Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier: NVdMy9DmtA4Vb+O4Z/P7+c+6lINzEULXf/Aie4Nputo=
Subject key identifier: 29:E7:EC:E2:AA:C4:95:0C:60:C6:08:EA:EA:1E:69:64:1B:42:1F:C9
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial: 019A4F98FE733AB2470669A9EF60A5BFA392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number: 0D87
Signing time: Tue 04 Nov 2025 16:00:17 +0000
Manifest this update: Tue 04 Nov 2025 16:00:17 +0000
Manifest next update: Wed 05 Nov 2025 16:00:17 +0000
Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: xXNH+xC3fx2SrsHp34MFGBOxQlLnFyp9aDmBIg6ejUQ=)
2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:fe:73:3a:b2:47:06:69:a9:ef:60:a5:bf:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Validity
Not Before: Nov 4 16:00:17 2025 GMT
Not After : Nov 5 16:00:17 2025 GMT
Subject: CN=29e7ece2aac4950c60c608eaea1e69641b421fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:41:86:c0:4a:74:2f:29:ba:91:96:e4:e6:
e7:58:98:c1:cc:cc:9c:4e:92:77:e7:fe:9d:31:d7:
73:6a:fa:56:be:8b:f9:2e:f7:9b:68:aa:d8:4f:37:
31:be:9c:d6:20:4f:7a:59:09:88:cb:22:61:59:1c:
bf:f3:62:e6:fe:b9:bd:49:5c:5e:3b:cb:4c:ee:27:
2c:f7:43:32:b6:6c:26:b5:1a:db:24:82:6f:1d:7c:
58:56:b0:80:ec:3a:f1:a4:62:db:5e:de:6f:4d:6e:
2d:18:a5:73:1a:75:4a:19:7f:71:78:6a:85:a4:93:
13:7d:b9:cd:d5:41:8c:3a:db:c2:ce:b7:e4:40:73:
71:2c:5d:d8:ad:d1:b9:75:d7:d6:fa:94:b9:2e:9f:
63:e5:c3:85:f0:74:fe:5c:37:96:03:bd:ed:c8:69:
f2:9e:bc:23:09:d8:9f:e4:46:b3:a0:a1:ad:bc:af:
22:7e:d6:c5:9a:31:6a:e4:7c:2f:0a:61:47:08:40:
bd:cc:0d:91:3f:ab:2b:9b:b9:5a:25:13:5c:6f:58:
89:3b:ed:14:17:3b:36:47:d0:5a:57:e4:a8:bd:0e:
53:8a:b7:a7:8d:2d:4b:08:34:42:11:89:1e:41:2a:
61:59:02:4b:87:e9:0d:df:e1:3f:9a:8d:45:c3:4e:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:EC:E2:AA:C4:95:0C:60:C6:08:EA:EA:1E:69:64:1B:42:1F:C9
X509v3 Authority Key Identifier:
keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:78:58:9a:92:ab:52:44:c7:10:7e:2e:79:42:c3:7f:88:
ec:74:72:06:74:ae:d5:d4:1c:45:73:0a:1e:e5:a0:72:77:b1:
15:0e:d3:aa:f8:47:08:df:8a:fc:2b:ee:f3:07:05:80:70:26:
c9:92:6c:7e:3b:9e:52:d7:99:06:4d:20:2c:c2:ba:dc:6e:15:
e5:32:89:a1:3b:28:7a:e9:52:47:dd:5d:bf:e0:a3:ae:69:a2:
8e:b1:2d:f2:40:96:be:8e:9f:a7:27:70:9a:d5:54:35:46:98:
53:18:79:a2:3e:98:d6:9d:d6:94:20:7a:e2:0a:2f:77:00:dd:
69:6f:9e:c3:50:81:ae:8c:f2:7b:c3:ad:f9:d9:8f:ca:fb:11:
52:72:0d:40:4f:ba:23:2c:22:1b:64:37:a2:db:04:4a:04:91:
4f:c2:00:58:f0:8f:27:32:7d:6e:c9:64:c2:4c:bb:b1:9f:0a:
74:d2:f2:88:5c:8a:af:3b:05:d1:6a:8b:91:e1:df:f6:e2:9f:
81:06:10:46:7e:e6:bc:87:fc:93:ae:45:5e:b3:af:8f:99:7d:
8e:c7:2d:ab:86:e4:f5:97:3b:32:05:5c:e3:5c:96:af:b1:de:
92:54:e9:6c:61:39:57:13:20:c6:4b:08:60:b1:d9:c3:ed:ec:
24:92:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:07 2025 by rpki-client