Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File: OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier: b2JTFZglWVSFicR3zHpkN4yMV1mCx4As8xTsIaVO1vM=
Subject key identifier: FE:8E:76:16:0B:74:35:1B:C0:35:43:2A:44:6A:ED:39:8B:86:3E:27
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 019A4DE15AD932DED7D66CEC3EB058523755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number: 0C9F
Signing time: Tue 04 Nov 2025 08:00:05 +0000
Manifest this update: Tue 04 Nov 2025 08:00:05 +0000
Manifest next update: Wed 05 Nov 2025 08:00:05 +0000
Files and hashes: 1: LNlStrlsE14yRfjQBfv8pQze1bk.roa (hash: fki9Rg0dg7D8WnpYuMELeDNz6e2xoBE+PNmZRxJsR0U=)
2: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: 1/hACeDtPY2q/BUdSsyHNfEA+XI1jw4aFUGT9v5jnm4=)
3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=)
4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=)
5: pkIeBUajXZ5S1YZVqFsipYPnvYY.roa (hash: wuHKfe7KGoVciBLRMcdEQvhSLdH+Z4ihPv48EoUAWBA=)
6: uQUwmqsLj0U3KwuONWjPJwlPoM0.roa (hash: 80ykNf1aAgBCnkcsaylXJwlHdJfFAWwXxym4KxERtHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5a:d9:32:de:d7:d6:6c:ec:3e:b0:58:52:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Nov 4 08:00:05 2025 GMT
Not After : Nov 5 08:00:05 2025 GMT
Subject: CN=fe8e76160b74351bc035432a446aed398b863e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:b0:78:b1:df:e4:88:d1:33:e5:7f:f4:cb:
82:fc:a0:44:50:0f:55:d3:9c:f3:e5:53:e2:d7:d9:
d0:50:72:b3:ca:15:ee:91:32:c0:b8:01:ed:2d:02:
32:34:05:56:2b:cb:08:03:3c:2b:73:b6:94:5a:6d:
bb:3e:62:a6:5c:56:51:b7:63:85:31:a6:d4:ad:7e:
3e:7e:0e:87:e9:8b:85:64:b9:c9:05:43:39:8b:9a:
8b:f6:ac:13:8c:b8:b8:b3:64:6b:98:2e:72:2a:0b:
f4:98:9c:6c:20:98:24:84:34:0c:7d:80:a9:cb:a2:
e4:07:49:c9:3f:ff:10:bf:bf:e7:76:f5:84:96:4e:
6c:af:70:67:c3:1b:8b:1b:a6:03:ca:00:c3:0b:05:
96:45:02:0c:fb:a4:da:15:41:3a:04:36:e6:f7:05:
5e:33:fa:3c:69:f9:06:96:ff:78:d4:92:34:1a:bb:
db:4e:f3:c7:c2:da:f7:e9:00:ca:48:ce:40:a4:20:
f4:84:48:10:83:5b:f5:2b:98:59:82:b8:9a:7a:8e:
df:26:78:08:c2:bf:e2:b9:6b:22:95:a8:e4:b0:64:
23:89:92:15:e1:cb:3c:d8:e1:69:95:c6:58:77:a9:
42:de:48:1d:c4:0e:12:9c:4a:ce:38:80:8e:f4:2e:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:76:16:0B:74:35:1B:C0:35:43:2A:44:6A:ED:39:8B:86:3E:27
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c5:7c:d6:74:22:64:dc:77:ad:10:42:bc:00:b6:d1:06:34:
52:47:f2:60:d3:94:16:32:ae:ef:46:d3:42:d5:cb:33:2f:fc:
09:26:cd:f7:c1:e3:4f:0a:bd:4e:70:c1:7b:cf:4b:6b:84:69:
21:98:6d:fc:fc:02:19:2e:3c:38:bf:40:bc:5c:2e:7a:c9:c7:
b8:d9:31:f8:80:43:b6:20:99:9c:6b:d8:fa:f5:7c:7a:5a:4c:
d6:b0:09:8c:0d:b4:91:c4:51:92:29:db:19:8a:e3:5c:4a:08:
83:0b:61:d7:4a:ff:2a:61:ac:3e:69:9e:f8:66:eb:5d:b1:fc:
c8:82:a5:70:77:80:ce:8c:a8:5c:8a:ef:3c:7b:82:8e:1a:74:
f1:2e:ed:c3:c8:a5:fe:98:6c:b9:35:19:c2:2b:33:10:62:db:
b3:04:b4:82:37:fd:f1:a3:0d:34:05:9e:16:fc:c3:68:8d:55:
10:a9:88:e4:57:08:68:80:85:f5:1a:15:81:78:d0:97:72:b4:
47:13:5a:b1:ad:f2:66:60:6d:50:81:a1:a0:7b:ec:0e:0c:2c:
1f:ce:a6:0a:bc:9a:4b:dd:9c:63:1e:6f:b0:f0:f2:6a:ee:00:
6b:2e:94:c6:62:b6:6d:57:4d:5f:94:aa:fb:ff:68:52:2c:d1:
c6:f2:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:36 2025 by rpki-client