Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: yrE++ylKmfiA8hu1F8ENSqiENjKoIBSLi+8v61qz0cc=
Subject key identifier: 77:99:CF:8D:F8:42:79:64:7F:5E:3B:37:4E:EB:86:CD:ED:53:1A:89
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019A4EF5ACB898CA029851F8045C7EFCE810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0A6C
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: Vqs7bF4N9StNlcxVxqYskuCpRlth4xfDczqGS4bkwkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ac:b8:98:ca:02:98:51:f8:04:5c:7e:fc:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=7799cf8df84279647f5e3b374eeb86cded531a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:3f:64:26:66:79:7e:48:95:b7:9c:be:16:
ed:b1:5a:d1:1f:ec:70:45:08:a7:3b:81:62:0d:6b:
ea:4f:bd:fa:3b:d6:45:f0:9c:b5:77:2a:83:aa:df:
fc:56:75:f6:77:c9:34:23:8e:40:94:53:19:f9:59:
ef:7b:91:d4:6d:9b:ba:6f:91:8a:29:9f:b3:e9:80:
cb:04:8f:32:85:50:51:63:e7:fd:7b:57:6a:13:cc:
8d:79:1a:2a:02:23:e7:0e:de:40:fe:c1:6e:71:21:
b0:c3:cd:b8:8e:90:ec:81:d4:bd:02:79:ee:8b:d7:
98:80:ac:04:3f:43:ea:34:ca:4f:40:af:3c:6c:63:
c3:4c:ef:ef:bf:f3:c9:0f:71:c8:a4:f3:23:eb:38:
58:46:02:0e:5e:5b:fc:6e:a1:64:3d:0f:3b:df:4f:
db:b4:ba:51:95:8b:b3:fb:13:24:13:5c:8d:f4:4f:
10:04:cf:ff:40:5b:bf:9b:c5:a1:56:15:27:0d:3b:
9c:12:0d:df:1e:b7:85:fe:38:f1:6e:43:d0:ca:a6:
20:bc:1f:c5:dc:1b:1e:b1:5c:da:db:b7:a9:a3:55:
c1:e6:88:17:55:9e:dc:5c:2d:35:b6:b9:ff:10:8e:
19:b1:31:03:3b:09:61:69:32:95:72:7c:d0:bf:05:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:99:CF:8D:F8:42:79:64:7F:5E:3B:37:4E:EB:86:CD:ED:53:1A:89
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:61:ae:80:c8:54:03:4c:d5:53:e6:94:f9:a0:88:4b:16:83:
d6:a9:f2:d3:f1:e0:37:0f:7d:cc:ff:a0:bb:f0:1a:ce:fc:23:
db:3e:92:30:09:5e:7f:bf:23:d6:14:d1:fe:1f:04:a9:f0:fb:
be:ae:6f:2f:fb:a5:b2:2a:47:f6:80:db:71:c7:67:77:04:10:
08:53:7e:9f:7b:a8:aa:a2:47:55:e1:0c:70:c9:67:62:90:05:
ae:ca:b4:ef:4d:98:ac:1c:ae:2e:4c:63:78:80:36:aa:c9:7d:
64:85:49:56:1a:2d:ff:9a:2f:26:0e:bd:92:38:87:80:0a:2b:
23:0a:47:b6:47:b7:3a:98:a5:e7:56:6f:5c:a6:d4:a6:e1:06:
ab:0b:6a:67:a0:d7:11:bf:55:33:dd:51:2d:56:64:89:f7:48:
15:64:7a:98:09:dd:16:d0:7e:6d:26:a5:e1:65:c3:b8:2e:33:
22:83:b4:1b:c4:a0:fe:f9:c8:e5:59:e0:8c:f2:19:8d:7b:2d:
aa:73:7b:a0:a7:72:c2:12:f9:51:1f:93:da:48:1b:37:9e:68:
5c:de:05:9e:1c:d0:af:03:02:36:4f:be:51:6b:49:16:08:c1:
04:13:dd:0e:fc:50:6a:ee:48:cd:75:9d:e3:4a:fd:50:0d:02:
42:4a:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:28 2025 by rpki-client