Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
File: OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json)
Hash identifier: lBlVPxL6vx8FNddJjwOI0KswAu0xS+KvsGr3rN0K+QE=
Subject key identifier: E4:23:AB:AD:CA:FA:63:A0:77:1E:CB:05:03:82:61:07:DC:DC:68:5D
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: 019A4E18FB44778C28E105B9DD2793CE9CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
Manifest number: 101D
Signing time: Tue 04 Nov 2025 09:00:51 +0000
Manifest this update: Tue 04 Nov 2025 09:00:51 +0000
Manifest next update: Wed 05 Nov 2025 09:00:51 +0000
Files and hashes: 1: 6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa (hash: uoWydXs46C7pAA7LsT8e6YRW42KQemKKMgQf6yVmG/s=)
2: 7OwJ3NZ5gt6M2YbNy203LEEgxvo.roa (hash: ceOMKYcnnBwRulSCt+ABQYJyvPInT12PHncdmZb/zVg=)
3: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: dqkc33fnaf/wecI8epQ6sYhPjafjKnGwLYziIoSDlXU=)
4: jp5nTO_8vGG_gXw2zLO8q19JQc4.roa (hash: VCuZ3n81SKY0VnV/9981IOoXLe5Qs/nr8ZYqBQ4Ru6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fb:44:77:8c:28:e1:05:b9:dd:27:93:ce:9c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Nov 4 09:00:51 2025 GMT
Not After : Nov 5 09:00:51 2025 GMT
Subject: CN=e423abadcafa63a0771ecb0503826107dcdc685d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:8c:69:0b:af:a3:16:2e:c9:6a:66:03:aa:
8d:1e:70:07:a8:08:a5:58:e0:3c:82:fd:56:0f:25:
5c:ac:a2:30:1a:02:8d:d9:57:ce:c2:de:97:af:02:
6d:40:ca:f7:8f:ea:f6:e1:f1:a2:bb:1d:f2:b3:65:
ca:21:28:4a:26:44:a3:71:71:1e:ff:0a:4a:57:45:
60:e8:72:52:f3:2a:16:1f:97:ee:46:77:46:7c:d7:
c7:5f:21:a6:4f:0e:06:9b:c6:cb:5d:ce:81:e0:ab:
8d:a4:65:4f:6f:27:c2:51:f3:b9:51:7d:34:76:21:
f3:fc:0c:76:39:8f:c6:a3:af:48:f3:b7:4a:bd:cf:
e3:3b:45:3c:01:16:6a:47:c6:8d:bc:29:f7:3b:c3:
04:cb:ca:34:9d:d4:d8:53:db:2c:b5:7a:4b:bc:d6:
9e:b2:0b:2b:8b:c8:c6:a2:49:ef:bb:65:73:0e:a9:
ec:e3:4d:fa:4a:59:66:fe:c1:8e:b4:d7:40:a5:b1:
a8:5a:3d:65:e4:0e:a5:9c:d3:79:17:82:64:80:91:
40:af:6f:78:db:94:6e:3c:f5:ff:94:1b:2c:3e:37:
cd:5b:83:77:88:cd:e2:da:aa:1a:37:96:f7:65:00:
f8:f6:26:7c:04:d0:c4:2c:44:fa:b6:13:67:57:e7:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:AB:AD:CA:FA:63:A0:77:1E:CB:05:03:82:61:07:DC:DC:68:5D
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9d:08:fd:e5:d2:a4:19:cc:58:aa:b6:ea:20:15:c5:c5:e8:
97:cf:db:57:05:d5:a7:e6:01:42:a9:45:5a:21:69:66:f1:34:
c9:4b:b8:da:6e:fb:55:6c:d6:ca:44:93:20:43:7c:f1:84:e4:
7b:37:c2:8d:f1:b0:3a:bf:5a:2f:32:4f:c9:47:e5:a2:bb:9f:
d3:2c:cb:07:24:a0:29:11:df:f7:1c:0c:5f:0e:a5:47:1e:d7:
52:a5:3c:3c:41:c2:8f:e0:ce:b3:d8:60:26:14:1c:b5:b2:d1:
21:f3:37:1d:15:66:0f:c2:17:08:40:a9:de:ea:6c:61:f7:e2:
5d:9d:bd:05:9b:dd:14:5f:f1:6a:99:23:26:36:75:a1:88:b1:
fb:4f:cd:36:81:ab:9e:af:9e:e8:ab:ac:34:d1:0c:f9:ae:30:
9f:7e:ec:c2:22:07:8a:c2:64:35:b6:38:29:57:46:64:66:53:
e7:42:79:60:18:cf:6c:90:a2:f8:e1:61:81:5e:3e:51:dc:8c:
9e:7e:83:ec:13:4c:3d:8b:e4:43:b8:39:01:85:65:a6:9f:79:
75:ef:51:ed:94:30:2a:75:ba:e7:57:e3:ad:53:89:94:ef:cd:
75:f2:f7:68:92:f9:e2:52:0b:4a:eb:c6:ad:6a:bd:a1:58:ad:
f5:c2:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:43 2025 by rpki-client