Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: gM4qQgiLvBUJnjnnfESvmC/aZveiw7/jeuo/I7IORSQ=
Subject key identifier: 41:E0:9E:03:F8:5A:24:FF:97:32:61:B6:CF:F4:5A:08:BD:C1:E0:81
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 019A4F2B2C3D757BDC673D51F3D8270583AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 1272
Signing time: Tue 04 Nov 2025 14:00:20 +0000
Manifest this update: Tue 04 Nov 2025 14:00:20 +0000
Manifest next update: Wed 05 Nov 2025 14:00:20 +0000
Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: F/joB8+slCrZXkvc4vizCtNH4CD/t/MK0l2mvgr8O+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:2c:3d:75:7b:dc:67:3d:51:f3:d8:27:05:83:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Nov 4 14:00:20 2025 GMT
Not After : Nov 5 14:00:20 2025 GMT
Subject: CN=41e09e03f85a24ff973261b6cff45a08bdc1e081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:b1:4d:0f:38:43:ad:3d:f0:38:9f:cb:2d:
6e:f4:3b:b7:40:ab:ee:87:18:4d:a1:1d:85:bc:79:
f1:76:52:1e:18:9f:8d:a5:66:90:f2:b8:77:81:9a:
07:7e:01:76:0f:1e:0e:01:67:ce:61:ba:8d:7a:4d:
26:fb:9e:f5:ac:4f:bb:78:19:42:82:ee:13:c2:3e:
ce:1d:a8:0d:aa:84:82:14:ac:eb:da:5b:d0:37:dc:
bb:b1:6f:4f:15:5f:52:81:5e:60:25:e7:cc:2c:5e:
e4:90:e3:49:d7:65:df:dc:66:e7:eb:f7:cf:e5:b9:
a3:09:34:c4:d1:d3:72:8a:56:24:aa:44:68:ef:fa:
d0:e3:e4:c8:31:71:57:bb:99:04:79:97:ec:d3:0c:
bd:3a:90:8a:1a:5a:84:80:01:a6:dc:61:3a:1f:e3:
e1:00:88:47:2f:bf:3a:25:df:5c:47:16:1d:1b:23:
2f:da:48:40:10:f3:9a:ed:b6:e4:36:9c:db:0b:41:
da:c1:5b:8c:ce:c1:75:40:5e:00:72:c0:e1:48:8b:
e9:bf:56:99:99:93:9b:a1:aa:1d:b9:3d:f1:71:d9:
ad:f7:e9:6a:71:0b:7a:41:18:7d:45:5a:59:a3:d1:
8a:6d:67:6b:c8:4c:b3:ed:12:6c:6b:4e:45:9e:e8:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:9E:03:F8:5A:24:FF:97:32:61:B6:CF:F4:5A:08:BD:C1:E0:81
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2b:89:e6:0f:53:c3:f6:3e:b5:c2:9a:11:7b:1b:7b:35:e4:
5a:c0:2f:4f:55:49:92:ed:52:cb:4e:3e:c2:3c:fb:f4:a1:29:
3a:81:a6:13:df:c4:95:22:9c:48:06:33:67:a3:91:b0:0f:f1:
b3:7b:be:19:59:8a:45:dd:45:dd:de:5c:88:e8:04:32:44:2b:
b8:5a:50:47:e9:5c:e0:a0:34:29:28:0c:16:a9:07:99:e8:6b:
f0:54:24:1c:ab:d1:5b:3b:bc:85:5e:d4:70:7e:6f:2d:7b:ed:
1a:3c:15:6b:66:d3:05:87:6b:fc:01:4c:76:1c:1c:e9:ae:20:
90:fb:50:83:b5:62:6c:f5:1a:7c:a9:7b:c9:73:93:3a:bf:2b:
c8:ba:d4:b7:29:e8:a8:84:0b:21:de:dc:f2:5b:dd:f2:cd:fe:
f4:0e:9d:74:7f:77:e8:e6:e2:82:ad:0b:2e:0f:64:fa:31:5e:
c9:6c:e6:a2:10:3a:90:05:e5:96:ed:3e:a8:1e:17:ae:08:60:
38:67:7c:69:9f:b6:78:1e:c6:42:84:f3:63:3c:5c:d3:82:5a:
3e:2a:db:76:9a:00:e6:28:62:32:96:63:b7:37:7a:ab:1b:da:
62:c2:e1:50:02:60:27:a9:46:94:8b:36:86:fe:9b:6b:f3:ef:
31:43:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:07:49 2025 by rpki-client