Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File: oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier: Q9dU9B0Uh6yCgUQ/o/OFuhGUXYRItEb1c3x0gNifb/Q=
Subject key identifier: E7:27:1A:03:2D:8D:91:76:F4:DF:6B:B4:92:C7:83:27:D1:1D:C1:63
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 019A4F9977BF8CC8D745140B9AE69DA2D9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number: 171B
Signing time: Tue 04 Nov 2025 16:00:48 +0000
Manifest this update: Tue 04 Nov 2025 16:00:48 +0000
Manifest next update: Wed 05 Nov 2025 16:00:48 +0000
Files and hashes: 1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
2: EFk1lNXwEBcRAFhoClA443_i5HA.roa (hash: xLW6nYf20kTwvvd9EPpkcVtHN4fslrZstANOcysv2Fs=)
3: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: Ia0J8ju70sslFGKPjoaTLk0JvMbedH8or+AN6I6m8yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:77:bf:8c:c8:d7:45:14:0b:9a:e6:9d:a2:d9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Nov 4 16:00:48 2025 GMT
Not After : Nov 5 16:00:48 2025 GMT
Subject: CN=e7271a032d8d9176f4df6bb492c78327d11dc163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:1c:38:6f:96:34:ab:76:1c:a8:0a:65:51:
ff:6e:10:b4:14:b7:43:a0:18:27:01:f9:d2:7b:c1:
f7:9e:94:bf:8e:79:00:c8:20:79:5b:4c:21:71:41:
8a:64:dd:a5:24:24:e1:75:0a:8f:e6:b9:3c:5c:6f:
22:dd:28:d0:11:56:2b:d2:70:ca:b6:aa:c5:49:f0:
61:62:69:a2:8c:e6:0b:c4:22:84:e6:9b:a5:a3:95:
7d:50:c9:93:dc:ad:29:cd:ae:36:c8:28:31:f3:e4:
98:36:2c:82:88:18:e6:57:55:43:35:6e:14:aa:72:
6d:01:d7:27:dd:2f:a2:22:3f:00:a0:0b:0c:32:9f:
f5:95:13:22:3f:88:b4:9b:99:63:60:53:ed:7b:a0:
b6:3c:e9:32:95:00:19:ec:93:05:12:9b:ad:93:e7:
95:71:a2:6f:1a:03:fc:eb:7e:50:4c:9e:84:c9:33:
a7:0e:75:b3:b1:b1:cc:44:51:c1:7b:7e:2f:60:36:
33:35:45:0c:0a:86:34:b1:1c:e2:86:f3:b3:68:c4:
7c:eb:be:c6:e2:fc:91:a6:d1:1a:ab:8d:b7:e7:18:
6e:dd:41:65:f6:97:5c:16:7c:99:04:54:75:bb:91:
3c:2d:18:a6:c3:47:92:13:48:59:98:b9:80:d3:ad:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:27:1A:03:2D:8D:91:76:F4:DF:6B:B4:92:C7:83:27:D1:1D:C1:63
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:91:73:de:a5:05:31:31:ef:6f:2c:90:8d:14:e2:1b:89:f4:
32:a4:e3:a3:3a:6f:d9:4c:d2:3c:f0:0b:6c:54:2c:8e:21:15:
67:e5:43:d5:15:39:a1:2f:0f:90:6b:4b:6c:65:25:b4:34:2b:
b3:3a:d7:fd:2a:97:4e:d2:71:e4:d0:c6:f3:3d:b4:44:1b:27:
27:2e:da:7f:3f:26:9e:73:2e:a9:b5:e2:70:b2:65:ac:d0:65:
ac:1e:f1:2b:38:da:25:61:a3:36:f6:96:20:1c:fe:c3:38:d3:
71:ad:a2:2d:c9:08:35:ef:e1:01:d1:41:9e:8c:06:a2:30:5b:
3e:cc:8f:d3:f9:d1:fd:f3:f9:98:45:03:d2:5c:ee:6e:32:4a:
41:66:bc:8c:86:20:c8:51:f0:67:b0:64:64:0a:c9:71:39:4d:
d3:6d:8b:3c:6b:8f:ee:fa:fb:3a:01:99:ea:82:14:75:53:4f:
06:92:58:39:f8:38:06:63:d8:2a:f0:d4:50:dd:92:f0:c3:11:
bc:fc:2c:5e:fa:ab:78:41:fe:16:c5:49:ab:a2:10:7e:79:fc:
19:ce:5c:b6:c0:ac:4a:39:60:4d:b5:33:dd:4c:90:4c:bb:e8:
35:48:6a:de:a4:53:a8:7f:c2:43:a2:cb:4b:a9:45:7c:c1:54:
68:ba:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:35 2025 by rpki-client