Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: uBDx/DKucwq5U/clYjB1XUJddUdRqqgWUHr/Pxdo77U=
Subject key identifier: B1:8B:2F:89:69:59:78:D3:6D:6B:B0:CD:81:53:D5:E1:CB:75:27:80
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 019A4EF5044192C0D2A94EB4D91F7D6A4186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 0ACC
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: p+4q5CsXDW4GBbZ6wFmhERxCUuek4w6vzF/YpXjIN1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:04:41:92:c0:d2:a9:4e:b4:d9:1f:7d:6a:41:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=b18b2f89695978d36d6bb0cd8153d5e1cb752780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:37:54:ee:22:c2:ce:44:39:56:77:06:47:
4d:24:79:27:0d:1f:9d:ec:09:57:cf:66:75:e5:92:
92:2b:50:ec:a2:9b:41:ff:b5:63:30:7e:de:95:d3:
05:f6:a2:f9:c0:c0:23:56:b5:08:e8:e5:e4:dc:6c:
96:94:ec:e5:bb:bc:aa:87:77:37:3b:ac:b1:cf:2f:
c5:94:20:ca:d4:0c:4e:e8:1b:85:82:8c:65:ea:1e:
81:21:73:35:8c:b6:58:05:1a:95:e6:0c:42:1d:b2:
de:eb:e3:23:e9:c4:25:49:45:a7:56:ad:16:13:11:
03:5b:9a:15:81:b1:3e:dc:cc:d9:2c:8a:44:b8:55:
81:84:a7:b6:ff:f8:21:a6:cd:c5:9e:33:61:42:24:
72:d8:a8:2a:e7:78:d5:86:e8:cd:40:e9:46:87:b1:
f2:a6:12:8a:bf:18:5e:46:12:88:c2:fc:d7:46:44:
12:74:53:64:9d:80:59:58:58:ae:6c:c1:f7:ab:00:
86:06:b8:24:6b:a5:2d:69:c4:37:5f:10:f1:a7:a5:
44:b8:87:98:56:a1:54:11:9f:40:89:d9:32:a5:f8:
b0:88:b8:92:f9:1c:4b:1a:20:38:bd:39:da:2c:96:
2c:ea:d6:cd:87:cc:0b:f4:88:b4:b9:bf:66:52:ac:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:2F:89:69:59:78:D3:6D:6B:B0:CD:81:53:D5:E1:CB:75:27:80
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:09:16:db:15:85:6f:cb:04:a6:15:cc:0c:7d:39:e1:3b:d6:
a6:41:db:88:30:c4:b5:ea:fb:96:6f:7c:b2:8e:32:b3:1e:c8:
14:a2:0d:2a:d8:27:5f:70:2a:ae:56:fe:fd:91:93:c3:dc:ff:
67:6a:32:60:a2:a2:f2:86:67:84:99:2d:c8:3c:2c:01:44:ad:
a2:92:3e:4d:2e:02:0f:4f:9b:c6:cf:a6:5b:df:bf:0d:ee:79:
ea:c4:ce:89:df:7e:17:4e:7c:f4:92:26:24:1e:5f:47:9e:6a:
e8:64:7e:09:0a:9b:83:5b:e1:2d:e6:35:c6:f0:e4:e2:a2:b1:
89:ae:8d:25:d6:ee:f1:ac:e3:db:4c:fe:72:2f:dd:ff:dd:01:
55:ef:5b:10:36:a2:8d:49:83:7b:4b:17:f7:4c:7b:c0:83:ea:
dc:45:80:c4:7c:41:1b:18:a3:65:fc:26:b7:15:fd:f3:61:d1:
86:f6:95:a3:49:7c:f4:a7:29:81:2f:14:01:88:3b:d7:8a:8e:
5a:b1:91:dc:8e:3e:40:a2:22:26:7c:75:24:cb:65:4b:c9:49:
10:33:b4:e3:d5:06:ae:5f:b9:71:38:d0:a2:fa:da:a5:40:a4:
ce:df:5d:06:5c:60:1d:eb:30:f1:9a:1e:e5:3b:5f:c4:12:9f:
d6:3e:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:41 2025 by rpki-client