Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
File: oJRwOdnwgKQn91JcXQZvbPYhNPM.mft (raw, json)
Hash identifier: DZildr+vqVxDtRQJO3z8M6jdYG3YsK4ij/fdt9MYfMQ=
Subject key identifier: DC:46:3C:C7:11:DD:FA:77:84:CF:F9:86:E2:8C:80:E8:D2:02:F9:8A
Authority key identifier: A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
Certificate issuer: /CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Certificate serial: 019A4C9860ABE31453E2F55D74BFDA25F881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
Manifest number: 0886
Signing time: Tue 04 Nov 2025 02:00:45 +0000
Manifest this update: Tue 04 Nov 2025 02:00:45 +0000
Manifest next update: Wed 05 Nov 2025 02:00:45 +0000
Files and hashes: 1: 2CUF8fkBOk7BwaT2x7tRMW9KGPA.roa (hash: czarYHJez6qAV6nXVQK9tcHYXpAXKKAJjoacYgptlzg=)
2: oJRwOdnwgKQn91JcXQZvbPYhNPM.crl (hash: OOZxOLIZZrj02OKgvT/ZX2eIq8nGD9tartZGAi+B/4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:60:ab:e3:14:53:e2:f5:5d:74:bf:da:25:f8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0947039d9f080a427f7525c5d066f6cf62134f3
Validity
Not Before: Nov 4 02:00:45 2025 GMT
Not After : Nov 5 02:00:45 2025 GMT
Subject: CN=dc463cc711ddfa7784cff986e28c80e8d202f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:35:f9:c6:38:60:34:8c:12:fb:d0:49:a7:
f4:39:17:c9:4f:9a:d7:3f:9a:80:68:18:5d:ed:74:
b1:0c:fc:d8:ea:b6:21:e4:cf:5c:28:2d:8d:fb:27:
85:74:06:a6:9f:ff:82:d9:07:0e:01:0b:a1:56:c4:
3c:1a:2b:6b:9e:78:18:58:95:4a:00:8d:c4:7b:c1:
75:0f:e2:a1:19:de:47:96:d7:16:2d:29:d2:27:10:
dd:cc:17:8f:3d:0f:d3:22:fa:04:b3:17:dc:66:d5:
2b:45:2b:87:b7:fc:d4:59:10:dc:a3:14:84:62:b8:
25:bb:da:e8:d3:e2:a3:9d:b2:30:94:fa:94:28:31:
d1:ed:52:ec:8e:42:e6:81:f9:1f:40:c5:65:04:d0:
b4:8a:1e:d6:16:bb:88:52:27:e0:ac:75:a0:4a:a2:
fc:c2:ec:e8:ad:81:56:a0:0d:56:c5:f1:55:aa:b1:
85:ac:6a:c7:38:fe:72:65:95:55:7e:8b:24:9f:eb:
9e:72:b5:af:2f:76:45:9e:4c:7f:b5:32:0c:d3:d6:
f0:4e:0c:84:1e:66:01:73:bf:db:16:e9:7d:08:d5:
ab:21:6c:97:24:09:ea:77:36:51:71:2a:43:4b:d9:
37:6a:7b:d4:07:19:c8:d4:1d:a2:14:a5:47:e1:3d:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:3C:C7:11:DD:FA:77:84:CF:F9:86:E2:8C:80:E8:D2:02:F9:8A
X509v3 Authority Key Identifier:
keyid:A0:94:70:39:D9:F0:80:A4:27:F7:52:5C:5D:06:6F:6C:F6:21:34:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJRwOdnwgKQn91JcXQZvbPYhNPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e3b921-a76b-41f0-b244-c8b3ac0befcb/1/oJRwOdnwgKQn91JcXQZvbPYhNPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:54:8d:a4:e7:c8:b2:cf:59:8f:80:c8:1f:29:76:bb:da:65:
cf:7b:73:b0:9c:6f:23:9b:3d:72:99:7d:c8:28:05:88:24:46:
c6:f0:14:32:d1:9d:ab:0e:d5:2e:37:17:c8:31:8e:6d:32:e2:
b7:97:54:95:81:6b:97:e1:eb:2f:a5:52:81:c0:f9:22:76:f9:
36:26:c4:0f:4a:6d:e0:b0:6f:7b:fc:bf:88:98:50:a8:6e:a2:
1b:f6:70:3c:fc:d2:59:3f:03:f9:5e:20:39:cb:0d:a2:33:95:
57:91:7c:8e:92:ab:d3:dc:20:f2:c9:3b:6c:22:f3:22:98:04:
26:0f:2c:b5:5e:66:e9:04:86:06:76:c8:f3:21:ba:2a:a6:d2:
95:7b:69:d2:4e:94:f5:39:d7:89:38:24:d5:7a:26:5d:67:ac:
ad:95:d0:48:cc:b8:90:3e:59:e6:86:91:c8:eb:92:18:65:4a:
3e:80:0d:78:a3:d8:92:2a:21:75:66:ca:b7:b0:69:94:0a:d0:
95:7c:af:94:33:aa:cf:08:e7:e7:54:cf:1f:08:e0:63:7f:2a:
e4:c2:0f:9d:21:ed:91:03:84:df:1f:d4:85:96:d1:1f:c6:16:
4e:64:e1:23:b2:c7:5b:10:53:45:89:d1:b4:3a:29:05:90:24:
e1:e4:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:48 2025 by rpki-client