Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: +0EJZfQw91zWKiitBcqOg4mv3nHdth4VRaHqEP+fobo=
Subject key identifier: 9A:68:D7:71:F0:B7:7B:D7:79:DD:D9:43:EC:0E:76:07:54:85:7E:DE
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 019A4EF57D8A30A384621523B33D25999790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:42 +0000
Manifest this update: Tue 04 Nov 2025 13:01:42 +0000
Manifest next update: Wed 05 Nov 2025 13:01:42 +0000
Files and hashes: 1: aqX_aHr9DYDlihdIMBv6LMwHePY.roa (hash: CPN85FZ7OPhT7PlAx5nBT6Pw1xOtIkDQK0zxfnvB/+M=)
2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: aHyg/3g9m6QyThzaPzMgnAb+IJ3MyiYSuEhpSJzosPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7d:8a:30:a3:84:62:15:23:b3:3d:25:99:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Nov 4 13:01:42 2025 GMT
Not After : Nov 5 13:01:42 2025 GMT
Subject: CN=9a68d771f0b77bd779ddd943ec0e760754857ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:24:a7:b7:76:db:cc:be:42:77:fe:32:b4:
cc:60:46:a8:04:07:c3:64:a5:d0:60:65:a0:6c:eb:
e6:5e:3d:0f:23:46:4e:34:7b:23:25:61:9d:c0:7c:
84:c8:1c:e8:00:44:27:01:0d:70:48:72:85:3f:a4:
a6:9b:74:c4:f6:cd:3d:07:92:e7:6c:95:02:a1:e2:
d2:5c:ee:af:68:a0:3e:cf:72:3c:d5:e3:ad:ce:64:
96:63:f9:b7:52:ec:04:52:1d:ab:4f:16:1d:eb:52:
95:84:70:09:5a:c8:e8:35:4f:f5:03:58:a4:40:74:
fe:74:28:1e:dc:d1:d9:26:88:a5:3a:69:b4:92:d5:
11:2f:e3:63:b8:1f:0d:e9:91:54:7d:13:78:d5:43:
db:c6:74:46:c1:d3:bd:52:02:bf:fe:ed:c1:89:9e:
a4:48:20:57:01:d5:1c:68:07:3f:c2:e5:8e:47:18:
07:f2:d6:d8:e9:53:be:05:79:0a:7f:3c:ba:70:c0:
0c:11:36:3d:e0:f5:c0:7a:87:29:d4:81:45:2c:d6:
9f:d0:be:e3:a2:cc:53:9a:19:0a:11:96:ca:d2:b7:
6c:21:f4:31:2a:ac:1c:93:65:51:69:f1:61:b0:8f:
da:ee:df:17:ab:ba:5e:41:39:ce:c7:54:2f:31:64:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:68:D7:71:F0:B7:7B:D7:79:DD:D9:43:EC:0E:76:07:54:85:7E:DE
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6c:ec:4d:07:6e:a3:62:7a:32:8b:46:97:72:cf:7f:c1:50:
ca:8a:26:f1:50:3a:cf:85:07:31:b0:c5:b3:82:06:48:c3:bb:
0a:27:b9:48:57:fa:d6:a9:91:35:d6:65:c9:10:c0:62:26:1c:
c2:cf:28:6f:44:87:bf:76:1f:00:f1:f7:73:44:74:e8:4b:ae:
f9:a8:67:6d:f3:3d:63:b2:fe:b8:c6:29:ce:94:7d:13:57:4c:
eb:e9:aa:fc:52:23:02:16:25:f4:19:d9:a2:4b:64:d3:73:41:
de:1c:d6:bf:bc:33:86:8b:79:a8:a4:21:34:f9:f9:0c:61:19:
fa:17:79:69:f6:c7:b6:06:1f:05:7d:8a:e6:d7:b3:20:ad:76:
39:55:a2:b6:d3:6d:15:cb:0d:61:d3:61:eb:28:25:ea:6a:8f:
99:1e:00:2f:59:eb:0d:74:ba:e3:d9:f8:78:3b:d2:a0:7a:12:
da:ee:2d:b9:9b:d9:75:7c:18:cc:89:06:2b:eb:73:e7:94:d7:
4a:b3:b1:00:29:b7:00:5a:66:d1:17:5d:ad:d6:ff:82:02:75:
5f:2c:cd:9d:02:fc:f6:a5:18:b7:a2:45:86:12:00:2a:55:ca:
68:60:11:cb:50:e3:91:cd:33:96:9c:cb:a8:85:35:aa:a2:06:
78:47:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:07 2025 by rpki-client