Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier: AVtzSjkoU0kF0QOF2ELs9OWRj5a6hxSjv+ofn5HexF0=
Subject key identifier: 7C:E2:9D:58:A5:48:C7:02:2D:80:C1:35:1B:6C:41:D6:DB:98:AA:46
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 019A4F61DB6928E472030A9D55DB3691F530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number: 034A
Signing time: Tue 04 Nov 2025 15:00:04 +0000
Manifest this update: Tue 04 Nov 2025 15:00:04 +0000
Manifest next update: Wed 05 Nov 2025 15:00:04 +0000
Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: d7oXNbDm0kKOVU7p7q0U6cObXNeQHucLfAUzrwXuY+c=)
2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:db:69:28:e4:72:03:0a:9d:55:db:36:91:f5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Nov 4 15:00:04 2025 GMT
Not After : Nov 5 15:00:04 2025 GMT
Subject: CN=7ce29d58a548c7022d80c1351b6c41d6db98aa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:34:e3:00:f4:73:f2:8b:85:a3:a8:14:0a:
04:79:49:c7:92:f3:36:44:ee:d1:0a:eb:3b:31:0c:
38:e9:74:3d:3a:de:b7:20:c6:4f:5f:5b:72:b3:76:
c4:e6:f7:40:38:9e:f2:3a:40:b7:19:a5:5f:90:75:
cb:a5:33:26:78:e7:ee:73:39:e2:47:de:70:25:12:
be:c9:08:2b:3c:32:aa:76:a5:d7:02:6e:2e:4f:ff:
18:b4:e9:35:34:3d:21:57:55:63:f3:f9:9c:3d:65:
71:ea:36:94:73:46:12:a2:be:04:cc:7c:ce:76:2c:
2e:0a:f3:2b:e5:03:50:89:6d:0e:cf:1e:62:da:4b:
af:57:14:2f:7e:5b:b8:89:92:b7:7e:e9:0a:8a:f4:
1e:0a:54:5c:6f:d4:a5:40:2b:49:45:fa:59:c6:f9:
78:a5:0f:7b:c6:6f:f0:22:ec:0a:28:ec:b3:cf:04:
89:3f:6a:7d:67:51:40:b4:5d:e2:04:6a:c2:04:65:
34:30:82:aa:1d:93:18:45:5b:d2:0c:ce:a8:3f:c5:
46:6f:c4:0c:47:de:53:6d:6f:f2:7d:f9:e9:50:4f:
66:8a:24:84:7f:c7:1b:2c:6a:ee:52:89:c1:53:d7:
d6:6f:dd:f5:70:d0:01:11:21:e5:38:13:a2:62:4d:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:9D:58:A5:48:C7:02:2D:80:C1:35:1B:6C:41:D6:DB:98:AA:46
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:66:47:c9:e9:21:04:72:47:e0:48:e0:2f:83:77:2e:24:
4f:13:9a:7f:60:e8:b7:f5:25:0c:b6:3e:fb:1b:c8:12:d7:53:
03:1e:e6:e4:54:74:57:b7:8e:41:97:cb:e2:7f:87:c1:83:62:
7f:99:bc:c0:59:14:e7:0b:09:f7:23:09:e8:e4:08:ad:69:d0:
bd:07:b9:63:0c:9d:f2:76:91:cc:bf:c9:71:1d:06:af:9e:10:
d1:c2:0e:67:b9:91:9e:46:9e:af:27:c8:31:fe:af:b8:69:9d:
21:f2:30:6e:20:4b:a4:3d:7f:f5:18:5d:b1:1a:b6:72:c7:59:
2a:a8:0a:63:79:e2:82:0c:6b:37:95:38:c7:3d:23:11:49:92:
39:af:5a:8c:81:63:70:97:3c:b8:29:0e:a6:30:eb:a4:ef:69:
cd:fb:92:4c:3c:24:1e:36:53:73:8b:7c:49:9e:fe:31:34:33:
15:97:a5:a7:39:37:c1:74:b0:19:fc:e8:3c:fb:a8:da:4f:31:
f6:ec:ea:67:3b:69:31:53:10:80:79:13:d7:84:46:06:04:c5:
24:9e:18:1b:c7:d8:51:d9:8c:75:72:da:c6:dc:f0:71:51:28:
46:b5:89:6a:b7:9f:85:d9:09:68:e0:f3:c0:45:5e:5a:09:42:
1e:9e:32:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:13 2025 by rpki-client