Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: QlGut78PNUu9FC5XIVtSgd4SGQ20GcXUaGC4g/dviO0=
Subject key identifier: FA:63:75:11:AD:5D:62:E0:1A:A0:A2:20:DC:EC:E3:06:6D:A3:61:A6
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 019A533FAB2496D1410071494D257409D86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0D8D
Signing time: Wed 05 Nov 2025 09:01:12 +0000
Manifest this update: Wed 05 Nov 2025 09:01:12 +0000
Manifest next update: Thu 06 Nov 2025 09:01:12 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: u4DXXOUI5jjI/mXXsy+zx2ks0318hU9gD8VpWO+nS5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:ab:24:96:d1:41:00:71:49:4d:25:74:09:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Nov 5 09:01:12 2025 GMT
Not After : Nov 6 09:01:12 2025 GMT
Subject: CN=fa637511ad5d62e01aa0a220dcece3066da361a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:6a:a2:d0:3b:ec:a8:94:09:4f:79:66:08:
eb:a6:bc:80:72:bc:40:42:7f:62:07:a0:37:ed:07:
32:a9:71:7c:cc:e6:1c:53:b7:9d:b6:71:d1:69:59:
45:76:e6:ae:28:a6:51:d4:66:a1:a8:75:17:27:4b:
c1:f3:5e:9a:50:b4:da:ca:2d:c0:3c:26:6c:af:62:
ad:f9:85:7e:ab:56:50:c5:94:24:6e:0c:02:72:6c:
76:e3:91:f2:97:5c:17:34:58:77:d6:74:90:a0:db:
69:6a:9d:6f:6d:c8:8f:eb:f6:c1:04:40:8a:7d:41:
93:30:41:c8:90:77:e2:98:29:4f:33:39:48:1d:a2:
ee:c3:ae:fa:28:5b:bc:53:d4:a9:fd:cb:0d:d3:16:
d7:08:06:c4:85:e9:d5:2a:ea:63:94:1a:c4:02:b7:
be:d9:3f:63:59:6c:79:9c:33:be:81:e9:1b:38:48:
ba:15:83:79:31:35:19:54:5c:91:ef:bc:81:fe:7a:
07:d5:ab:64:95:08:71:e6:17:72:1a:f8:2c:51:1a:
9e:24:dd:0f:12:49:0f:47:c1:ed:cd:18:43:42:50:
54:37:bf:33:48:3c:64:b8:bb:75:a1:ab:0a:14:7c:
80:e3:e7:63:9f:76:1a:f4:f6:07:f0:23:cd:68:ee:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:75:11:AD:5D:62:E0:1A:A0:A2:20:DC:EC:E3:06:6D:A3:61:A6
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:65:2b:bd:75:c9:a0:ed:34:d7:ba:9f:83:01:8d:4d:f7:ef:
e3:79:79:af:85:c7:13:01:94:e6:0f:97:10:25:ab:95:02:c0:
61:cb:2f:2f:41:c3:9c:3e:2c:5a:94:2e:92:28:61:2f:b1:44:
fd:d0:c1:e9:07:2c:6d:fc:f7:3c:86:37:89:55:07:6c:c4:30:
76:85:4d:95:43:d5:bd:e8:3a:11:e0:83:4c:3b:19:e5:87:28:
48:c9:41:ff:6f:36:b3:3c:0d:6c:14:17:26:20:0e:ea:9a:5e:
84:2e:7d:76:ed:72:25:3b:24:ac:63:82:aa:aa:16:a5:06:dc:
a4:35:f9:72:c8:20:90:48:84:89:40:e7:b7:13:be:18:ac:6f:
29:f5:32:0c:e2:b4:63:d4:7a:91:f8:04:38:ed:45:d3:71:fd:
91:61:ce:71:4b:ed:cb:01:73:05:85:cd:26:2e:77:f6:ec:88:
c3:01:5b:96:12:0c:41:97:46:c2:ba:46:f5:99:ea:0d:30:47:
f6:8b:39:28:d6:f5:31:ca:69:fe:67:78:c0:b2:f4:23:18:05:
e4:98:73:20:e9:6b:ae:1e:a2:c4:7f:d3:12:fa:4f:1c:bc:8d:
14:71:80:23:8d:7d:e7:2a:e8:3e:0a:30:de:c3:68:e3:35:44:
2d:5b:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:59 2025 by rpki-client