Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: VsxrzB6kubuMvgcWNuP00vyx67J4oAfEs2De08pSGlY=
Subject key identifier: B4:31:AC:52:31:09:1E:12:0A:26:9B:D4:73:B8:F6:CA:9B:10:06:4F
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019A5307EC2E36D93A7C9DCAAAB7592D9402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 0745
Signing time: Wed 05 Nov 2025 08:00:19 +0000
Manifest this update: Wed 05 Nov 2025 08:00:19 +0000
Manifest next update: Thu 06 Nov 2025 08:00:19 +0000
Files and hashes: 1: 8072Aeh0vfDGSJ8vyXnId-hQKJc.roa (hash: 5j4g+dxrUkP8XBx9ZA5/gKCWYOvbCcLIrcUnkZa+hD0=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: B0mYGvAerxhrljuaawjVk2DOGBvOMvELE1eZT1riq5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:ec:2e:36:d9:3a:7c:9d:ca:aa:b7:59:2d:94:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Nov 5 08:00:19 2025 GMT
Not After : Nov 6 08:00:19 2025 GMT
Subject: CN=b431ac5231091e120a269bd473b8f6ca9b10064f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:23:07:23:d0:58:5b:72:65:fb:76:ce:34:
c9:08:62:23:f0:51:29:8c:23:58:ac:a2:95:a8:56:
4d:90:ae:91:49:e7:04:ee:4e:b8:de:66:69:4b:04:
b3:fa:ab:2c:a4:2d:88:ad:e9:61:ec:a4:7f:38:09:
19:e9:db:a4:cd:81:2c:23:47:cf:9f:76:b9:bf:ed:
78:6f:92:5a:1c:e6:68:36:66:b5:81:d2:86:df:5a:
68:b3:07:37:a2:86:1f:1f:5c:eb:55:ad:0f:eb:af:
c4:a0:7f:c5:79:f5:28:bc:68:35:7e:7c:0e:1f:c5:
0f:b2:7f:d1:5f:5f:d9:a5:15:a0:fc:5a:95:73:13:
ef:2f:84:3b:3f:fa:4a:0a:49:f4:05:83:51:c5:46:
12:75:db:1e:de:8c:fc:fa:cc:17:ad:70:70:e5:ce:
31:a9:73:40:ce:5f:ba:37:0f:2a:b1:b9:4a:cd:64:
ac:79:b6:f2:64:5e:bd:72:32:67:94:e6:52:1b:47:
fd:c5:52:1a:a0:20:b5:cc:b5:83:81:6c:e1:b5:4a:
38:e8:ba:d0:b8:16:00:f4:d3:18:e2:83:c0:84:ab:
e4:1b:ba:02:aa:85:4a:14:08:00:71:8c:e4:dc:2d:
76:4d:06:dd:c3:72:9e:e9:bd:0c:76:de:fe:7e:4f:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:31:AC:52:31:09:1E:12:0A:26:9B:D4:73:B8:F6:CA:9B:10:06:4F
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c3:95:26:26:51:5d:03:8b:6b:18:40:a4:6f:aa:97:ac:95:
95:bb:6d:ea:df:fe:5c:98:69:15:a4:8f:a2:2b:b3:16:d1:64:
bd:28:06:89:90:8b:2c:23:7a:51:19:f8:4a:e1:66:5b:c9:b0:
6e:92:27:f8:9c:9e:10:ab:47:ba:93:bf:9d:7d:cd:b7:06:0c:
69:aa:1c:5a:85:5a:ac:35:c3:69:96:5a:d4:eb:08:c0:fe:9e:
43:80:00:78:18:e2:1a:2a:d5:10:17:00:00:2c:35:c0:c2:dd:
48:65:74:cc:6a:47:a8:a2:24:4a:e3:be:1a:44:90:ac:4e:71:
86:db:f4:da:62:4e:db:e0:07:2e:49:d9:24:d1:2e:fb:2e:70:
fe:70:90:c7:5e:0d:04:92:ad:c2:d8:60:4d:76:02:4d:2c:51:
2f:54:7d:3d:09:bc:c6:3a:3f:12:f8:96:1e:a0:e3:41:0d:2f:
a3:10:83:dc:59:c2:01:77:77:ec:a2:d9:77:86:91:42:4a:37:
64:88:c8:34:7e:31:cb:2b:02:d9:0a:da:21:57:2a:3d:9c:8c:
87:d8:1e:f9:97:1a:b2:40:0e:28:89:55:ee:fa:12:bc:e1:28:
4b:94:8f:99:18:7c:d2:8b:4a:0b:70:ca:43:cc:bd:f4:79:9d:
7a:49:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:29 2025 by rpki-client