Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: 1J33YxkPQEtoppYGouzbi21W+/t+q3WqPNf8arVnMZw=
Subject key identifier: 56:FA:F1:D4:FA:1D:71:86:F6:8E:B6:2E:0E:4E:2E:2A:02:1B:0D:EE
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 019A52D19D5FBC254D26A170E6678C9E37C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 1492
Signing time: Wed 05 Nov 2025 07:01:00 +0000
Manifest this update: Wed 05 Nov 2025 07:01:00 +0000
Manifest next update: Thu 06 Nov 2025 07:01:00 +0000
Files and hashes: 1: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: N3yrMoNcUoatwWhunu5e8wfhtO6w2GfN7f/GMUhkpOg=)
2: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (hash: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:9d:5f:bc:25:4d:26:a1:70:e6:67:8c:9e:37:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Nov 5 07:01:00 2025 GMT
Not After : Nov 6 07:01:00 2025 GMT
Subject: CN=56faf1d4fa1d7186f68eb62e0e4e2e2a021b0dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:35:23:b5:ac:87:37:d9:1c:a8:2b:19:57:
7c:c9:05:32:ff:d8:46:04:c4:6f:b7:04:c5:77:7a:
02:23:ad:11:6b:22:22:61:ac:61:dc:5c:d3:9c:18:
2a:87:d4:e7:1d:71:07:c0:d4:54:ff:44:e9:2a:1f:
21:1f:8a:41:0f:dc:2c:fc:c9:d6:62:3f:73:66:e5:
54:47:55:aa:4d:b7:3d:62:c9:c4:bf:32:0b:53:99:
8b:90:2f:0d:2b:f7:70:30:39:eb:26:0c:ad:02:56:
5b:e1:69:ca:b4:e0:d3:fc:c2:d5:7c:ea:86:91:e2:
6f:40:b2:c2:29:a3:38:5a:11:81:dd:f9:53:25:c7:
23:08:a0:6b:fe:51:c4:41:15:db:9e:4c:39:77:80:
e2:64:27:ef:b7:40:b7:fd:8e:a8:8e:71:47:ce:1e:
ab:36:49:9d:e5:a0:ea:d3:0e:68:21:77:fc:88:c3:
3e:4e:c6:f2:0d:6a:64:c2:b5:e0:b5:2d:ea:70:ce:
7a:91:d5:48:52:d3:23:b3:0a:d2:7f:a4:37:54:e1:
12:d1:34:b7:43:3d:9f:e9:43:65:35:b5:da:2a:ee:
98:76:31:d3:22:df:85:4f:c5:80:99:59:c5:e6:e9:
6f:d5:06:9d:32:e8:41:2e:f5:6b:ca:f9:c3:a4:d4:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:F1:D4:FA:1D:71:86:F6:8E:B6:2E:0E:4E:2E:2A:02:1B:0D:EE
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:51:9c:06:d1:39:42:c2:4e:5d:15:70:b3:92:53:e8:20:cb:
b2:b8:90:cc:dd:94:40:0f:ff:5e:b1:92:8c:83:39:aa:76:db:
ed:62:37:f2:55:d0:9a:d9:61:bb:e3:bc:40:ee:53:57:5c:dd:
63:f1:b7:aa:7c:ec:37:63:95:46:c8:2b:b8:be:97:f0:1c:63:
1a:6a:4d:4c:e7:a9:1a:71:7e:3c:2e:af:93:a7:a5:b4:20:c3:
6a:d9:07:a3:81:99:11:bd:23:6c:50:be:f8:d5:a0:1d:a9:b0:
ef:12:66:45:7e:32:17:8a:c8:d5:91:95:20:80:35:36:d5:63:
88:f9:90:e9:ef:d8:79:84:52:05:bf:8e:a7:c7:59:da:af:9b:
3f:45:f3:7e:fe:74:45:24:82:f3:da:77:bc:a6:47:1d:0a:18:
01:58:d9:14:2d:0b:58:ea:4d:78:01:0f:5e:f6:bf:b2:71:eb:
7d:a2:cf:aa:a0:dd:fc:26:1a:f5:3f:1d:90:07:90:96:80:ad:
0f:1e:e3:09:7f:e0:db:94:38:ec:f2:db:8d:e2:0d:84:b0:c5:
8b:71:d7:32:7c:1f:62:87:a3:18:7c:6f:d8:27:f8:29:f2:4f:
5a:da:f7:b0:af:5c:2a:da:31:e4:97:c9:7e:20:d8:d0:2f:a5:
ef:3d:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:31:43 2025 by rpki-client