Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: v2mvf/lAAfsfIjDo7GCNnkylRLk86HDZ0j2iBHPBL0E=
Subject key identifier: 8D:18:4C:AA:5F:09:D7:D4:79:91:28:42:35:27:CD:10:86:D3:80:FB
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019A50E39D3013B461886E71403B1E0019DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 1263
Signing time: Tue 04 Nov 2025 22:01:25 +0000
Manifest this update: Tue 04 Nov 2025 22:01:25 +0000
Manifest next update: Wed 05 Nov 2025 22:01:25 +0000
Files and hashes: 1: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: 1d9CsX6TJq2vzt1s3oOIKCWdXLlULrBGBRtJnyvRRuc=)
2: tbot_ZPo7efS_eEBsyLeDHJNVmM.roa (hash: edYIJvl9gSH8k9QetJe1JVzyMvJbYqfDW2Tyrs7Mw9w=)
3: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (hash: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:9d:30:13:b4:61:88:6e:71:40:3b:1e:00:19:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Nov 4 22:01:25 2025 GMT
Not After : Nov 5 22:01:25 2025 GMT
Subject: CN=8d184caa5f09d7d4799128423527cd1086d380fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:4a:ee:85:c7:e3:bc:e5:de:43:28:b9:f9:
df:40:a9:96:c1:5b:71:bc:95:41:8a:da:56:7c:eb:
1c:89:c7:62:f2:f6:78:cd:73:4e:5a:8d:4b:98:a9:
37:14:d9:e6:67:56:c8:6e:c8:93:62:73:95:e4:af:
e4:c4:15:fb:1c:fd:52:26:f9:bd:dc:54:12:de:6a:
69:18:e8:14:22:3c:5d:53:e8:a6:32:9c:86:b7:83:
0e:58:31:66:21:b3:da:e4:18:eb:2b:e9:b0:6f:1c:
af:ea:61:ce:b2:5b:30:a2:0e:5c:99:ff:6e:15:d8:
11:ca:4f:6d:bd:db:b6:e2:81:52:45:0a:fa:d2:d9:
7e:2d:51:10:c1:53:02:84:8f:59:9f:b1:86:08:b3:
95:5c:13:91:35:64:ad:86:d8:b9:e2:95:73:81:7d:
2f:a7:79:00:54:59:ae:22:7b:77:25:ab:bd:4a:f0:
f9:fb:9c:1d:b5:94:7a:9f:85:0a:78:de:a2:8f:85:
e1:c5:29:d0:3e:94:a4:ac:73:88:78:ea:3f:f3:b0:
60:97:74:a6:b4:fe:7d:21:ef:21:bd:dc:d6:4b:2d:
7b:d0:5c:c8:68:e9:28:52:c5:c7:9c:f6:df:35:43:
2d:7a:28:af:25:50:92:bb:e1:88:14:5f:6f:fb:c2:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:18:4C:AA:5F:09:D7:D4:79:91:28:42:35:27:CD:10:86:D3:80:FB
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:38:bb:29:ba:53:e9:fd:59:f6:6f:5c:c1:70:a2:98:de:d3:
65:52:47:19:6c:53:58:e1:0e:39:cb:ef:19:d2:97:80:c4:1b:
25:8c:e0:4b:48:79:4a:d6:d7:94:93:10:ee:30:05:00:83:50:
d1:f9:3d:f7:ab:0f:ac:ed:75:33:af:c1:c5:74:0b:12:04:78:
d8:06:ff:91:0d:d6:a4:81:7f:37:bf:93:08:4b:75:c6:78:f3:
2b:20:00:79:98:a0:74:4c:7c:9c:e4:09:ff:54:cc:28:76:2a:
f1:a0:d4:11:fc:56:17:3e:16:9b:82:90:a1:16:5d:1c:57:d4:
84:07:53:6c:42:de:13:7d:71:ce:2d:c3:c8:a3:1f:37:97:c7:
10:d9:75:3c:3f:dd:64:fa:93:d9:ae:a2:c3:58:aa:57:42:55:
84:0c:fe:03:fe:c2:c9:3c:6c:4c:d2:9c:8e:91:2f:23:da:c1:
12:4f:49:a2:41:2d:27:33:9a:26:fe:41:93:26:3c:db:1a:b0:
1e:d7:27:79:39:06:94:13:95:cc:49:23:0a:17:c8:ee:fd:b7:
a8:1e:51:13:2d:a1:f0:15:c0:e4:2b:42:50:a4:83:20:0c:10:
23:8d:52:f1:47:3f:b5:d9:c5:52:1e:d1:3c:d5:c7:23:eb:e5:
cf:fe:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:05 2025 by rpki-client