Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File: ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier: FctOpZZg+kftGuh+ypkTbc2vPnD3uSMKbuuHw3T1JTM=
Subject key identifier: 89:37:A0:E7:97:83:97:90:28:4D:D9:FC:38:DD:80:7B:1E:46:4E:D9
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer: /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial: 019A4DE1FBBF115C3BDD2368472207D8D235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: e-gDJNXzm0Ybkz_ors_9mzoknFc.roa (hash: EmVgkp+dxUqbi6FSU/qMEIRuJJb2TeTwsYYhWoEauko=)
2: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (hash: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=)
3: mEEdwwEWwRFuOQjXEE0GqAJtD6g.roa (hash: 9OEXXQKo0v2yF8ajNKcSoh8Qu8qa2iGEylM4hM3dSfo=)
4: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: HO+FzwG1JVuh7z6HW7EoqQPd+c7YhggAsJ7xd5kQNKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fb:bf:11:5c:3b:dd:23:68:47:22:07:d8:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=8937a0e797839790284dd9fc38dd807b1e464ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:e0:2e:09:8f:0c:a4:fa:2e:2a:23:09:f8:
63:f3:3e:87:8d:ea:25:cb:64:0c:5f:56:80:ee:2d:
b1:5a:5c:dc:88:c4:d5:86:e0:29:bb:d9:b2:3f:e5:
aa:90:c9:1b:93:6f:6a:f4:f0:ab:94:fc:2f:de:d9:
3c:56:67:20:bc:69:3f:15:13:04:de:2d:93:22:1d:
d3:92:bb:b9:d8:c6:98:7a:49:0b:da:97:7f:17:b0:
d5:fc:34:48:bd:2d:62:26:4e:33:3f:a4:1f:e4:2d:
3f:1f:4a:e2:34:41:f0:eb:cf:19:a8:c3:35:fa:ea:
a7:94:f0:20:c6:01:ce:ba:e2:39:84:cd:e0:ba:0f:
dd:b0:ec:2c:02:46:b7:4d:0e:b2:8b:2b:3b:d7:e8:
8f:84:ed:ed:1d:bf:9d:5c:cf:74:77:e2:cf:6d:84:
41:1a:94:1d:ee:35:20:18:3f:e0:23:6f:c2:1d:3d:
3a:ad:3c:5d:6c:8b:f3:f2:43:9b:7e:cd:06:91:93:
99:53:b1:55:a3:b8:e7:bb:ec:1a:d8:73:b3:cc:30:
a2:85:97:fc:ad:0d:c0:4b:47:52:80:f1:d6:e9:c6:
e2:21:7e:b6:69:74:9b:1a:09:5a:0d:7f:b4:cb:b9:
38:a9:f1:60:3c:50:3b:5b:c4:97:13:a5:92:9d:fe:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:37:A0:E7:97:83:97:90:28:4D:D9:FC:38:DD:80:7B:1E:46:4E:D9
X509v3 Authority Key Identifier:
keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1d:99:7d:30:b7:80:6b:5f:75:29:bd:bc:4e:30:19:20:6f:
8f:35:df:cc:eb:4e:a6:e1:dc:29:a7:f0:98:88:84:75:1c:30:
ee:03:45:44:16:e5:b6:40:0f:53:aa:32:54:c4:26:fc:2f:e4:
28:62:7b:42:94:2f:80:2c:8c:61:2d:de:40:7d:dc:b0:6a:3e:
01:cf:2c:34:11:00:c7:03:00:5b:16:cf:95:46:31:3b:85:9d:
a2:d4:c0:b3:07:de:ad:2a:be:98:ad:96:ff:26:fa:c3:e9:af:
bc:73:85:d5:74:27:03:92:32:e4:20:e0:88:02:9f:6a:63:0b:
55:ad:51:e6:42:dc:15:91:cf:37:88:f8:f2:c9:43:f3:5d:28:
2d:95:08:0d:31:20:62:50:e3:25:1b:4f:ee:05:bf:9b:a1:93:
b6:22:35:5c:86:78:8d:f6:e6:4a:e8:93:22:e9:ea:c1:99:fc:
3d:f1:18:69:7a:84:d4:67:d4:fc:b5:18:6c:f8:26:c9:67:27:
e6:09:31:3a:5b:94:c7:ff:57:d6:08:19:be:c1:26:25:b9:5c:
32:b0:93:8a:f8:09:b6:cc:42:b8:4e:46:01:6c:98:21:97:0e:
4d:a1:1f:a8:84:c3:78:dc:3b:ef:e9:92:5c:dd:42:3c:be:92:
85:23:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:44 2025 by rpki-client