Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: rH9EDFa0pxZXtw5go3IsWCI2Jh34ElJsPRXB9KDeHgs=
Subject key identifier: 9E:88:A6:09:11:82:C8:48:CF:33:A3:28:55:63:92:5B:0F:24:2E:AC
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 019A52632B6AA8A72715415710B08CA71655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 02DF
Signing time: Wed 05 Nov 2025 05:00:22 +0000
Manifest this update: Wed 05 Nov 2025 05:00:22 +0000
Manifest next update: Thu 06 Nov 2025 05:00:22 +0000
Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: REoHC4zDBFeSAqgDo7IPmDQ1dpEgePj1PlJLYYV0pc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:2b:6a:a8:a7:27:15:41:57:10:b0:8c:a7:16:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Nov 5 05:00:22 2025 GMT
Not After : Nov 6 05:00:22 2025 GMT
Subject: CN=9e88a6091182c848cf33a3285563925b0f242eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:3f:2d:61:ae:d9:83:77:18:b0:07:f4:d5:
e4:ef:d0:92:43:bf:c4:5c:59:dc:9d:54:13:5f:3b:
5b:39:1f:70:ea:ba:63:76:e4:a1:17:c6:0c:8b:97:
a8:be:45:8f:57:37:d8:37:a0:77:93:e6:10:aa:ba:
cf:a6:4e:16:aa:33:af:3d:eb:0d:5a:e6:64:2e:a6:
a9:2d:77:96:99:2d:31:12:35:17:79:2a:b0:b9:fb:
fb:53:56:cf:dd:d8:4a:02:e9:76:47:0b:78:f2:b5:
f9:af:f6:50:43:d7:de:df:f1:52:7e:5e:84:63:e5:
da:8c:9c:8b:1d:9c:55:71:c7:1a:c2:ba:f9:d4:42:
a6:92:7c:28:4a:28:28:e9:42:06:ff:6a:84:38:61:
bf:7a:0c:cf:83:43:90:b0:ce:e4:b5:42:4e:df:71:
fb:f6:14:ae:ea:57:65:4d:22:f7:a3:e9:98:eb:1b:
1c:59:12:e4:9d:01:fc:60:7a:4f:75:4e:d9:7a:87:
f6:8b:27:17:55:fc:c7:38:9d:ba:3a:15:10:26:49:
2b:5e:5a:a6:0f:b0:b0:c5:8b:af:42:e0:13:6a:1b:
9f:b5:d2:9e:1d:f8:2c:dc:a9:e9:6a:f7:95:b5:d3:
13:2c:1d:5f:fa:0e:c3:25:2f:8f:89:55:9a:45:c3:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:88:A6:09:11:82:C8:48:CF:33:A3:28:55:63:92:5B:0F:24:2E:AC
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:7b:f3:de:aa:66:e0:6b:61:02:c6:9f:55:9e:77:85:ea:
ad:8e:d0:84:36:d0:db:47:e7:ed:07:d6:56:7a:ef:f3:d5:86:
8b:78:2b:b3:c7:a9:07:06:0c:41:c1:1e:7d:25:93:a8:e2:56:
8a:fe:82:b4:a9:6a:0f:e2:38:b4:8c:46:26:ab:71:5e:cc:53:
ee:b6:11:da:9c:e3:83:77:5d:26:64:b3:4b:b2:10:a3:06:ab:
f5:60:49:f4:70:71:e2:d6:a8:17:98:f1:8e:19:f9:76:b4:3a:
bb:b2:29:ae:32:1c:91:33:dd:44:30:81:95:a3:2f:a3:a3:e9:
28:e9:1d:7c:b8:aa:80:35:88:dd:4f:a8:87:20:76:63:48:c5:
1e:fd:50:2a:a6:cf:64:2f:af:14:98:d4:d1:35:fc:f3:8a:f2:
67:79:ef:eb:60:79:0f:c3:d0:50:a5:9b:6a:85:81:ca:d2:f5:
d9:4c:ee:a9:59:f3:4b:10:76:15:03:d0:d9:c5:0e:44:c8:8c:
b6:d6:cc:4f:34:11:38:98:fa:38:e2:77:91:cc:f3:89:1c:f0:
c7:91:62:20:86:57:c6:08:54:2d:2f:c1:5e:b0:4c:a7:b8:20:
0d:af:31:b9:08:ef:7b:48:6a:b5:ac:d1:6e:e7:da:34:8c:7f:
c6:83:f5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:38 2025 by rpki-client