Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier: A9R/sY5D06ZYQ6Pxjs2qVScW2G0NXIo/vX4XYu3Dnz0=
Subject key identifier: 4B:2F:2A:C2:86:F4:DD:FE:A2:CF:7A:D5:38:13:68:D0:EC:D7:30:A0
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial: 019A4EF55900207F90DD7A70CAB8C1FECCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number: 0F7B
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: 9ivqmHBQ3xzMR1wO01cTfsmNJ4/gkNwpJ2uKLofAktU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:59:00:20:7f:90:dd:7a:70:ca:b8:c1:fe:cc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=4b2f2ac286f4ddfea2cf7ad5381368d0ecd730a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:d2:a9:03:b9:8c:b4:61:68:fc:74:05:4e:
7c:70:8f:aa:5b:9d:03:0f:89:dd:6b:5e:f3:8f:2a:
ca:a2:22:89:46:3a:e9:06:5d:8a:fc:86:8e:bb:7f:
04:6d:e2:df:20:4f:95:9a:de:b5:18:a6:a5:5c:02:
f6:63:6e:29:7b:46:08:7f:9b:91:95:29:bf:ae:b0:
26:d2:33:70:62:c0:fb:a3:d5:45:24:63:2e:0e:07:
82:00:37:ed:f8:8f:cb:c5:c1:42:59:9b:e2:9a:59:
ad:ad:bc:64:6e:29:86:e8:11:93:20:00:ed:4e:aa:
f8:c7:6e:c1:6c:05:81:88:75:f2:fc:16:25:ee:67:
30:50:26:f2:b5:2e:b3:78:23:e7:1e:ea:22:4d:e0:
93:d4:5d:1c:27:23:30:d8:f1:a9:20:f5:cc:93:33:
0a:72:66:d1:dd:52:4c:e6:e5:e7:b5:6a:2a:09:72:
5b:e3:2d:26:72:83:08:a7:7d:7d:81:82:04:92:fd:
d6:72:a9:3e:3b:d6:9e:fe:9a:07:7f:a2:17:7c:ed:
89:69:aa:75:73:92:8d:06:af:3b:3d:e3:c0:23:92:
72:79:da:ee:51:82:ef:0f:77:8c:90:ad:b5:1c:eb:
8a:e2:bc:2f:8f:a6:ad:6a:cc:18:16:f6:fe:56:f4:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:2A:C2:86:F4:DD:FE:A2:CF:7A:D5:38:13:68:D0:EC:D7:30:A0
X509v3 Authority Key Identifier:
keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:55:5e:8d:17:4b:10:f6:40:af:d9:3b:d7:0c:c5:d7:69:83:
2d:93:86:71:5b:b5:a5:19:8b:d9:6a:fe:9c:be:d5:d1:c0:79:
df:b0:87:bb:0d:b5:4c:88:ce:ea:fe:d1:21:cf:82:16:ad:2b:
8b:bf:48:80:51:19:b6:91:16:98:a7:17:aa:4e:d4:e1:fe:86:
4d:d5:73:05:e2:0d:4f:b8:a2:3f:90:21:12:0a:99:2e:83:8a:
d0:9f:d4:03:97:6c:1e:6a:00:d5:0a:dd:ef:b3:08:fb:07:76:
03:eb:f0:40:2d:6e:df:2d:78:68:c1:d1:24:97:4c:62:be:ee:
10:16:d3:73:c6:5a:bd:a7:65:28:71:11:a4:bf:23:0f:67:49:
eb:f9:06:07:22:fb:09:9a:e6:db:85:72:5a:b5:75:8f:ac:8e:
19:6f:c6:8a:54:f9:b5:59:5d:89:9e:f1:47:d4:8c:14:a3:c9:
89:fd:1a:87:e8:e6:7c:0f:39:57:78:a4:8c:0d:75:22:91:6b:
be:08:b0:87:36:e8:18:32:b0:ab:76:9b:2c:95:2d:08:a0:7b:
c0:6e:f6:49:8e:9b:ed:bf:dc:6d:fe:63:b3:f2:57:6f:5c:b7:
cf:cd:9a:1f:1c:1c:d2:f1:8a:6a:22:50:7e:16:a7:02:0c:4d:
39:fa:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:11 2025 by rpki-client