Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: 2uQqw9uBQ8sUP2BceKikTrozrS7mOVJemf3bOyot1sQ=
Subject key identifier: 45:E0:3B:B8:7A:E0:D2:3D:51:48:20:F0:E7:30:5D:78:E9:79:EB:29
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019A4F62D283A443C33438BE5D42CF53AB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 0F79
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: mvdRbLFd9mZ5m8iTuYaD2N6lHI+/iT6fkpTJwoRgOKw=)
2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d2:83:a4:43:c3:34:38:be:5d:42:cf:53:ab:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=45e03bb87ae0d23d514820f0e7305d78e979eb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:cf:48:b3:bf:88:39:d2:4b:3a:85:99:dc:
70:a2:98:5e:ea:fa:3d:10:9b:20:37:41:de:c9:e0:
fb:f1:0b:db:3b:5b:e3:fa:74:ca:ed:59:ec:c0:2e:
56:5b:4d:f2:9d:8c:b5:54:ea:ff:f3:60:3d:64:a5:
94:3f:38:46:8d:ba:d0:77:ed:3e:2d:71:6b:49:cd:
5e:51:9a:3b:04:a8:4b:4a:a4:57:9f:42:15:43:9c:
7c:38:ea:ac:9f:06:1b:d9:ee:02:37:2b:56:21:61:
84:29:2a:04:49:4c:3e:fc:7c:9b:d6:b6:68:3c:cb:
03:60:a2:23:79:06:37:b6:d7:c3:36:c5:3f:f1:e9:
90:1f:72:6d:cd:5f:e3:6b:2f:40:06:11:86:f0:6c:
0e:21:0d:1b:4c:44:f1:df:9a:26:d6:3f:15:6d:77:
3b:51:ba:94:02:e3:d7:5d:6f:3c:2b:51:9e:af:6a:
e8:04:72:12:c7:f2:80:9e:7e:58:c2:cf:5e:b2:7f:
73:ea:c4:8f:03:49:63:bf:75:40:29:50:fd:9b:75:
8a:d9:18:43:37:3e:b4:aa:80:0d:ca:0a:99:77:c0:
72:33:a3:ea:ca:d5:8f:d5:36:78:9c:ca:24:54:89:
75:99:15:df:b8:75:d7:f0:f4:42:27:de:55:8f:44:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:3B:B8:7A:E0:D2:3D:51:48:20:F0:E7:30:5D:78:E9:79:EB:29
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:19:e3:8b:66:f0:b0:a4:97:be:de:95:f8:3a:31:1f:fa:3a:
e0:f6:7a:04:0b:14:c1:79:71:bf:ab:47:7d:d7:e0:49:9a:e0:
39:fb:7b:3c:fe:33:87:0a:6a:32:65:65:00:7a:b2:f8:b3:c3:
12:cc:89:35:7b:4b:c5:bd:fa:7d:36:91:e8:73:37:98:bb:5e:
7e:db:40:b3:7a:15:24:df:30:8b:31:8d:29:bb:36:5b:99:c3:
9f:48:4e:76:0a:b1:c4:e4:e6:c4:2c:d8:2f:90:3e:ad:8b:88:
e1:53:e6:83:c0:84:1b:88:9a:d0:9a:54:4f:cf:2a:63:3d:bf:
0d:02:bc:1c:5f:12:65:8e:8e:34:e1:6a:26:29:36:9d:d4:f6:
96:f4:79:73:58:7a:64:2f:f1:ed:07:ec:72:f4:d3:4c:5f:6f:
73:01:61:fd:44:b7:3b:68:5e:c5:4c:74:55:45:56:7a:6d:c6:
56:d7:54:5a:3a:e0:16:a3:ac:02:ff:af:0e:8b:0c:c4:bc:8a:
62:ec:9f:c4:21:6a:ea:ab:6a:39:f8:61:64:67:9d:be:8f:69:
5e:51:62:9f:d2:ae:2e:c8:f2:94:3e:04:bb:e4:1d:05:c7:9f:
06:06:73:b3:59:67:f3:74:0b:ed:8a:f7:4d:26:03:4a:c8:e0:
6b:84:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:26 2025 by rpki-client