Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: pf8FLgxvAbZxjzAda/DyEzQL/gK/Yei6WFyvkdDl5Q8=
Subject key identifier: F9:D3:3A:7F:F6:89:FF:31:42:BE:97:84:9F:F0:14:6A:4B:5B:7F:F1
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 019A5263469489AAA14936AFDD2987ECB768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 05:00:29 +0000
Manifest this update: Wed 05 Nov 2025 05:00:29 +0000
Manifest next update: Thu 06 Nov 2025 05:00:29 +0000
Files and hashes: 1: lhjGJIifChZhyO0SU9NNpxfAaP0.roa (hash: nX/uaYhIBdSKJHgpMLgtjy0tDRvricoltizd7F7VYTI=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: vkU+kv8oPMNfn9Ygxe7wE0AVlFV1GTWHTX/UQGHM/JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:46:94:89:aa:a1:49:36:af:dd:29:87:ec:b7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Nov 5 05:00:29 2025 GMT
Not After : Nov 6 05:00:29 2025 GMT
Subject: CN=f9d33a7ff689ff3142be97849ff0146a4b5b7ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:36:85:a5:a9:a4:57:eb:a2:6d:e5:93:0f:
00:63:5a:87:1a:f8:c8:02:ee:ed:1f:08:82:76:1c:
dc:19:ab:3f:d5:ed:fc:86:f1:a3:72:29:ea:c7:ce:
d5:5a:11:93:96:f2:f0:48:00:6a:73:99:c8:75:f9:
09:92:8f:19:65:7f:6c:28:43:7e:86:09:88:f7:4c:
7b:23:d9:69:71:8b:d1:05:3a:73:de:47:86:87:bd:
f5:0f:b0:1e:8c:db:1f:2e:b0:0a:10:c2:8e:42:68:
8f:18:2e:62:28:d2:64:47:78:e5:55:21:25:5a:54:
fd:ad:23:75:3d:c3:5c:3d:27:d0:5d:ac:58:17:83:
e3:91:4a:9d:3b:1e:2f:59:14:cd:ed:31:55:54:05:
0f:64:07:ce:77:84:71:55:4a:8f:14:5d:03:76:8e:
20:02:80:6a:64:94:a1:2b:57:28:57:ec:5a:e7:8f:
4a:d3:57:4b:54:77:18:f8:e2:d7:4b:0c:1e:c8:e7:
e7:aa:24:12:49:be:c3:95:1c:77:44:25:3b:d0:cc:
79:b8:8b:d5:c9:c0:3d:69:b3:e9:8b:f6:1a:db:69:
70:6e:67:ab:33:98:89:49:bc:b2:b6:59:4a:8b:d1:
31:9d:cc:9b:bd:e6:9c:53:3c:c1:7e:7d:0b:43:d6:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:3A:7F:F6:89:FF:31:42:BE:97:84:9F:F0:14:6A:4B:5B:7F:F1
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f3:15:9a:b0:ef:bd:0b:87:1a:13:a7:3b:3e:3a:e6:60:7b:
49:11:b0:56:8b:02:1b:c4:bf:91:af:7f:00:99:76:1c:00:9a:
a0:35:d6:e0:94:a2:b4:c0:3e:15:0c:01:5c:4a:ed:89:be:e0:
4b:e6:55:a2:1c:d7:5c:3f:fd:2e:a5:56:a4:76:9e:fd:b0:a4:
00:fa:ab:1c:2c:66:7e:25:5c:8b:2c:6e:02:61:be:84:22:ab:
52:68:e2:cb:84:fe:0d:c4:2c:3a:c1:63:6b:74:72:6c:3a:89:
73:55:8b:06:2a:dd:f5:65:83:1b:24:2f:16:9c:bc:ab:00:a5:
c0:3b:8c:b3:7a:52:d6:da:9f:f7:3f:68:d9:09:73:95:cd:51:
a2:0e:fc:e9:e0:0a:f5:5e:f2:18:55:95:b4:48:75:b5:85:bc:
fe:71:d3:9e:71:6d:23:ee:91:1a:bf:6f:f9:d9:99:87:ef:1d:
2d:bd:70:08:47:d8:82:9b:5d:86:d4:24:cb:92:76:e5:34:a0:
ec:7f:a9:b4:e7:4c:7b:2c:ba:d0:82:4e:0a:45:0a:1a:26:ee:
56:d6:5a:f1:dc:1d:98:a9:4c:c0:92:d9:1a:dc:0e:42:68:21:
85:63:20:94:25:34:1e:28:b5:98:f5:d7:b1:ce:27:0c:c0:e2:
b1:7f:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:13 2025 by rpki-client