Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: SglIovkpy292OquUNGGhoy/7auCF+FBofdXf+c2qC3Y=
Subject key identifier: 0D:16:DB:A4:AA:00:81:C1:36:4A:A2:06:78:1E:D1:EE:73:AA:B9:7A
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 019A50E44450C769466E23097372B7F69288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 1336
Signing time: Tue 04 Nov 2025 22:02:08 +0000
Manifest this update: Tue 04 Nov 2025 22:02:08 +0000
Manifest next update: Wed 05 Nov 2025 22:02:08 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: Jd8DNnFnFcj4qnrjsTbdRbwIHShMwNg8EBqTMF5JJfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:44:50:c7:69:46:6e:23:09:73:72:b7:f6:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Nov 4 22:02:08 2025 GMT
Not After : Nov 5 22:02:08 2025 GMT
Subject: CN=0d16dba4aa0081c1364aa206781ed1ee73aab97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:81:d7:91:c1:55:3f:2c:86:50:aa:aa:b3:
b1:d0:15:6c:66:39:91:6a:25:fe:52:a6:c2:fc:b8:
38:e9:4f:7b:b9:97:d4:89:76:d0:5a:e7:42:63:aa:
c7:26:8f:f1:86:0a:fa:4e:4e:a4:a5:d8:c0:56:56:
71:ba:36:96:82:e7:cd:d6:82:71:0d:76:ad:3f:b8:
22:60:4a:c0:27:00:d3:05:67:cd:0b:fc:9f:c6:bc:
7e:4a:d5:fe:42:45:91:7a:94:30:a7:91:08:83:ea:
42:70:7d:bc:ff:10:bc:85:a0:7f:ca:97:73:ea:72:
d4:4b:18:98:19:6f:ba:48:8d:30:5a:e1:51:12:ad:
a7:ee:de:34:e6:04:e6:94:3f:3f:39:02:67:87:a7:
b5:2e:6c:b7:0b:18:ab:1e:f8:6e:b1:4b:84:73:14:
7d:c9:d7:f7:df:55:e6:a5:c8:d5:89:ca:2a:59:f8:
70:d7:48:5f:38:1f:a9:78:e4:bf:2d:f6:09:3a:40:
da:18:82:e4:4b:3d:05:19:fd:e3:b9:92:28:57:4a:
c6:2d:5e:5a:c5:9f:fc:cd:f7:6d:db:aa:a9:69:a8:
49:57:04:e6:2c:64:16:2b:47:81:7d:44:3f:8e:29:
06:bc:8e:e7:d6:47:44:17:3a:de:bf:72:dd:fa:74:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:16:DB:A4:AA:00:81:C1:36:4A:A2:06:78:1E:D1:EE:73:AA:B9:7A
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:25:0d:3f:27:29:58:e8:0b:24:bc:54:05:1f:03:11:06:b3:
ba:cf:af:69:f3:79:4b:63:a9:f9:c5:c6:78:1e:ad:d1:60:4d:
3c:9a:a8:6a:e0:75:21:82:83:b0:ba:23:4f:2f:29:f7:b1:db:
73:a4:a2:a9:54:f1:57:7a:f8:3f:74:33:d9:5d:9b:92:07:ec:
69:d3:2a:a8:e1:14:5b:cc:42:15:3c:6d:02:a8:3b:5e:51:43:
ba:2a:ea:ad:ce:be:0b:8b:c8:93:86:18:63:89:fd:06:fa:9e:
15:e3:0d:2a:c3:89:ee:b2:db:2a:d9:3f:a6:ec:bf:a2:d2:66:
10:0b:cf:9a:aa:a1:ab:09:22:18:34:1e:55:4a:db:e0:68:0e:
3b:80:6b:a0:75:ed:48:50:56:dc:a2:81:08:ca:bd:0a:17:00:
d8:3d:f4:d2:56:2c:f9:5c:72:65:29:8f:02:d0:db:0a:0a:7c:
4a:be:8e:d0:7c:24:0b:33:d1:55:e2:d4:c2:4d:61:d1:01:52:
28:e7:3a:d5:e0:98:fc:3f:cf:e2:0d:a3:ec:1f:93:05:0c:96:
a7:8a:b2:31:3f:7d:dd:cd:39:72:cd:98:91:a5:3a:d3:4f:ab:
4f:61:17:77:df:0c:eb:04:c5:0a:d7:81:9b:11:9f:81:b6:e8:
b3:ac:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:08 2025 by rpki-client