Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
File: Ou5vE-TaDy5DIqGnWqfn189xekI.mft (raw, json)
Hash identifier: deR319HrB6eKConsw+g2bkIa8v3Vu9HS9ogCyRACwhM=
Subject key identifier: A6:41:34:9D:2D:84:6B:F8:5F:2F:DA:DA:62:5D:A7:4C:07:F2:5A:84
Authority key identifier: 3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
Certificate issuer: /CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Certificate serial: 019A4EF5A66C7A5BE7CA5A59938D4899E311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:53 +0000
Manifest this update: Tue 04 Nov 2025 13:01:53 +0000
Manifest next update: Wed 05 Nov 2025 13:01:53 +0000
Files and hashes: 1: Ou5vE-TaDy5DIqGnWqfn189xekI.crl (hash: 5Qw8M49Q3CQp4nCn3NRqcY07bp/PYIWOkZVC3mtshTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a6:6c:7a:5b:e7:ca:5a:59:93:8d:48:99:e3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aee6f13e4da0f2e4322a1a75aa7e7d7cf717a42
Validity
Not Before: Nov 4 13:01:53 2025 GMT
Not After : Nov 5 13:01:53 2025 GMT
Subject: CN=a641349d2d846bf85f2fdada625da74c07f25a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:69:d9:8d:7e:10:6e:fd:b1:ac:41:03:da:
fe:9b:49:9b:a4:0e:27:9d:61:21:01:48:ad:59:9c:
49:25:6a:c0:0d:fd:05:16:d7:1a:33:fa:9c:39:80:
51:fd:ea:3d:73:fa:04:c9:04:7d:32:bb:dc:6a:21:
ee:ec:f9:c2:58:12:2f:59:22:43:79:66:56:86:ca:
9b:f5:6c:f5:d8:da:57:c1:3e:d6:c2:41:b8:42:a7:
ea:d5:5c:8a:e1:99:ae:b2:2c:4f:d6:45:7f:42:9f:
5e:4f:80:b1:76:eb:e0:b3:bc:b8:66:9e:19:4f:21:
29:a2:4c:3a:25:76:ce:94:0d:2c:9f:73:e9:6a:2d:
ef:e2:72:60:d7:76:49:cd:5d:33:34:f3:4d:dd:f1:
9e:79:2a:0b:85:b0:cd:d9:e4:89:88:4c:88:39:a9:
55:53:a6:31:2a:b8:3e:2e:82:55:18:05:fc:d3:16:
33:cf:9e:aa:c5:45:d7:5f:25:b5:6f:28:a8:b0:1d:
b1:a3:77:47:dc:b4:9a:d4:4c:3d:6d:0a:a2:79:78:
3b:5c:5f:c8:69:cc:19:fa:3c:6e:da:4a:ec:0f:c4:
9a:d5:13:54:c5:8b:d4:70:40:b1:66:33:43:98:4d:
37:5d:59:03:76:df:e0:f2:60:5e:e2:59:b8:ad:a7:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:41:34:9D:2D:84:6B:F8:5F:2F:DA:DA:62:5D:A7:4C:07:F2:5A:84
X509v3 Authority Key Identifier:
keyid:3A:EE:6F:13:E4:DA:0F:2E:43:22:A1:A7:5A:A7:E7:D7:CF:71:7A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou5vE-TaDy5DIqGnWqfn189xekI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/ba0b0e-7cea-4b9a-9b6d-0c0292167f95/1/Ou5vE-TaDy5DIqGnWqfn189xekI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:34:38:c9:aa:1f:47:e5:b9:14:ab:7f:3b:28:f0:d8:2c:56:
28:e6:ad:03:5e:f3:10:56:c1:76:a6:01:cc:07:f0:c9:76:ca:
33:f6:9e:99:1a:48:d5:dc:6a:d4:2f:70:25:03:1f:48:e7:38:
7d:19:ae:d0:9d:46:77:7e:8a:2d:26:91:da:55:36:92:86:6f:
8e:6c:a1:5f:0a:25:bb:e2:47:17:1f:3f:59:2a:68:92:b6:a9:
dd:50:6c:c8:d6:56:22:9c:f7:82:d3:dd:44:c9:0a:2e:4a:2f:
de:6f:c8:1b:cb:5e:ac:83:36:7d:35:17:6b:21:da:cd:d8:47:
53:a5:b0:48:e7:db:ff:41:e6:ef:35:0e:9f:5d:c1:14:b7:fc:
c9:51:fd:71:3f:d6:c6:d8:63:fa:54:d1:74:f7:5f:f7:bf:de:
b0:1a:25:2e:6d:45:04:82:2b:0c:02:cd:9a:34:0d:e3:2a:cb:
ce:7d:6e:a4:31:65:3f:2b:58:7b:4a:ca:2f:ba:d3:4c:37:52:
46:ad:d4:23:4d:29:d9:99:09:62:8f:57:94:51:26:78:ee:36:
81:0b:4f:df:45:83:2b:ba:0c:7a:94:5c:d4:c3:a7:83:84:cb:
f7:87:03:b6:a9:d4:f8:40:2b:8f:95:2b:89:62:58:1c:57:a5:
92:7d:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:29 2025 by rpki-client