Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: q43utXbJVKoc868BdONjVpeIKXjrpU9pQMExRk09/m8=
Subject key identifier: FF:89:A9:C6:27:8E:5B:70:A1:56:A1:58:54:96:7D:DB:AF:80:64:9F
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 019A4E18B23BEC9786068CFB14011C00BAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 144D
Signing time: Tue 04 Nov 2025 09:00:32 +0000
Manifest this update: Tue 04 Nov 2025 09:00:32 +0000
Manifest next update: Wed 05 Nov 2025 09:00:32 +0000
Files and hashes: 1: 1qXoS3ZyJIxcOWhfODj10DLjQ_U.roa (hash: GFEaUvVwjsTkY2CZy9se0kItacxeC4v59hUMVKrNWa8=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: 98zCuvewT1rM9FbTzc7077A8sDusdRGoOZnAugBCHWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b2:3b:ec:97:86:06:8c:fb:14:01:1c:00:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Nov 4 09:00:32 2025 GMT
Not After : Nov 5 09:00:32 2025 GMT
Subject: CN=ff89a9c6278e5b70a156a15854967ddbaf80649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:f2:ea:88:ec:53:dc:23:88:cb:7c:e2:39:
fe:6f:cf:74:5d:b9:a8:f4:c2:be:c1:e2:a6:80:2a:
37:4d:3e:f3:d4:b1:23:17:0d:c2:26:64:b6:bb:0c:
a0:c2:dd:19:09:70:7f:75:47:59:7b:f9:cc:bc:c8:
a3:7f:7d:b5:71:d8:7f:99:5a:9a:bd:56:7f:70:5e:
22:b4:54:59:83:7c:34:74:3c:df:82:60:82:08:12:
76:b0:e5:86:66:57:21:97:1a:0c:8c:e6:f5:1f:4e:
bb:f9:fa:d8:e6:ed:82:04:35:1e:08:db:bc:94:2a:
60:46:02:e7:87:71:59:07:5f:78:33:22:46:bc:50:
0e:42:89:23:00:97:fc:fc:72:8a:61:c6:9c:b6:c4:
59:e7:2c:62:5e:49:ed:c7:95:95:ad:cd:52:51:63:
33:ae:3f:9a:5f:89:dd:e5:5b:0c:f0:83:7a:10:0b:
96:a0:72:dd:d4:bb:40:94:bd:af:e9:26:4c:86:f5:
ab:1a:e4:41:7a:9f:8b:64:77:c2:1f:2c:26:a5:9b:
37:30:1a:96:f8:a8:4b:00:f9:a6:ae:22:2e:cb:fa:
0b:88:11:ed:09:50:cc:7f:82:99:09:6a:cb:2f:56:
cc:1a:f1:31:8e:5e:43:b1:a1:e9:b2:73:0b:0f:0e:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:A9:C6:27:8E:5B:70:A1:56:A1:58:54:96:7D:DB:AF:80:64:9F
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b6:ef:c6:f0:5b:23:9f:79:5d:96:28:a8:38:53:b9:33:2a:
12:dd:42:b8:17:97:0a:e3:77:5b:e7:25:96:17:11:ab:ea:9d:
6c:65:d1:c3:46:9e:3a:36:cf:b1:2a:f6:02:cc:84:aa:c5:61:
c2:76:14:5d:4c:93:5a:27:e4:9b:39:95:97:1f:a8:99:78:3b:
43:76:35:39:41:67:09:e4:80:a6:97:9c:46:83:57:bc:33:ef:
0b:86:0c:3c:05:f9:7e:ba:ad:da:a8:9e:9c:8d:52:7e:96:c6:
c9:f9:5c:e5:7c:06:73:5a:02:4c:43:54:eb:01:77:6c:ab:86:
b7:bb:bf:2f:6e:3d:c1:19:98:61:1c:8e:a9:b5:4f:98:34:81:
f2:d2:0c:90:e9:79:0e:c4:3c:d1:59:0c:3c:0f:de:5c:37:97:
31:c8:2e:60:df:d2:bc:4e:b9:1f:0a:83:a1:7f:a9:65:a3:6b:
20:39:22:1d:32:88:de:50:58:d4:da:2c:84:e5:0b:bc:76:0d:
6e:63:ff:4f:8e:db:9c:59:81:da:d5:61:c1:db:34:c5:b8:fa:
a9:3a:72:e6:27:3c:39:bf:62:cf:43:23:8f:53:17:8b:45:d0:
6c:4b:25:5d:39:46:70:d7:c8:f1:63:8f:9f:43:52:7a:c9:e8:
d5:35:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:29:06 2025 by rpki-client