Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: tOlcsWs/sBEj0HhE1HcwxtDFjtWYmRxVJL4glnkweN0=
Subject key identifier: 85:BE:AC:29:1A:53:F8:28:12:1A:5A:12:67:DE:82:EC:0C:EF:32:1C
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019A4F2B36B46FB123BDA5C35DD9624103ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: WvyRQAzyFxUSshMMY8RXKU4AifWDwiCHnAwBlBoKhj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:36:b4:6f:b1:23:bd:a5:c3:5d:d9:62:41:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=85beac291a53f828121a5a1267de82ec0cef321c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:fe:1a:d7:8f:de:ef:20:59:f1:72:9e:68:
35:a0:80:48:df:31:46:24:c8:04:42:cd:cf:ed:bc:
b6:a4:50:40:43:59:57:6c:0d:06:91:05:70:7f:ec:
8d:3c:82:58:97:66:d1:90:60:ad:e5:11:9b:5d:49:
3b:29:4f:51:c3:ee:d2:3e:ff:ba:1e:f8:6a:46:8d:
01:79:c4:42:42:7b:a9:05:7d:dc:f3:d3:89:df:9d:
e8:95:23:e9:73:5e:79:d5:f8:94:3a:f8:69:de:a8:
25:87:93:c5:8c:a8:64:08:e5:22:c0:13:5e:4a:27:
af:c8:b8:50:6d:f0:10:74:a3:90:07:a7:48:bf:3c:
2e:f3:db:6e:6e:76:c9:1b:46:61:6c:4e:c6:0d:e9:
dd:74:71:bf:02:2e:ca:61:91:82:5d:05:d1:82:08:
50:f7:54:b5:6e:ac:c8:e7:53:3e:c6:cf:12:a0:8a:
4f:af:f1:91:3b:56:03:e3:9b:d7:d4:7e:19:66:21:
6d:c6:f5:3a:0d:ac:66:80:b0:e2:8a:1e:3f:32:56:
1b:ca:0d:64:48:5a:d6:cf:db:7f:9e:49:62:70:eb:
7f:11:6c:b5:58:ba:66:c9:7a:70:38:00:24:3e:ea:
0a:af:2a:80:bd:05:04:0a:20:fd:fd:bc:57:40:d7:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BE:AC:29:1A:53:F8:28:12:1A:5A:12:67:DE:82:EC:0C:EF:32:1C
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e9:5b:f7:95:0d:c1:85:c9:33:e4:6c:96:f5:be:fe:d5:95:
2a:f7:f0:22:f3:12:c9:be:32:61:75:09:26:c7:4d:1b:39:f8:
64:0b:23:33:17:25:ea:b2:f8:a0:cb:b1:01:f4:1b:d6:ac:eb:
dd:34:fc:cb:9e:f5:97:f2:0e:5e:dc:08:fc:b3:cc:64:9d:c1:
57:98:43:b2:c1:37:73:76:0d:66:de:4d:c2:be:52:cd:20:85:
05:77:b3:4c:ce:f6:f8:8c:e6:ba:2f:b1:7e:5b:e0:35:64:7f:
3a:e0:e6:c0:bd:34:f9:75:a5:a6:51:3b:45:45:de:c2:a7:b2:
57:7c:72:12:7d:ff:fa:d5:9d:9b:62:dd:a3:ab:bd:ef:c6:32:
6f:25:3f:95:2b:25:bc:70:05:7e:f8:17:5f:69:2e:5f:af:6f:
fc:99:94:e1:c9:2a:0e:66:63:36:7a:27:8d:7a:e5:d7:42:61:
f0:b4:49:55:35:80:da:7d:91:ec:a7:1a:9f:76:87:24:a0:61:
2f:3b:75:ff:62:7c:f8:33:71:3b:5f:a2:e9:be:c6:53:2c:fe:
90:11:85:eb:36:6e:76:90:6b:73:60:fb:33:83:95:f2:41:bf:
55:a6:0e:a0:38:36:d3:34:27:e2:c0:2f:18:e1:2b:d3:35:cd:
2f:42:77:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:41:01 2025 by rpki-client