Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: 2KfEZw9Sr5JEan4de5z9Vw3oIEFNnf04DJwbQbSgpKw=
Subject key identifier: A6:E7:89:B0:47:B6:57:E5:E8:10:47:56:B1:EF:C5:45:61:72:74:4F
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 019A4E4FDC812240C420F4F1E20675C63CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:47 +0000
Manifest this update: Tue 04 Nov 2025 10:00:47 +0000
Manifest next update: Wed 05 Nov 2025 10:00:47 +0000
Files and hashes: 1: PKIB0NDZswSqU-d6MbwA9JZfGMk.roa (hash: OewUcdT2Rw4jRK7U2p1ljpQHoVklDy1bcntiR+wXIOw=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: 5WwGOW9kl9cNPGPaYq5tBbV2rxsjaKAV1zsnuWaW7gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:dc:81:22:40:c4:20:f4:f1:e2:06:75:c6:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Nov 4 10:00:47 2025 GMT
Not After : Nov 5 10:00:47 2025 GMT
Subject: CN=a6e789b047b657e5e8104756b1efc5456172744f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:8f:d3:be:de:c2:8c:cf:9b:0a:e2:da:a2:
14:31:ba:4c:1c:35:2b:63:5d:1c:ca:1d:e7:2f:c7:
11:ee:9a:27:81:36:73:f7:37:00:12:32:fc:27:43:
78:68:63:cc:0a:07:32:03:fe:ea:b0:41:95:73:58:
61:f5:04:bc:64:8c:2c:e8:ff:8d:b2:69:80:0f:20:
6f:06:53:94:8e:02:d5:f0:6d:66:a1:87:a4:73:8f:
23:ea:71:62:4e:2b:0e:63:1f:ff:05:82:78:03:de:
2b:ac:24:70:32:18:b1:35:42:7e:5e:e6:dc:dc:0f:
ae:08:f5:7e:3b:62:92:38:b8:fd:22:8a:90:79:ed:
a1:f4:9e:01:8d:32:10:af:35:3c:8f:39:cb:a2:4d:
d1:0c:00:ef:41:6e:ae:88:d4:fe:b2:97:dc:8b:71:
25:57:3b:89:65:94:45:b5:77:1e:61:6c:9c:cd:a2:
c9:c9:4a:bd:f4:f3:8f:8f:de:aa:66:f6:c4:9e:ca:
25:ec:73:bf:4f:0a:42:da:05:3c:3c:51:14:8f:25:
9d:01:2e:ec:ec:39:ed:22:4a:51:74:e6:27:91:67:
87:53:c4:18:8a:42:ae:05:e5:61:e4:f9:6c:2c:b8:
a1:65:0e:1c:50:a5:4e:57:58:03:31:bb:b7:3a:b9:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:89:B0:47:B6:57:E5:E8:10:47:56:B1:EF:C5:45:61:72:74:4F
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:40:f8:d4:6d:db:78:09:9e:b9:dd:2b:b3:9a:a9:7d:1c:83:
d9:03:31:c8:4e:a6:09:cf:cf:77:08:78:74:dc:b2:72:05:71:
45:af:73:fd:98:3c:ce:a8:8d:28:ff:e8:fc:c2:bc:b3:18:09:
fc:c5:f3:b0:cf:d5:b3:c6:be:f7:94:9c:eb:3b:43:94:40:2c:
fc:b4:4c:c7:ab:58:2c:d1:a5:00:53:11:09:07:b3:9e:77:c7:
12:21:ce:28:a9:60:ad:39:53:44:01:2d:21:84:96:2a:ea:d4:
cf:f5:42:c9:3f:01:e2:12:e0:ca:d7:12:1a:f2:c6:ee:51:9e:
7b:f1:62:e3:5a:c2:b6:76:b7:e8:2d:da:ab:a0:24:4c:22:8f:
6f:8b:a5:c4:6a:35:2d:29:b0:01:c6:82:3c:21:a5:bd:68:0e:
5c:df:ac:22:34:dd:20:70:4c:8d:5c:e3:9b:31:83:e6:4c:14:
46:b0:fb:dd:ef:90:58:3f:77:0b:ef:d9:0b:a9:17:8d:af:8f:
05:bf:65:08:ff:e8:30:8c:fc:5e:24:26:62:2c:e6:e3:28:2f:
2e:a5:60:96:25:71:03:59:d0:3d:9e:18:ae:ee:b9:e8:a1:84:
e6:06:a5:38:8d:29:52:a7:de:1d:3b:85:c1:8d:f3:51:08:2e:
63:01:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:18 2025 by rpki-client