Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
File: OoLcXHHOpyxlsCahJnifOIZXC6Y.mft (raw, json)
Hash identifier: x6Vjnp+0BL/fSXq7Hc2qdSRxSM4EAhxVF4MSrcrkxug=
Subject key identifier: 52:D6:7D:EC:88:87:41:CF:AB:D1:60:7E:29:1E:30:02:F3:62:CC:80
Authority key identifier: 3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
Certificate issuer: /CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Certificate serial: 019A52D19C8F6BDA30144450DAE0CBF8CA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:00:59 +0000
Manifest this update: Wed 05 Nov 2025 07:00:59 +0000
Manifest next update: Thu 06 Nov 2025 07:00:59 +0000
Files and hashes: 1: OoLcXHHOpyxlsCahJnifOIZXC6Y.crl (hash: 07+8NDkk7mRvOrtSVob2lPDdEK70UWKSxf/x7GonAYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:9c:8f:6b:da:30:14:44:50:da:e0:cb:f8:ca:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Validity
Not Before: Nov 5 07:00:59 2025 GMT
Not After : Nov 6 07:00:59 2025 GMT
Subject: CN=52d67dec888741cfabd1607e291e3002f362cc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:3b:a5:2b:46:b1:50:ee:e3:48:cd:fe:89:
22:7a:2f:71:8f:d2:7f:44:43:f1:bc:2f:86:e2:9b:
a1:1d:c0:6b:ab:68:f3:d6:26:5f:b5:13:59:49:c1:
c7:e4:50:32:40:dc:c0:ed:81:33:02:0c:a8:c0:63:
50:0c:2a:1b:d4:f3:60:dc:b9:8f:99:3f:ba:be:43:
09:58:33:f7:c0:da:16:38:91:da:2a:b6:b5:90:46:
26:d4:06:00:f4:30:4f:ab:2b:c4:d1:eb:3b:5a:ce:
c0:38:c9:02:67:4c:63:0e:f9:cd:76:23:db:47:84:
68:2c:91:81:fc:9b:8b:74:6b:15:f8:fd:ed:06:1a:
c8:07:5b:9e:1b:ef:77:31:4a:bb:c7:69:ce:f0:70:
1e:83:58:61:3d:30:ad:65:3f:1a:27:88:98:e1:d8:
5a:cb:b5:0b:0c:fb:0a:3f:ca:70:48:cd:ce:aa:77:
be:f2:cb:2a:f8:88:9d:5c:e9:04:6b:34:2b:3c:e4:
7d:db:3f:92:ee:62:35:b0:d3:cc:d6:7b:c8:72:a1:
88:00:b0:08:51:e2:64:82:f0:50:74:ba:d7:6b:e5:
ef:ae:2d:f8:a2:a5:0e:83:59:40:33:a4:4a:f5:ee:
1e:31:cf:ae:dd:68:0e:48:d9:67:3d:50:b4:1e:79:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:7D:EC:88:87:41:CF:AB:D1:60:7E:29:1E:30:02:F3:62:CC:80
X509v3 Authority Key Identifier:
keyid:3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:ef:57:9c:e0:4f:aa:e8:79:8e:61:63:41:57:08:a1:85:
64:08:2d:97:41:35:90:a4:1e:a1:99:cd:7f:b8:b1:ac:5c:9c:
0e:b1:3b:b1:5d:0e:3f:3b:98:4e:a8:63:f7:49:96:01:eb:6b:
ce:f5:48:8e:87:ff:30:5a:df:95:f4:c9:41:47:8f:b7:c6:72:
8d:79:5a:1f:60:c8:3d:75:2d:9e:68:3d:6a:b0:8f:8d:fe:8f:
de:7f:23:16:1d:cf:80:4a:ed:8a:45:76:b3:78:d8:20:c1:a9:
24:bd:f8:54:c6:17:7b:bc:2e:35:e8:05:e7:5e:af:a9:97:29:
d8:b1:4b:8c:71:ab:02:24:47:85:2c:f6:1d:0d:50:c1:e9:b5:
ac:b3:65:a7:f2:f6:a4:41:02:dc:d4:7a:3d:10:b4:25:c3:ed:
20:26:7f:78:da:ee:62:d0:32:2f:44:22:ac:c2:6f:3c:d7:62:
c2:cf:48:71:63:13:41:68:6c:07:d6:70:2e:04:84:15:00:75:
d1:ef:1c:46:d3:c0:ce:38:5d:c5:72:d0:9b:66:a4:9c:15:1f:
4d:df:00:6e:56:87:19:a9:98:4c:c1:bc:c3:50:45:2e:fd:32:
26:a7:2b:c5:cc:d1:89:ba:93:a6:0f:1c:d1:52:0c:be:b7:4a:
a7:49:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:45:41 2025 by rpki-client