Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: 1JyT/XN0s686QT4ZIYeekQxInMkaZ4BiXmYJasL2vY0=
Subject key identifier: 01:91:D8:87:71:26:8A:35:45:72:82:B8:1A:98:75:12:11:23:3D:41
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 019A5262E9FF579CD77D182B2800ADA65094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 12F8
Signing time: Wed 05 Nov 2025 05:00:04 +0000
Manifest this update: Wed 05 Nov 2025 05:00:04 +0000
Manifest next update: Thu 06 Nov 2025 05:00:04 +0000
Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: mcRbHXTlQ3aLv3Nr4vWMVWfSCBGqmtnJQpFCP9vcOeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:62:e9:ff:57:9c:d7:7d:18:2b:28:00:ad:a6:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Nov 5 05:00:04 2025 GMT
Not After : Nov 6 05:00:04 2025 GMT
Subject: CN=0191d88771268a35457282b81a98751211233d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:17:34:bd:93:43:cd:66:c8:76:ee:94:87:
ab:66:0a:d0:92:63:0b:59:90:58:29:58:58:7f:ce:
b0:de:be:a4:ee:45:89:b2:42:1d:c3:85:f8:46:48:
ae:98:16:2f:a2:a0:79:66:c9:39:cb:a3:05:2b:29:
e6:e4:20:0f:42:36:4e:e0:95:9e:6a:bd:74:71:9a:
7c:b2:e6:35:bb:05:72:74:c8:48:17:bb:93:5b:6c:
35:1d:cb:2e:6d:d6:30:2c:3e:12:db:08:20:5f:3c:
bc:66:c8:04:a9:26:72:3b:0e:fc:05:9c:c5:a5:59:
f0:bf:c7:3a:4a:37:6d:b5:a0:45:4d:ce:3e:f4:f3:
e7:08:de:c1:5c:2d:06:94:ea:88:91:7c:b1:0b:9e:
24:26:2c:1b:f7:b2:4a:be:31:db:02:40:85:36:05:
ef:18:dd:63:fd:10:0b:27:c8:6d:46:59:e5:0a:09:
8a:da:88:7c:cf:27:dc:60:08:66:9f:30:dc:c1:57:
c5:b9:34:ca:f4:53:1f:37:a2:3a:0c:5f:45:a7:b4:
49:8f:91:63:54:6c:76:3b:0b:43:6a:84:60:0d:2e:
76:54:2a:ad:13:97:95:01:ce:27:b5:40:eb:49:7f:
db:1b:51:39:55:fd:7c:2f:a2:f3:93:48:cb:3d:29:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:91:D8:87:71:26:8A:35:45:72:82:B8:1A:98:75:12:11:23:3D:41
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1f:92:e8:e5:5c:67:2c:98:23:16:05:03:89:c1:52:eb:55:
7f:bb:4e:00:bd:91:1c:60:b6:30:da:cf:8c:8b:a1:5c:48:95:
c2:d8:de:08:11:c7:12:66:aa:5c:c8:cd:77:e7:64:2b:f1:90:
35:4a:42:fc:73:a9:ea:d4:4f:87:20:04:48:9d:c2:92:10:61:
fc:84:e0:6c:b0:32:39:2f:7e:67:26:ef:0d:3b:8e:b0:31:08:
f5:86:cc:44:66:bc:14:86:c4:a6:59:84:fc:e6:20:2d:1c:e5:
bc:5d:08:7b:4d:d9:16:21:98:f4:96:f2:31:2a:65:49:a3:a3:
90:1e:f9:71:f2:f5:a4:5e:59:4a:61:11:52:e0:9e:b8:75:8c:
f1:e9:0d:e7:8d:9c:2f:de:ef:82:2f:1c:76:22:fa:6b:5e:b9:
07:a7:05:30:85:31:53:39:31:c7:a5:99:97:c7:1d:10:4c:a3:
c0:c1:fe:49:6c:9d:ee:ed:9e:5f:30:d7:07:ad:f5:ca:3c:ca:
0e:8d:6e:a5:15:1a:83:b6:9e:db:c4:69:f0:76:cb:c1:8d:26:
a1:b8:51:dd:2c:5c:9a:15:f0:9c:b4:dc:87:e5:3f:96:4b:da:
73:f2:7f:fb:cd:4f:81:30:46:ed:63:bb:b7:1e:94:2b:a3:a7:
55:73:ad:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:53:19 2025 by rpki-client