Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: 3Vug0o2VCUc+/Pi8cFmbbi0kcymam0UDs+EoizGJFIg=
Subject key identifier: 6B:21:2E:A7:FF:3C:81:11:5B:55:34:ED:8A:57:FD:66:96:C7:29:ED
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 019A50E429C193DB14B2E8054829CEDF4082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 16D7
Signing time: Tue 04 Nov 2025 22:02:01 +0000
Manifest this update: Tue 04 Nov 2025 22:02:01 +0000
Manifest next update: Wed 05 Nov 2025 22:02:01 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: 4hi+EBtYU/RD3Upm7iHYJcZyBygBG1+l4igQQF1WrP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:29:c1:93:db:14:b2:e8:05:48:29:ce:df:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Nov 4 22:02:01 2025 GMT
Not After : Nov 5 22:02:01 2025 GMT
Subject: CN=6b212ea7ff3c81115b5534ed8a57fd6696c729ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:33:cc:0a:57:36:ea:a5:c4:fe:66:4b:f2:
a9:fa:df:0c:ae:90:8b:20:4c:0f:8f:1d:9a:d4:56:
98:5a:7e:b8:7c:27:69:d5:32:87:a1:0f:bf:ed:95:
cc:c2:80:5d:78:f7:eb:ba:80:2e:af:d5:37:a4:8e:
9b:cc:c0:48:2b:b4:9c:55:9d:54:3b:cd:50:af:8c:
29:76:1a:c9:fe:43:67:2a:08:57:ec:68:0c:6c:24:
f6:d9:55:45:f7:d8:e1:47:0f:05:fb:fc:27:cb:ef:
ce:f0:3b:5c:68:ab:ab:b9:93:78:df:0b:d9:37:b7:
0d:ab:59:2d:16:55:cf:42:85:a5:e3:eb:4b:c0:dd:
f6:a2:96:53:e7:37:d5:42:ee:95:50:06:93:35:5b:
74:cb:f0:7d:b1:05:e0:cd:52:e8:ce:39:72:a4:ac:
fe:08:8a:8d:6e:38:85:16:e4:e7:f3:41:0f:4c:14:
33:e9:7a:b1:8d:49:6f:e9:1b:4c:df:d1:2c:a9:d9:
65:24:b2:82:d8:53:e9:6a:c1:2d:4f:fe:fb:0c:c3:
9c:9d:dc:49:49:12:f9:bb:ea:d5:d2:79:ab:f1:38:
e1:eb:f4:e8:d7:b2:28:6a:9c:44:cd:af:68:6e:e8:
15:35:80:d5:11:be:4c:5b:63:28:8a:28:09:dd:d4:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:2E:A7:FF:3C:81:11:5B:55:34:ED:8A:57:FD:66:96:C7:29:ED
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8d:bb:47:91:8b:82:c0:87:95:13:9f:f2:5a:26:55:9c:36:
53:d2:e0:b1:90:42:10:97:5a:57:2c:42:b5:7e:47:16:c2:c4:
d4:14:37:91:98:40:ed:87:5c:1c:1c:34:83:14:84:b6:1d:8b:
07:2e:53:a1:1d:3d:ae:bc:64:52:74:65:b6:ed:b4:d6:c4:87:
c2:f1:a6:0d:ff:c4:2f:2a:9f:42:46:49:cc:b5:b7:b4:3e:94:
ca:a5:cf:ba:9c:77:bc:2d:d2:42:f7:69:4a:13:5e:f0:58:47:
6f:49:85:c1:a7:33:18:d2:48:b8:40:1d:98:c9:5d:97:08:05:
77:1f:dc:00:66:7e:65:ab:b5:f2:58:6a:39:3e:99:6b:fb:a0:
8b:11:91:c6:3a:21:c6:b9:9d:8f:16:1f:ad:c3:97:a1:9a:34:
7f:80:09:28:ad:10:80:0f:ce:7e:e7:dc:3c:8d:cd:44:ec:f0:
39:ff:d6:c9:e1:5e:6e:0f:56:bf:de:52:0a:af:1f:e5:fc:9a:
a2:69:4c:74:b9:15:11:8c:cf:5b:5c:7a:34:0a:dc:38:89:3b:
82:22:3a:08:20:a8:23:4b:fe:6e:52:da:bc:ce:c4:7d:77:9e:
c4:8e:ab:72:99:01:f7:7f:71:4a:48:c4:69:dd:f8:a0:a6:71:
5d:9a:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:05 2025 by rpki-client