Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: km79Jb2CZVwAJkqJXNJHtj6Ss6m4r0sl6aUu1u/EDW0=
Subject key identifier: 12:6F:72:42:6E:B4:27:13:48:36:49:A7:83:60:25:08:7C:B9:9E:BD
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019A4EF4D71F0CCB4ACB01530B3EB9880772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 092E
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: c7rM7MXZPt3Y7zhmfXNYqBPJ4rEGZDlmlXuPL8aMQoI=)
2: cNiza7IEiNMNBNBagOrbk4czUFI.roa (hash: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d7:1f:0c:cb:4a:cb:01:53:0b:3e:b9:88:07:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=126f72426eb42713483649a7836025087cb99ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:0c:f1:ee:fb:78:df:6b:d0:56:54:e5:37:
28:d9:6e:e5:de:79:6c:24:dd:39:07:66:14:2e:0b:
0d:d6:ee:72:a0:04:57:8d:f0:45:17:42:c5:66:a3:
50:e2:9d:b0:af:af:88:5d:34:df:26:4a:17:d8:f2:
19:d4:b2:be:71:7d:95:77:28:a0:51:ab:58:54:87:
0a:5f:4f:cd:34:b0:74:e3:77:f4:b2:51:ca:c3:18:
cc:f2:eb:cb:3f:31:42:40:bd:ab:0f:c0:a3:8d:06:
7b:62:0f:38:19:bc:b1:a4:e6:1a:2b:d8:35:f4:dc:
b4:c1:d6:08:0c:17:b3:20:29:e2:98:b2:5d:ff:98:
33:64:8f:13:c5:d5:85:8f:f2:1e:3f:31:9c:2a:63:
93:10:81:ab:19:39:77:61:db:7a:40:59:91:1d:c2:
af:0d:0c:f8:67:e2:1b:2b:6a:bf:42:89:26:8f:d6:
ec:c5:af:10:4e:f0:77:42:50:08:19:ef:c5:c0:10:
f1:59:d6:f3:1e:f0:e1:e9:2c:99:8f:28:70:bf:c3:
37:6c:df:a6:1a:57:b1:21:14:1b:06:69:e6:cb:f5:
0e:24:40:07:4e:0f:0c:dc:be:2a:98:60:fe:df:ff:
ef:e0:b0:82:1a:6b:a0:a4:ef:e2:4f:c0:39:05:c2:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6F:72:42:6E:B4:27:13:48:36:49:A7:83:60:25:08:7C:B9:9E:BD
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ce:be:3f:ef:06:a1:a2:d4:02:19:8a:83:e5:64:e6:ab:1b:
5f:26:4d:b9:ab:88:83:75:44:bd:0c:4d:2a:dc:2f:4b:29:41:
a5:82:64:ff:43:c3:91:0c:80:6e:4a:fb:a7:95:58:55:63:5a:
b6:cf:35:c5:34:27:8f:30:5e:31:ce:3e:b6:ce:1b:f3:0d:5d:
93:b0:41:62:a5:5e:65:06:8f:42:5b:d5:55:cb:d5:b8:83:8f:
73:a2:07:51:24:9d:91:6d:08:2c:0a:0a:f9:b2:3b:3d:8a:7d:
7e:b7:23:75:4c:5b:45:b9:6c:91:6e:8f:ec:29:1e:fe:5c:c3:
ce:b0:78:1e:4f:41:56:6b:82:97:4f:ce:f6:db:b7:08:c0:5c:
46:e0:f0:b6:13:d9:69:7a:f0:26:61:93:cc:5b:e0:7d:c3:f1:
52:b3:90:5a:30:29:60:5a:ef:42:e3:8b:1f:4e:59:e0:6c:ff:
10:c2:1d:a2:2f:22:2f:04:87:3e:be:9b:1e:12:12:8e:a6:01:
31:f1:b1:0c:e5:80:71:b3:86:a1:75:4a:ca:42:ec:c6:88:76:
cc:ff:35:86:34:21:ee:e1:16:4a:e2:df:28:1b:c3:84:e7:44:
9c:d2:a5:7b:ac:04:41:30:a8:76:9c:03:5a:45:07:50:a6:a9:
07:56:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:03 2025 by rpki-client