Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
File: oED5aPpS5ssv5lcQlwD6B0wZC4U.mft (raw, json)
Hash identifier: MAbm1wR027bhkA+bQgr+eS2Ztnf8PLTeFzVUwL5vWic=
Subject key identifier: 00:AA:3C:BA:31:FC:6E:15:A9:BA:68:B4:55:5A:E4:7A:3F:8D:F7:4D
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Certificate issuer: /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial: 019A4D3D11B859E6D9A01C077ADC583111D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
Manifest number: 06B7
Signing time: Tue 04 Nov 2025 05:00:38 +0000
Manifest this update: Tue 04 Nov 2025 05:00:38 +0000
Manifest next update: Wed 05 Nov 2025 05:00:38 +0000
Files and hashes: 1: lG9M0ytelOsltsM45OHzpDj8VA0.roa (hash: NbXxBP1wpUJzGfc6WpWH6JS4IiG1rIjC9o+D9ASG5hQ=)
2: oED5aPpS5ssv5lcQlwD6B0wZC4U.crl (hash: /feUC19XOZRJzgWWfOYlGrpH7mHuQXorgvcfCO1O27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:11:b8:59:e6:d9:a0:1c:07:7a:dc:58:31:11:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
Validity
Not Before: Nov 4 05:00:38 2025 GMT
Not After : Nov 5 05:00:38 2025 GMT
Subject: CN=00aa3cba31fc6e15a9ba68b4555ae47a3f8df74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:eb:ba:87:ef:9e:fb:b8:2e:79:11:4c:10:
a0:45:3a:00:c7:a0:1d:99:58:d6:a3:8c:0d:91:92:
f3:19:28:f8:87:e0:f2:32:72:26:5d:07:1f:98:6f:
2c:13:18:a8:13:c1:c4:1e:42:2b:d2:c8:73:43:e9:
05:62:91:e6:72:3e:f0:bd:93:e6:8c:ef:83:31:15:
6e:33:0e:a7:e4:44:6d:eb:d9:95:78:29:73:14:35:
1f:5c:6e:cf:ba:7e:af:4a:8a:bd:dc:01:c0:27:32:
74:fe:3b:fd:ee:ac:a3:44:d2:64:86:d2:2a:b0:a3:
40:cf:71:0a:11:05:cd:ff:ee:83:97:fb:6f:d2:3e:
0e:18:6a:de:5f:2c:62:85:c2:17:d8:65:24:b4:8c:
8b:9f:0b:cd:6d:7c:9f:60:05:a3:ad:f8:fc:42:80:
37:fa:c2:be:cd:68:6a:5e:e9:db:59:b1:a9:74:08:
7a:2d:1d:ef:b9:65:8e:1d:13:3f:cc:4d:c6:f2:b0:
70:42:bd:c4:e2:69:4a:c9:5f:91:17:de:12:e9:03:
f9:b0:94:1e:51:b9:a0:d6:a5:ef:e0:f8:91:d1:ef:
96:12:48:14:38:8d:4b:97:30:f5:5d:4d:30:08:9b:
2a:c7:3e:a6:bd:6a:31:70:39:e9:69:9a:d9:3b:68:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:3C:BA:31:FC:6E:15:A9:BA:68:B4:55:5A:E4:7A:3F:8D:F7:4D
X509v3 Authority Key Identifier:
keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b9:46:0b:f1:99:92:6d:9a:c9:70:96:c2:24:c7:45:dd:05:
17:a3:f2:4c:f9:79:16:49:83:15:d9:c9:44:91:55:82:77:45:
da:ec:7e:80:35:55:7f:7b:ee:2d:a4:3e:82:9a:a9:dd:62:58:
db:80:68:11:a2:2e:6a:30:3f:d0:4b:70:d7:db:cb:46:40:ac:
3f:aa:09:cf:41:57:81:eb:ee:f5:33:29:b2:38:f8:08:25:80:
d0:b4:39:cf:63:2a:87:e3:57:3b:7e:16:7f:05:62:4c:c0:cc:
92:7d:05:97:b3:f5:06:7f:98:b3:a2:41:4a:3a:d4:e0:5a:e0:
4c:87:fc:94:a8:f0:95:8d:19:6f:df:48:64:b7:13:61:7e:17:
20:72:ab:af:cd:e7:14:28:fe:d4:29:73:c3:2a:17:71:11:f3:
b7:fe:d3:7c:f2:6e:dd:9f:21:3a:59:33:9e:c3:2a:9e:fe:b5:
40:9e:7e:35:47:d5:e0:62:f8:49:76:ae:92:77:c0:99:a2:8b:
00:ba:0c:73:c0:2d:15:2b:d1:2f:64:f3:22:38:0f:58:4e:73:
32:11:18:7c:e6:4c:db:6e:45:13:db:6d:17:81:ea:9d:7a:62:
51:31:52:e6:8d:83:44:d7:b5:5b:1e:de:92:6b:6f:68:e7:60:
d4:43:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:19 2025 by rpki-client