Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: cr1nPq116TBjGjI1+qYRqLkKkjo6vTKE7aZzxMBZBlc=
Subject key identifier: 0B:CD:0B:D7:9E:00:D3:BF:37:7B:07:49:2E:4E:CC:B6:70:80:83:8F
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 019A530836D410BEFAB555EF442B7EE41497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:38 +0000
Manifest this update: Wed 05 Nov 2025 08:00:38 +0000
Manifest next update: Thu 06 Nov 2025 08:00:38 +0000
Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: r+vEF0f+fMw6x45xR9kttNo/UGzam7mvlzibpejDIRU=)
3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:36:d4:10:be:fa:b5:55:ef:44:2b:7e:e4:14:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Nov 5 08:00:38 2025 GMT
Not After : Nov 6 08:00:38 2025 GMT
Subject: CN=0bcd0bd79e00d3bf377b07492e4eccb67080838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:d2:c7:65:bd:3f:c4:e1:29:52:c9:c4:12:
7e:e1:e5:86:0f:76:48:ea:f2:9e:4f:49:e5:2d:00:
31:83:77:68:73:8c:a6:15:45:e5:46:d5:e5:98:d0:
01:59:c2:db:83:be:f3:50:ac:1a:2f:0f:a1:06:b8:
fc:fe:6d:5f:4e:5f:7c:6e:92:58:a6:15:44:ca:8b:
94:b9:48:8e:14:2e:23:08:1d:2a:0a:df:4b:88:8f:
57:92:29:7e:f1:a0:86:cc:36:17:47:15:31:79:90:
fb:73:cd:ea:b1:83:f2:d0:a5:21:17:53:95:73:81:
35:2b:e3:db:57:b5:6b:77:18:ce:dc:3d:0b:5e:4e:
00:ba:8a:d8:7e:07:95:78:4f:63:ca:62:02:43:10:
b4:42:b4:3c:62:55:3d:76:82:5d:5c:bd:15:8c:e3:
b8:8c:cd:c9:60:da:60:52:9a:ce:0d:bf:23:76:4b:
83:f0:08:16:f8:2a:5f:e6:06:97:83:b6:8a:a1:ad:
02:d0:a6:3b:cc:dc:be:f6:af:5a:43:a2:c9:92:f7:
80:34:d9:2a:7e:e4:18:98:8d:74:80:fa:bf:93:e6:
27:14:2c:58:7f:a0:48:f4:a3:c8:f8:4a:a8:05:26:
44:77:08:76:5a:9f:a7:b5:f8:af:d2:2b:ee:a1:88:
7b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:0B:D7:9E:00:D3:BF:37:7B:07:49:2E:4E:CC:B6:70:80:83:8F
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:6d:94:13:0e:80:12:65:18:8c:42:7d:fd:84:b4:72:9e:
0c:f1:80:08:de:42:7b:7e:d0:f0:14:91:c2:d2:0f:6f:7e:7a:
8e:79:da:74:e0:4c:c4:ab:7d:c0:6d:c9:ff:6f:39:87:1d:54:
10:64:33:93:4f:23:bf:75:34:bc:68:33:9a:63:7f:dc:4a:0c:
bc:6b:f6:54:bb:b8:33:f2:43:f6:99:ec:78:47:1b:ca:f5:f4:
3f:c9:06:1c:b1:9c:56:20:ff:a9:84:89:b8:4d:5b:76:61:ce:
12:81:f6:82:ef:14:05:a0:34:cd:c0:a2:6e:da:8b:39:84:6f:
ef:92:01:f8:d2:29:50:3e:ff:63:70:f9:30:f1:97:bc:82:cc:
45:30:1a:28:e7:fb:ce:82:ca:ed:e5:cb:ce:07:92:df:e8:f6:
c6:5f:27:52:5e:12:35:eb:69:f7:11:44:f5:66:80:7a:41:95:
06:3f:2e:1d:12:a0:8a:9b:60:d1:dc:32:40:d8:25:21:11:e7:
fb:95:a5:a8:28:52:2d:a4:b3:25:ce:56:18:53:f0:f5:81:68:
57:2c:15:ee:39:ec:76:3d:45:97:7f:5c:bd:18:4f:21:db:9a:
d1:86:23:59:2b:a8:0e:f1:e6:1d:4d:80:e5:0e:27:a6:01:ce:
e2:58:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:54 2025 by rpki-client