Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
File: OUjkpbK65iNUmZE9y-wE38pTHpA.mft (raw, json)
Hash identifier: bFSNfPQQDBK1NoQ+/cAdOXyUMyEvG9tH89uvOzUCHNg=
Subject key identifier: E1:4D:48:8B:3A:9B:80:0F:26:A7:DE:9C:EC:79:7B:EA:A2:CE:2F:99
Authority key identifier: 39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
Certificate issuer: /CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Certificate serial: 019A5187EF30823547B38502BDD2D1FC0F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
Manifest number: 15E0
Signing time: Wed 05 Nov 2025 01:00:54 +0000
Manifest this update: Wed 05 Nov 2025 01:00:54 +0000
Manifest next update: Thu 06 Nov 2025 01:00:54 +0000
Files and hashes: 1: OUjkpbK65iNUmZE9y-wE38pTHpA.crl (hash: /6PpWeNoSbYpDa6vxf84Bi9O46+PKT1uC5tpdeW6kIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ef:30:82:35:47:b3:85:02:bd:d2:d1:fc:0f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Validity
Not Before: Nov 5 01:00:54 2025 GMT
Not After : Nov 6 01:00:54 2025 GMT
Subject: CN=e14d488b3a9b800f26a7de9cec797beaa2ce2f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:64:0d:ca:a6:55:e6:90:16:91:ed:12:c5:
69:19:39:92:92:78:03:54:6f:d3:61:8c:52:f7:70:
f0:a9:72:8b:e1:51:e8:23:f8:bc:7d:ca:75:08:51:
fe:44:d0:07:2e:64:4c:d7:af:23:1f:62:d2:37:42:
39:e6:80:1e:68:06:d6:b0:d2:86:0c:ed:73:d6:9b:
8f:48:9e:31:a9:43:1c:8a:24:45:d1:18:ea:95:87:
7d:6f:48:41:c6:6d:d8:90:dd:c7:18:c6:18:52:30:
5c:3d:08:b3:94:fa:ab:0f:b2:e6:13:0d:87:48:dd:
8d:20:6e:82:58:64:f5:ea:26:7f:63:1d:d3:17:cb:
79:0e:41:44:30:d2:f1:f7:0b:bd:30:17:5b:e1:99:
2a:08:17:12:59:77:16:93:92:b7:62:4c:77:5f:6d:
b8:cc:21:2f:c4:e6:9e:83:9f:ad:b4:42:98:26:74:
cb:ed:d6:a6:47:e4:e8:30:99:51:e1:04:1e:9f:91:
6d:16:9d:8b:e9:e1:1a:41:0a:8c:a7:16:a7:a4:ac:
f2:94:31:aa:70:bc:49:a1:fd:28:d2:4a:4d:fd:4e:
39:86:e2:02:d0:5a:43:ef:84:ed:f8:18:36:26:36:
cb:b4:de:4b:28:d8:4b:13:c1:0d:d8:3e:e6:a2:93:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4D:48:8B:3A:9B:80:0F:26:A7:DE:9C:EC:79:7B:EA:A2:CE:2F:99
X509v3 Authority Key Identifier:
keyid:39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:75:07:2e:e3:1f:52:ed:c6:a9:80:8a:dd:f5:9a:26:b9:42:
de:90:ce:8d:2b:8b:3a:9f:12:45:b0:3d:ac:a6:e9:63:a4:dc:
50:33:c0:53:f1:16:93:0a:e8:5b:04:2e:de:92:1d:c7:70:33:
5e:8d:37:e5:b1:21:23:37:d6:ff:12:36:a8:2e:49:96:1a:b9:
26:b7:45:8b:e3:51:a9:8e:ec:cf:56:82:4e:25:1c:38:90:58:
8e:9b:dc:3f:60:28:8d:24:c9:01:f6:a0:c5:a3:38:9f:3b:9e:
a1:5b:cf:bf:de:eb:04:c5:be:c2:72:86:27:44:59:d2:d0:09:
54:df:7c:14:de:62:b9:c3:47:5c:52:4d:a8:1d:12:3b:85:0a:
f2:68:58:ad:63:c7:77:5c:1a:a2:31:d6:1b:0d:85:b4:93:d5:
51:6c:1a:ac:5c:69:97:04:df:e8:9a:7a:73:79:2c:25:ec:df:
a7:ec:e4:cf:dd:8d:45:67:4f:af:07:e1:b8:8f:bc:d1:ca:73:
58:1a:43:e3:04:c7:72:10:3b:da:23:b9:75:25:95:4e:84:72:
43:9a:f9:0f:7f:d4:30:19:54:8d:4b:f0:21:cd:51:dc:8f:0a:
7c:10:12:fe:af:73:00:24:6d:74:9b:3e:3a:6d:78:fe:de:40:
14:ad:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:36 2025 by rpki-client