Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: rCYg9W+XKoVCp1gQVb6eLv8nfY+cWgcJzRKgKTQ+yjk=
Subject key identifier: 73:F8:98:51:AE:4F:72:05:88:5D:52:1F:CE:C1:76:5F:4F:EB:98:E8
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 019A4E863FEB0691903932ED713ECC794A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 0FA6
Signing time: Tue 04 Nov 2025 11:00:12 +0000
Manifest this update: Tue 04 Nov 2025 11:00:12 +0000
Manifest next update: Wed 05 Nov 2025 11:00:12 +0000
Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
2: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (hash: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=)
3: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: 7DXq6YkRXnoZEjLgVFVvnCtboNtn1mTZ81me5XTaOXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3f:eb:06:91:90:39:32:ed:71:3e:cc:79:4a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Nov 4 11:00:12 2025 GMT
Not After : Nov 5 11:00:12 2025 GMT
Subject: CN=73f89851ae4f7205885d521fcec1765f4feb98e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:30:0e:0a:11:0f:fe:32:09:63:c6:27:b3:
cc:b3:e9:74:b7:cb:e7:e1:c4:18:53:e1:17:11:7e:
c2:ac:7c:59:26:05:b1:7b:62:8e:0c:99:9b:24:4a:
1e:49:27:5f:ce:fe:04:50:20:bc:cb:63:78:cb:ee:
dc:91:0d:f1:df:75:e4:d4:ad:e1:fa:43:fe:bd:4e:
ba:4c:b2:13:85:3d:fd:42:df:a1:2a:e9:f6:b9:f2:
12:3d:d7:7a:77:a8:9b:d5:8f:10:de:03:89:d6:c4:
ad:20:d5:6d:ac:7c:72:f4:d5:42:e3:d6:6b:fb:1a:
f4:26:fa:38:e3:d3:7a:ae:6f:e8:60:76:33:5a:2a:
b1:8c:3f:4a:16:44:41:67:54:11:a9:09:eb:89:c2:
e6:b2:d6:d8:f6:42:af:d9:70:d3:24:b3:02:58:02:
d1:0b:8d:ef:8c:eb:34:dd:8c:ee:e7:e5:b2:dc:90:
bf:98:b1:89:55:ac:ff:fc:21:9e:bb:85:a2:e4:64:
7b:6c:ed:a8:01:33:a9:d3:08:fa:42:fb:2c:c6:aa:
29:92:0a:18:53:f1:c5:26:d2:7c:7b:57:83:56:f4:
80:7b:f1:32:2a:d9:20:5a:8f:7e:1a:61:a0:83:c4:
ed:c7:8f:ca:e5:1a:6e:0a:61:f9:7a:79:f6:5a:61:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:98:51:AE:4F:72:05:88:5D:52:1F:CE:C1:76:5F:4F:EB:98:E8
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:55:26:fe:27:2b:52:8f:ac:4d:65:81:fb:c1:19:42:e4:e4:
c4:9b:a0:08:75:8b:c2:b8:34:7f:8a:4c:89:f7:c9:c8:1f:c0:
16:0a:19:41:62:3d:f5:25:3e:42:76:4f:d8:cf:cc:5d:fa:ec:
7b:b6:c8:97:44:d5:15:34:cf:ba:2e:d7:79:55:37:5e:05:05:
0f:6a:d9:ae:94:dd:19:56:3f:91:15:c1:b1:81:fa:5a:19:98:
01:99:89:2e:15:ee:bf:ec:f3:0d:56:e2:46:c9:5c:24:ec:37:
4f:32:7e:df:56:46:37:6c:11:eb:c9:83:10:03:fb:2f:f7:96:
41:f0:fa:8a:88:38:2d:10:fc:e7:4d:8f:8a:30:1a:15:60:d1:
a3:7e:d0:a3:e0:9b:76:cf:a7:2f:94:09:97:43:56:27:09:25:
2c:90:d4:c7:5a:fe:66:ef:9e:18:2e:0a:91:a8:18:06:f9:05:
11:62:04:42:7a:c1:e5:5f:af:e1:80:48:a5:73:f7:ed:f0:af:
3a:77:3f:2f:27:c0:44:48:03:f8:a2:7c:cc:65:18:77:df:34:
05:75:47:5b:24:0f:94:e7:27:01:b8:e1:a0:07:49:6e:d4:10:
34:6e:3c:7a:6c:fa:89:26:55:52:02:9c:c9:66:9f:de:e2:18:
ac:db:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:25 2025 by rpki-client