Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: 6ggdxHMBLhnIUTSApyXDPp4AIkJi/csZZUiGKvEG7wA=
Subject key identifier: FE:E3:D6:61:C3:FB:B6:59:B7:AA:82:8A:55:1C:4A:A4:56:32:7B:8A
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019A4E86A64BEFEACFED13E191CA2930F76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: qXC/TYEZ+SVqjfdrKFiOwfDzffQQyZLchpQ9giqaQcs=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a6:4b:ef:ea:cf:ed:13:e1:91:ca:29:30:f7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=fee3d661c3fbb659b7aa828a551c4aa456327b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:5f:51:42:0d:6c:8f:6b:7a:47:96:32:85:
0b:45:b7:93:96:02:ae:0e:e8:5a:36:65:a5:fa:51:
a2:94:7d:ed:b4:ab:37:5c:fa:ce:4f:2f:c9:56:34:
a9:c0:10:0f:dd:d0:fe:f9:0e:cc:69:e7:f1:c7:60:
9a:52:61:b1:ed:56:0c:f4:ac:d6:c0:a6:78:bf:34:
bd:55:3d:8b:74:12:4e:be:a3:55:50:fb:2b:9b:0b:
29:63:de:6b:12:12:70:7c:9c:92:48:dd:d1:de:12:
20:8b:42:5e:4c:a1:da:8e:68:47:c4:23:3e:fb:e3:
65:f5:d6:7d:4b:a9:b7:e4:94:0f:1c:a4:0e:d3:89:
cb:69:28:45:6a:76:2f:48:92:15:9d:ee:e6:3e:b4:
87:40:bc:dc:ee:1f:c1:5b:30:e4:f0:b1:b8:f9:a2:
51:36:52:74:91:51:fa:e3:cc:d8:2d:7b:fb:0b:05:
31:7f:ef:cf:70:d6:11:5e:62:b2:f8:87:ae:6c:5e:
57:5c:61:07:ed:75:73:95:8b:52:5f:ff:5c:24:82:
ed:61:71:6b:b5:5c:ae:45:d9:bb:f9:8b:1b:25:98:
4b:75:56:2b:a8:24:9c:01:9c:d0:29:b0:91:42:ed:
41:8d:43:20:56:0d:42:13:0a:d5:5a:8d:d9:17:cd:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E3:D6:61:C3:FB:B6:59:B7:AA:82:8A:55:1C:4A:A4:56:32:7B:8A
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3e:78:10:22:1a:57:bf:d1:75:c2:17:51:47:2f:21:26:70:
8c:7b:10:da:eb:2c:ad:1a:e1:ec:57:c6:ac:9c:9b:f3:d5:68:
37:2e:7e:59:9a:53:b9:32:0e:49:3e:8f:28:9a:85:54:ae:a7:
e5:96:eb:1f:c9:ee:0d:c0:c9:c3:3d:6e:04:6a:78:c5:f4:c0:
22:d7:14:3c:90:92:84:5b:84:be:13:11:22:95:ae:78:e0:8b:
38:6b:f3:3c:ca:7c:c6:5b:0d:cd:16:99:5d:5f:23:d4:a3:ea:
30:19:44:4b:18:7e:f2:02:2f:b5:a2:17:a5:4a:8a:3a:30:a8:
e2:f3:02:8d:78:74:f3:ce:d1:47:6f:85:14:0b:af:62:23:2d:
f6:c8:e0:dd:4d:98:92:99:a7:78:08:88:86:f6:b3:38:ea:61:
61:fa:25:99:0b:59:f3:09:bb:a3:cf:c1:27:ef:59:e8:5e:63:
d4:d6:86:ee:91:a1:3d:ed:97:fc:0f:4a:13:76:20:15:ac:1e:
54:41:4a:78:84:a2:2e:e0:e5:8a:52:0e:65:69:c5:ca:70:37:
6e:f1:ec:ac:53:b5:2b:10:89:93:fe:a7:b4:99:53:cf:be:fa:
cb:a7:e0:0b:2f:14:34:61:6a:41:7c:23:14:68:e4:64:53:37:
d8:84:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:36 2025 by rpki-client