Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: Ua0PozCH/SuQGpCh7UrqJaiHd/psQ1b170J/Mva+Smk=
Subject key identifier: 70:1E:98:DF:69:01:5A:C9:C6:26:8A:D5:5D:69:92:57:A0:8A:EF:E3
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 019A50E2A7D66ABEB40C6AD78215F754975A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0CD7
Signing time: Tue 04 Nov 2025 22:00:22 +0000
Manifest this update: Tue 04 Nov 2025 22:00:22 +0000
Manifest next update: Wed 05 Nov 2025 22:00:22 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: 61H9FMh1YSSTfs2zLldm9h69Yy8VW29HEOsFuj+FHiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a7:d6:6a:be:b4:0c:6a:d7:82:15:f7:54:97:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Nov 4 22:00:22 2025 GMT
Not After : Nov 5 22:00:22 2025 GMT
Subject: CN=701e98df69015ac9c6268ad55d699257a08aefe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f7:a5:f6:31:54:91:f7:78:73:94:88:25:29:
fd:32:43:af:54:6a:ae:c2:54:61:ab:29:31:81:e9:
b0:c3:be:fd:4d:e0:55:50:40:46:62:03:57:a5:26:
d2:9b:83:cd:06:7c:a9:6b:f0:d1:b0:75:a4:44:ff:
cc:99:8b:80:cd:6b:25:98:15:c2:60:d4:9f:56:50:
6c:46:e8:dd:f1:6e:63:17:53:37:43:da:73:a3:27:
ea:ae:60:52:ed:35:de:ac:0b:0c:0d:8e:3b:eb:98:
e3:79:17:08:bc:ec:65:d5:6c:a2:f9:07:b8:f6:bb:
65:2e:b0:a4:5e:ee:90:f7:34:ae:2c:28:11:bf:34:
06:c5:36:c0:69:7c:7d:bf:c3:11:b8:f2:3b:a6:2c:
ac:27:f4:88:4c:f5:1e:b9:fe:2e:b0:92:4d:0f:00:
30:dc:7a:c6:67:60:f6:a4:63:67:bc:46:4a:ba:fa:
bb:a0:f4:db:ac:2b:a9:da:98:c8:46:4b:56:44:78:
a0:38:48:10:a4:1d:fe:95:df:16:f0:c8:96:23:58:
e2:45:d6:cb:d9:b7:ec:4d:0e:9f:66:5a:2a:7f:7d:
0c:bd:40:31:9c:52:23:ad:a9:ba:5a:08:42:63:ce:
c9:23:0b:c5:bb:0d:7f:4d:b0:38:76:20:9e:22:60:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1E:98:DF:69:01:5A:C9:C6:26:8A:D5:5D:69:92:57:A0:8A:EF:E3
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a5:28:1e:b5:82:e8:83:aa:d9:72:6b:3d:48:f9:79:9f:86:
8e:04:16:5a:a9:3c:a0:f2:cc:63:66:13:b2:52:59:0e:1a:62:
6e:9c:23:95:d0:76:be:f2:74:d4:c9:ab:94:b5:91:b9:3e:2e:
86:48:16:24:05:53:18:24:ce:4a:80:4d:96:66:b7:1c:88:e6:
31:9e:61:09:25:02:6e:40:96:1e:c6:02:6c:29:2c:74:7b:a8:
81:ba:4b:5d:e8:00:28:db:ac:30:27:39:64:ac:23:58:3a:cd:
9a:d7:00:96:f5:a4:34:80:9f:39:48:f5:10:cd:64:ae:ca:28:
82:7e:be:2b:c5:33:0b:0e:07:27:f5:b2:94:10:34:aa:17:e5:
8f:ae:3f:2a:ea:e6:ee:b9:8a:fe:7d:61:e0:64:fd:2f:d2:c1:
e6:d1:d6:4a:3a:8a:fb:b1:6a:e5:2e:24:b0:18:ec:02:a1:22:
8a:ba:40:a3:e5:4e:db:57:2f:34:98:a7:7a:6f:a9:ba:37:aa:
6f:76:64:16:d9:8d:c5:fe:89:03:c3:ef:b0:82:1a:4b:93:ed:
50:f4:71:88:06:1c:66:c7:19:55:50:56:24:b2:9e:e3:2f:a1:
12:28:f2:4d:d0:a4:fd:d2:b8:12:e0:38:6a:42:c5:5b:f6:35:
7a:d5:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:43 2025 by rpki-client