Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: 7HkWeI6sPKYMKa+RWoB6UEpi2QbgGU+J3Jx8ykBw39w=
Subject key identifier: 89:6B:C2:80:C4:B7:96:31:67:0A:FE:ED:85:09:03:60:EA:6B:28:11
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 019A4E189B1104CE331B16808B5994CBB231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 09:00:26 +0000
Manifest this update: Tue 04 Nov 2025 09:00:26 +0000
Manifest next update: Wed 05 Nov 2025 09:00:26 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: Oy2pt0wJjUSk/WhMtlmwzStqbceHztS41eO7TNDu28M=)
2: VwXHoptHeR9mWbeRFzNgE273Y_Y.roa (hash: O7PmmfQJftPOiteORNgrKpX/pUfGsXyieeu22jdpW5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9b:11:04:ce:33:1b:16:80:8b:59:94:cb:b2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: Nov 4 09:00:26 2025 GMT
Not After : Nov 5 09:00:26 2025 GMT
Subject: CN=896bc280c4b79631670afeed85090360ea6b2811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:d0:f5:0b:c6:a9:90:9e:2d:b3:57:d0:9a:
20:ad:9d:2d:35:7b:f1:54:70:10:43:69:07:26:44:
2d:fa:77:14:0b:9e:43:63:b7:16:5f:1a:d0:9d:3b:
52:1d:b0:a8:10:1c:d8:56:c6:6a:62:2c:63:7f:46:
dd:02:97:00:02:08:66:8a:fc:4c:6c:22:9f:be:0c:
34:0f:5d:14:31:15:fb:78:19:23:9f:9d:f0:10:c5:
f3:71:ce:4c:82:d4:41:02:29:ed:3f:c5:76:7f:77:
1e:f5:e0:6e:df:e8:23:a7:29:d8:45:e9:09:68:bd:
b0:cc:00:bd:f0:8c:bb:6d:4f:ea:59:36:ec:51:c4:
64:52:a6:39:f2:c5:dc:6b:fc:98:87:2b:17:a6:80:
ef:c9:b3:f5:42:bc:9a:cd:83:0c:32:76:69:e0:bb:
85:25:58:bf:69:99:8b:f8:00:d4:e2:40:33:fc:44:
4c:2e:6f:72:41:8b:3a:d7:28:bd:dd:0c:d2:f9:1d:
97:ec:40:b1:f1:ec:f6:5a:cf:c7:33:f1:0b:63:1b:
9d:49:56:71:8c:2c:cf:1e:5b:53:29:21:46:df:db:
1d:be:8a:a0:69:4c:3a:fe:d7:3b:1c:1b:ad:d3:62:
2c:88:ee:3b:84:58:50:a9:c9:3d:20:6e:3c:1d:1e:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:C2:80:C4:B7:96:31:67:0A:FE:ED:85:09:03:60:EA:6B:28:11
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ac:71:a3:8e:bc:92:a0:19:b6:ac:0d:76:1c:9a:c1:4f:56:
23:95:30:ab:97:f9:09:f9:2d:cd:6c:2c:a7:a0:fb:3b:ed:ab:
0b:1c:32:7b:cb:a9:8a:9e:46:78:ea:05:1e:23:2e:35:03:4e:
58:88:15:5d:1c:c5:7b:16:0b:ea:88:d7:87:34:4e:c8:2d:d7:
9e:95:eb:4b:aa:94:0b:3a:c3:b7:27:0b:ae:1a:d1:04:f1:27:
1f:d9:62:dd:eb:a0:c0:e7:1f:a2:fd:d0:73:ff:0c:a9:4e:24:
9b:52:fc:1a:62:5f:c0:33:89:8b:2c:ea:4e:1d:12:0e:c9:d8:
bd:82:75:59:bf:48:49:9a:cb:68:8e:f3:2d:73:9e:61:43:ee:
9e:c5:3f:a0:c8:71:50:cb:22:21:b9:39:fc:ab:49:0d:6b:b0:
8b:c1:ac:9d:ec:68:a6:d7:86:a9:07:04:cc:16:06:67:52:1a:
bf:f2:75:15:f1:5e:7c:e8:9a:58:b6:9c:33:88:59:85:ce:f6:
f2:48:04:e1:a8:f1:07:4a:65:59:9e:b2:62:98:54:d5:6a:1a:
9a:6a:84:c8:8a:ee:4e:ae:c8:eb:84:1a:f4:9d:e3:64:50:c6:
c1:7e:2f:7d:2d:3e:95:55:56:c5:09:be:88:3a:7c:65:9f:12:
3d:88:0b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:01 2025 by rpki-client