Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
File: oWkKV2UZ54d6ZAis325pu4RyqhU.mft (raw, json)
Hash identifier: 97PXQFHlYcVrq3G/8sIQnsa2gTibFMg6tHepqfnHJ3E=
Subject key identifier: 5F:14:92:4A:CA:B7:F4:C6:36:24:7F:2F:4D:E5:E3:CC:83:79:84:1E
Authority key identifier: A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
Certificate issuer: /CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Certificate serial: 019A4DAB039DA0F1D824F76127F265DEBEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
Manifest number: 05FE
Signing time: Tue 04 Nov 2025 07:00:44 +0000
Manifest this update: Tue 04 Nov 2025 07:00:44 +0000
Manifest next update: Wed 05 Nov 2025 07:00:44 +0000
Files and hashes: 1: oWkKV2UZ54d6ZAis325pu4RyqhU.crl (hash: t+K0D3TyO2/6Pg95uK1xB49wVz0SJO0SUGdVnU2zMV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:03:9d:a0:f1:d8:24:f7:61:27:f2:65:de:be:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Validity
Not Before: Nov 4 07:00:44 2025 GMT
Not After : Nov 5 07:00:44 2025 GMT
Subject: CN=5f14924acab7f4c636247f2f4de5e3cc8379841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:c7:4e:eb:19:10:f8:fb:27:c1:96:a3:0e:
48:65:e4:f2:6e:86:53:e3:e7:40:8c:de:8b:73:0c:
52:9d:d9:fd:ac:2d:a5:98:57:6c:37:c6:39:51:c9:
6d:09:04:e8:73:21:11:a8:c8:2c:cc:b4:a7:94:8b:
5b:92:59:81:19:7d:3a:f3:e6:88:97:f5:b9:9c:70:
46:68:9a:97:0c:4c:02:51:b7:4a:1e:37:19:1a:fc:
b2:fa:ab:68:1a:8c:09:61:4d:c4:e7:43:e3:59:eb:
41:22:f4:8b:fb:eb:48:bb:bb:d9:41:e1:e4:82:0b:
90:ba:72:13:a0:6e:72:c4:9a:88:f1:4f:ea:02:d9:
c9:e6:7c:b9:96:22:18:e7:6b:99:fd:41:22:80:b1:
d2:c3:33:71:39:38:e4:62:60:4a:2e:0f:7f:23:1a:
b1:b1:80:fc:e8:4f:3b:3e:ed:9c:bc:bf:71:ac:3e:
be:40:66:a2:12:f8:6d:fe:56:47:fa:c1:2f:6c:71:
a4:50:a6:04:0b:49:79:f2:e2:62:e4:0f:bf:62:c1:
92:91:9f:69:0b:0b:f8:37:24:aa:7a:14:83:81:eb:
17:31:94:5e:68:b3:0b:3a:88:4a:6c:fa:5a:8f:39:
8c:17:a1:db:c7:c9:78:72:d0:74:d1:e4:27:2e:ac:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:92:4A:CA:B7:F4:C6:36:24:7F:2F:4D:E5:E3:CC:83:79:84:1E
X509v3 Authority Key Identifier:
keyid:A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f4:cd:2e:4c:68:ea:7f:3d:c2:a4:ae:c4:4f:05:64:5c:db:
d6:f5:30:d7:10:d9:3b:55:67:a7:a1:d2:d5:29:c0:3a:7c:9d:
c2:b5:ec:8e:aa:9c:dd:e5:89:18:ab:b4:e9:5c:02:f9:da:32:
56:15:27:7d:50:e5:2e:b4:2a:fe:80:d2:8d:e6:30:87:0f:98:
05:c3:de:4b:bf:9d:79:bb:df:9a:00:a2:75:4b:dc:b3:7d:69:
3c:ba:cd:8e:be:20:75:a1:92:68:12:20:ad:f8:47:2d:07:6e:
34:09:30:e5:aa:47:36:73:2d:62:70:7e:d2:cd:7d:aa:ae:9b:
f1:fa:d6:70:19:d5:47:47:61:52:d1:7a:c6:f5:a3:86:08:1c:
11:00:fa:c0:f7:5e:86:67:f9:d7:96:27:ea:c6:3a:41:5f:b3:
62:e3:dd:af:c1:31:29:e5:ce:d2:43:a2:d6:59:12:1b:05:49:
e1:f9:ae:c1:ca:75:c4:01:ba:db:6e:21:7b:3d:fb:27:28:fd:
36:25:ef:21:98:09:18:11:7a:5e:76:aa:e1:69:f6:3b:8e:8e:
17:06:dc:d0:38:74:cd:f0:93:07:ec:d2:b9:72:cf:21:28:32:
c1:db:82:6f:31:c7:ad:04:52:99:53:5b:00:29:42:65:f8:a0:
56:94:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:55 2025 by rpki-client