Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: 0SQeTzsUNndYbVPo2hZEjQ0ggD4S3zd8Kfq+wbqySV4=
Subject key identifier: DF:64:62:DF:C4:05:16:1E:52:CB:DC:48:43:71:4E:F6:C1:AF:B9:13
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 019A4D3D19C1415E9B1BF198E6B61B001E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:41 +0000
Manifest this update: Tue 04 Nov 2025 05:00:41 +0000
Manifest next update: Wed 05 Nov 2025 05:00:41 +0000
Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: VTjCQj37ZYFdbmMHjtnD+shXFnaiqKuHpfeJk9y5Ta8=)
2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:19:c1:41:5e:9b:1b:f1:98:e6:b6:1b:00:1e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Nov 4 05:00:41 2025 GMT
Not After : Nov 5 05:00:41 2025 GMT
Subject: CN=df6462dfc405161e52cbdc4843714ef6c1afb913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:eb:ba:13:2a:d1:83:5c:51:39:2c:40:1a:
fc:8c:d0:6c:39:78:e5:03:48:a8:97:52:cf:cf:98:
53:6b:9d:6a:fc:0f:1a:7a:d9:a6:16:e4:13:4d:e2:
f1:e5:3d:62:7b:ee:33:90:50:0b:a7:08:21:74:58:
18:36:68:dd:2c:9c:b9:28:e4:47:1b:c3:18:4e:54:
ce:62:a6:e2:75:00:87:c1:2f:ea:9e:d6:70:79:3f:
07:38:1d:71:e1:81:67:74:77:7e:d2:f7:28:0a:ba:
c2:50:da:3c:18:07:1a:29:dc:ca:75:15:db:8c:93:
b1:c0:0b:66:cb:5f:9f:93:65:a9:a9:5c:4f:18:1e:
29:2f:60:c6:6d:ba:24:2c:02:95:f7:64:d2:c4:32:
4d:6d:7c:8f:01:4c:41:bd:43:1a:ed:1b:26:8f:c0:
e4:09:65:98:85:85:f0:94:e7:38:14:eb:5e:50:9e:
25:9a:43:9b:6c:2b:69:59:81:e6:1a:7c:6c:07:3d:
d2:65:41:fd:aa:a9:a0:cb:c4:fe:3c:78:a1:a7:02:
cc:04:9a:7f:15:1e:a6:da:69:5f:1a:6a:d0:40:f8:
30:e6:18:21:48:3c:95:1f:e2:84:35:64:17:47:64:
43:c8:54:61:df:02:78:25:3d:70:64:d6:f3:a4:5c:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:64:62:DF:C4:05:16:1E:52:CB:DC:48:43:71:4E:F6:C1:AF:B9:13
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a5:3e:7b:7a:63:70:8c:a2:36:9a:d3:76:85:db:9b:41:3b:
36:1c:d1:71:c4:1a:ff:0c:fb:23:87:ed:4a:7b:2b:e2:43:db:
7e:31:73:f3:05:5b:41:ed:0d:96:67:e7:df:85:c4:29:61:1b:
29:e0:b8:9b:41:08:9e:35:b5:ce:c2:08:c7:d5:0b:a7:70:69:
7d:5f:ba:b6:8a:22:84:6f:07:89:c1:18:fa:42:95:51:ab:b2:
c0:17:7c:fc:21:d4:2f:70:2d:03:41:4b:b4:7f:ac:38:91:b2:
44:3b:40:68:5d:55:9d:16:2d:fe:ac:61:06:89:b2:23:b0:c6:
fc:9d:1d:0f:dd:c3:37:09:17:45:a4:e7:83:be:a5:b9:8f:f0:
7c:40:94:1a:78:5c:6e:5f:f5:8b:63:1c:64:30:98:8b:6e:cb:
a9:a3:2e:98:d7:12:be:fb:39:68:d8:e6:0c:7a:92:19:89:5d:
0c:33:36:55:56:00:39:cc:76:f0:1f:78:58:e2:8f:f1:7f:67:
f4:3f:5e:b8:0b:0e:7c:37:21:a3:ef:49:f7:8a:83:eb:37:4c:
ab:8f:67:62:d1:d9:10:7e:37:e4:18:58:0e:36:1c:42:24:cb:
85:50:67:aa:6f:aa:ac:71:d3:7d:1d:23:26:40:4b:a9:0b:e2:
13:38:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:26 2025 by rpki-client