ab:e7:be:d3:d1:f2:80:f4:48:b4:5e:08:ac:49:
cf:dc:2d:31:4f:da:69:d0:32:87:74:a8:69:e0:bb:f5:ba:af:
f0:86:65:fc:c2:c3:c6:27:3b:11:7c:a0:98:f3:bb:b1:08:76:
89:72:9d:15:09:08:b7:f8:98:f2:15:2b:66:68:b9:08:35:79:
cd:e2:dc:08:26:61:cf:5f:9c:4b:ff:ef:80:82:26:8a:ae:c8:
70:b9:f0:2c:3a:fe:c1:5f:5b:1f:96:5b:0f:1c:cd:f9:fa:12:
a0:9d:32:31:59:e5:cd:fa:3f:c3:1b:9f:5f:fd:ed:23:8f:bd:
51:1a:8b:08:ec:b5:ee:27:7a:20:df:85:4a:5d:0b:ef:d9:24:
21:65:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:30 2025 by rpki-client