Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
File: oewv8gIW07xkdbhQpGXjYvTs7s0.mft (raw, json)
Hash identifier: nRaI5Ff0ASwcK1f9LuembU0o0OuCA/eODkdrEoaN2A0=
Subject key identifier: 33:EC:9D:99:AC:A2:FB:36:50:AB:10:76:59:79:83:61:C6:06:1A:42
Authority key identifier: A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
Certificate issuer: /CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Certificate serial: 019A4FCFC1B31EE7F2FEB5A9240D40F313C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
Manifest number: 038F
Signing time: Tue 04 Nov 2025 17:00:06 +0000
Manifest this update: Tue 04 Nov 2025 17:00:06 +0000
Manifest next update: Wed 05 Nov 2025 17:00:06 +0000
Files and hashes: 1: oewv8gIW07xkdbhQpGXjYvTs7s0.crl (hash: MKLrx64v2HX2XJAhMs4FKI6pO3MEcVU52oe8nXgdrDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:c1:b3:1e:e7:f2:fe:b5:a9:24:0d:40:f3:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Validity
Not Before: Nov 4 17:00:06 2025 GMT
Not After : Nov 5 17:00:06 2025 GMT
Subject: CN=33ec9d99aca2fb3650ab107659798361c6061a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:43:c1:8b:b2:07:4e:49:97:a0:c3:4f:7e:
40:cf:38:bf:14:aa:dc:ff:56:e0:db:73:1e:26:f5:
0a:69:ae:62:4d:22:92:77:6e:55:b8:7c:ad:a2:6e:
9c:4a:15:77:0b:ac:d5:ea:45:86:72:ba:62:b6:4d:
3f:7c:11:3d:c4:33:24:27:5a:1a:33:28:a0:fe:d0:
63:cf:af:23:8e:d3:0e:3e:49:55:06:79:26:3b:d4:
c7:27:9c:72:b3:d1:5e:3c:8b:64:80:5a:ad:5d:d5:
38:54:cb:7e:60:9b:b0:21:be:99:f1:b7:0c:0a:4d:
d6:42:2c:a9:27:26:b9:a4:05:f7:c0:30:6a:ac:9c:
0d:30:c1:ad:c2:f3:68:59:28:ee:7b:3e:bd:55:61:
7f:a1:83:e4:10:98:4f:3b:7e:06:f9:87:d2:0b:67:
9a:94:1d:3b:4c:ce:1a:de:12:49:95:73:7c:83:65:
5e:f0:4c:52:62:63:72:38:88:cd:01:76:2b:09:ac:
68:93:53:d8:97:d1:4f:39:4f:25:7c:d3:bd:68:43:
7d:fe:42:84:de:4c:f6:a7:d5:3f:22:80:7b:e7:2c:
88:e2:e0:69:d7:2e:b3:9a:d6:1a:59:4a:3a:81:c3:
a8:ea:b6:30:c5:49:db:d1:42:26:f6:8f:8b:60:6a:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EC:9D:99:AC:A2:FB:36:50:AB:10:76:59:79:83:61:C6:06:1A:42
X509v3 Authority Key Identifier:
keyid:A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7a:db:9c:7a:9c:29:78:e6:5b:66:c8:05:48:0b:3d:19:a0:
6a:2d:35:0c:bf:23:7f:ee:fe:f6:91:de:34:41:c7:ba:ca:ba:
de:cd:6a:b0:1c:cf:89:ab:7d:7e:c3:12:df:e9:c4:6d:b0:4e:
55:7e:26:19:c7:fe:ec:f2:a0:6f:aa:0e:e5:2b:1d:6a:f3:10:
8c:d3:cb:52:1b:32:15:03:11:8e:f8:ca:bb:7b:55:8a:48:c7:
05:c6:71:15:0e:25:da:d4:fc:3d:b9:01:44:d2:ce:18:f7:8d:
59:ce:ee:a2:62:df:98:07:3e:d9:54:a3:45:71:0e:c8:69:54:
9d:5b:10:8b:9c:19:6c:81:a3:37:8a:9e:7e:2b:aa:67:84:1b:
e1:16:f5:eb:4b:3a:90:07:25:b0:bf:eb:fd:91:7c:39:7e:87:
ae:fe:84:15:77:67:70:dd:1d:d8:08:98:07:96:28:3d:7e:36:
e6:ea:1b:55:e6:90:59:cd:11:46:15:cd:a9:bf:51:37:9d:3c:
77:cc:d6:2b:fc:42:78:58:7b:b8:a8:15:fa:80:2f:50:0d:22:
68:2b:24:27:29:7f:b3:2f:df:cc:8c:1e:84:e5:fc:d2:18:55:
8b:eb:9f:90:73:b3:44:0f:95:77:40:d7:9a:c4:20:ee:92:35:
2d:2f:db:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:04 2025 by rpki-client