Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: BtosZxxbCB5jNZ9r+ka5s06yJdqZGAYWdb7bAzeMzvo=
Subject key identifier: 24:29:B5:0E:E8:94:8D:64:00:37:4F:53:A7:E6:22:EC:A7:E8:03:E3
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 019A51F596FACA7A92C7967DB60596B24FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0DF4
Signing time: Wed 05 Nov 2025 03:00:40 +0000
Manifest this update: Wed 05 Nov 2025 03:00:40 +0000
Manifest next update: Thu 06 Nov 2025 03:00:40 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: uHObwNcwHxgj8H5xqlV9L7tPbzRHpEKphAJvG9cfQEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:96:fa:ca:7a:92:c7:96:7d:b6:05:96:b2:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Nov 5 03:00:40 2025 GMT
Not After : Nov 6 03:00:40 2025 GMT
Subject: CN=2429b50ee8948d6400374f53a7e622eca7e803e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:85:17:52:b6:e1:80:e3:14:67:bf:d3:57:
fd:99:18:57:3f:f1:4f:b3:d1:9f:41:ea:e1:82:e4:
4f:9b:40:45:00:3b:23:c9:a7:51:9e:31:da:47:48:
c2:07:b0:d1:59:e0:ac:a5:ec:a1:c0:fc:53:0d:a2:
38:b1:ec:c9:10:86:cc:d4:93:7c:0d:0d:5d:12:e2:
38:21:b3:d1:df:aa:3b:01:20:ea:40:a4:d2:63:39:
f5:bc:d3:e0:59:e7:b3:22:69:2c:32:85:dc:1b:1b:
f3:2d:c8:a7:06:34:e4:49:54:55:8c:5b:df:51:bd:
44:d2:da:16:6b:6a:a7:50:c3:92:70:50:64:bd:d0:
97:eb:c4:8b:40:5f:f2:30:7c:a8:a1:ff:8b:cf:7c:
d4:30:9a:49:e8:e3:df:cd:9b:dd:af:3f:f7:65:52:
23:3f:2b:b3:79:b2:65:be:f9:e4:b6:05:c4:fb:40:
b6:83:47:44:7d:6c:bf:00:a1:74:f1:08:44:6c:1e:
fc:da:03:81:a6:35:7a:95:fd:62:95:1a:1c:85:f0:
5c:a0:8a:2e:05:ff:6a:3f:5c:cd:ee:52:a4:e0:f2:
4e:f2:fa:e8:c5:95:8f:03:f6:5b:6d:9f:fa:76:bc:
41:73:54:2b:7c:7b:76:ee:31:93:ed:e2:16:1c:00:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:B5:0E:E8:94:8D:64:00:37:4F:53:A7:E6:22:EC:A7:E8:03:E3
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4a:23:04:b6:a2:24:3c:3c:a0:94:8b:4d:f5:c6:96:72:ad:
1e:51:20:cf:c3:17:7b:47:c9:36:6d:13:ab:fd:70:49:77:fc:
63:5c:42:7a:bf:62:49:99:af:7f:4b:e4:ef:c9:81:8b:f3:ee:
8e:14:f9:01:0f:33:f7:fb:fe:0e:b7:37:63:9e:db:7a:ca:2f:
17:93:49:31:1e:a3:33:93:5a:3a:66:a0:d8:73:d9:26:41:60:
1d:fd:3d:7f:b9:a0:72:d9:b1:5d:3a:87:1b:b1:8d:63:b2:fc:
5a:6c:17:42:03:79:9b:d6:06:73:8a:b5:17:e3:11:77:47:68:
42:52:f3:dc:d8:8a:ba:ae:e4:d6:28:77:e2:e0:40:4c:8d:6b:
ed:6f:e6:b3:e2:55:fb:81:8e:30:bd:da:78:1a:22:1c:e0:88:
d6:8f:2d:c8:d6:7d:1b:95:c9:10:ce:1e:30:b7:14:4e:16:8f:
5c:4f:d1:9e:6d:b4:58:e3:4a:8e:06:86:06:f3:fa:e0:a6:b0:
ba:25:a3:ab:fb:e5:d4:3a:0d:c6:4a:41:92:fc:55:0a:c2:80:
ed:8e:b8:f8:32:ef:f5:7c:52:8f:a6:de:25:b6:b5:8b:55:69:
46:7b:61:ae:a4:c5:6c:b0:d9:70:f0:02:58:19:2e:b1:67:e5:
0b:9d:67:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:05 2025 by rpki-client