Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: 8ENqq6xh4+ssakVDatOyNCOvgf3bQbjcxw2SXNGEX/c=
Subject key identifier: 92:AD:95:B1:94:7D:75:6D:48:DC:93:79:37:F0:81:AA:52:36:EF:88
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 019A526348D43D012A58D014251B05F7E419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 1718
Signing time: Wed 05 Nov 2025 05:00:29 +0000
Manifest this update: Wed 05 Nov 2025 05:00:29 +0000
Manifest next update: Thu 06 Nov 2025 05:00:29 +0000
Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: 4pCpe3TXcSvfE9PWvj3/2BcCXctqxaWCu7++4lI5xzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:48:d4:3d:01:2a:58:d0:14:25:1b:05:f7:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Nov 5 05:00:29 2025 GMT
Not After : Nov 6 05:00:29 2025 GMT
Subject: CN=92ad95b1947d756d48dc937937f081aa5236ef88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:db:6d:8d:65:4c:9b:11:c7:10:96:51:76:
15:e9:71:41:1d:93:7c:5b:0d:c0:28:84:7a:58:2c:
82:71:73:bc:a0:44:53:84:20:6e:7d:96:13:00:73:
50:6a:16:95:b6:7b:b6:12:f6:99:e7:47:2b:bb:a7:
52:ab:67:2a:d1:a7:3f:88:9c:be:4c:82:b4:b8:03:
61:8e:36:0a:b0:20:93:ba:55:a1:54:75:a4:15:76:
6e:34:63:60:e4:5d:81:23:a3:07:e5:d4:aa:e5:ef:
29:d5:dc:fb:a2:75:b1:f6:39:46:0d:8f:d5:13:03:
2a:85:aa:65:76:e3:37:0a:d2:d3:4d:a2:7e:0a:7d:
b1:be:cb:a5:1f:7d:74:09:af:29:54:ef:d4:b8:00:
75:7f:58:c1:7e:16:d6:46:ec:80:19:d2:c2:33:54:
08:09:bd:cf:47:93:a8:82:0a:2f:f8:a6:19:b6:e9:
1a:bf:6f:65:2b:e8:51:1a:b7:e3:35:04:aa:1f:80:
23:0d:a2:05:79:84:4b:55:05:7c:ec:f2:ca:aa:3f:
5d:f1:33:e9:54:c6:76:73:82:01:43:18:50:cc:49:
18:68:38:da:d9:99:da:e5:bc:8e:28:ae:c9:07:8a:
a9:41:14:e1:f4:fe:d8:0a:4a:83:85:ce:59:d1:2d:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:95:B1:94:7D:75:6D:48:DC:93:79:37:F0:81:AA:52:36:EF:88
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9a:75:bd:27:67:84:8a:a0:ae:a3:c7:d1:14:f2:2e:54:9f:
01:2f:78:2a:7a:05:b2:23:f4:1e:fd:0f:35:93:d1:23:2b:23:
7b:11:86:7c:64:2a:7d:8c:98:4b:df:11:ba:19:ae:23:b5:dc:
8c:90:85:a1:02:5e:3b:80:58:ee:76:53:cb:57:b8:c0:37:ad:
8f:97:70:d4:5e:61:93:d1:1b:6c:1b:87:7c:45:39:6e:a6:a6:
8c:c1:14:ac:67:98:4a:b7:3b:b4:06:e5:99:16:13:8b:b8:f6:
ed:08:f6:c9:e2:43:c2:9b:b7:7d:c2:a0:be:06:9e:50:24:a5:
49:9c:f9:ca:8c:0d:2b:a6:56:86:40:18:7e:71:27:fc:93:9e:
76:95:8f:3c:4d:ad:1e:43:2f:1e:9c:1d:fc:06:41:cc:2a:2e:
6e:17:ea:24:33:44:aa:7e:93:b8:cb:f2:54:13:fa:10:9e:5c:
ae:80:43:9f:c1:e6:ac:00:fa:d8:92:1a:af:ae:7e:76:0c:fe:
73:8a:58:29:78:82:45:5b:c2:de:0a:6e:c9:5a:7a:83:8a:6a:
19:34:ed:46:fc:c1:8c:b2:5c:aa:81:f3:7b:c2:d0:75:35:70:
97:30:a9:91:35:41:8c:94:a9:4e:7d:57:f3:6d:8d:56:1c:e5:
02:49:af:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:22:46 2025 by rpki-client