Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
File: Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft (raw, json)
Hash identifier: 8ylmOaa0l63jxaD7NpaG+a3PaxJ0XL1OLNHmRwnFXZ8=
Subject key identifier: C3:81:F5:D8:79:3D:55:18:4D:07:A8:64:AC:D7:11:11:6C:2E:F0:8E
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial: 019A4D73F574936C845E5FC46D62E09A7DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
Manifest number: 1154
Signing time: Tue 04 Nov 2025 06:00:36 +0000
Manifest this update: Tue 04 Nov 2025 06:00:36 +0000
Manifest next update: Wed 05 Nov 2025 06:00:36 +0000
Files and hashes: 1: Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl (hash: Ll9WnEAwt5Y8wfi+Z5W7Bf4tpA5qxUqAGsBSWk/De/M=)
2: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (hash: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f5:74:93:6c:84:5e:5f:c4:6d:62:e0:9a:7d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
Validity
Not Before: Nov 4 06:00:36 2025 GMT
Not After : Nov 5 06:00:36 2025 GMT
Subject: CN=c381f5d8793d55184d07a864acd711116c2ef08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:51:aa:f1:61:94:c1:e6:8d:5a:2c:8c:b5:
88:2e:24:ea:f2:16:0f:a7:3f:50:df:bb:ea:a8:03:
d5:33:49:ac:b7:b7:a0:5b:99:7a:a8:bc:73:aa:50:
89:1a:7d:87:39:42:10:c1:f2:80:69:68:13:d0:3e:
ad:2d:c9:c8:5c:91:7a:d2:38:1a:27:bc:fd:1f:2f:
4a:1c:de:e4:22:81:89:46:4d:28:dc:05:04:4f:04:
40:99:78:14:03:f2:14:be:34:e3:ec:47:a8:8b:88:
86:6a:3f:5d:0d:2f:fb:c0:6e:d4:61:48:a6:98:94:
1b:8b:91:83:df:ea:90:13:b0:a8:3c:b1:09:77:a0:
d2:b1:67:5d:ef:f0:ed:fd:c4:15:f1:bb:55:33:72:
40:fb:bf:ee:3e:e5:aa:a6:2b:90:4a:7d:4d:14:86:
77:b9:85:ab:bf:85:9e:86:83:f4:5b:7a:7f:ac:ed:
ed:bf:ad:85:8e:5e:2d:ae:af:30:92:ba:58:61:9c:
56:71:3c:d3:65:ea:4e:16:42:b0:e2:3e:44:c2:92:
ac:5b:d1:3f:2f:1c:53:8a:40:0c:bc:6f:d5:7d:a4:
17:4e:b4:52:61:c7:e0:5f:7f:2f:81:c4:93:cb:b7:
48:c2:32:77:69:ed:af:f0:c9:8b:31:bc:54:5a:ff:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:F5:D8:79:3D:55:18:4D:07:A8:64:AC:D7:11:11:6C:2E:F0:8E
X509v3 Authority Key Identifier:
keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:0e:41:06:4a:93:78:46:87:37:a4:6d:41:5a:03:2f:44:
76:b0:be:cd:7d:ed:c2:66:45:4f:c8:02:e5:7a:7e:7d:2b:12:
ee:fc:3e:9b:98:63:c8:f7:ad:d6:7b:60:a7:2a:67:83:9d:e1:
ed:68:56:db:c8:96:58:63:c0:87:51:e7:52:0f:2b:44:f2:71:
24:1f:b5:b3:d7:f6:8b:32:8d:7a:33:bf:a4:11:68:b8:1d:76:
59:04:3f:ce:c8:92:ee:20:56:9f:82:44:f6:3c:91:61:c3:ec:
e7:ae:92:e0:1e:e0:e2:fd:65:ea:7e:d5:e8:4a:19:77:dc:03:
13:f3:f4:05:aa:04:fd:8f:1e:d5:c6:84:89:ef:b9:5e:db:e7:
61:c3:27:0e:7a:0c:44:56:fa:08:79:d2:ec:63:66:5e:48:da:
c4:32:47:c3:cd:07:79:ab:19:0a:a6:73:47:7d:2b:18:23:ae:
b7:05:20:91:35:d4:95:74:d6:f0:dd:22:fb:a4:43:69:c0:b7:
02:c1:07:50:d0:b3:78:87:34:45:01:1f:96:2d:d2:cd:93:ab:
82:47:2f:38:58:57:8d:d8:c9:75:dd:1d:a0:e3:b2:2a:40:64:
f3:78:23:1c:a7:a5:5d:fd:af:14:e8:7a:b8:e1:e7:62:a4:2f:
08:63:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:27 2025 by rpki-client