Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: ykUhX/3IQrk8vTMCJX8OTqtppsDAo3eSWMdYEGp5X2g=
Subject key identifier: 4A:CC:E2:1A:25:E6:42:CE:DE:69:6C:B4:5E:56:05:7B:C9:9B:61:F6
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 019A4EF5F05B437685F121FE0D758420F5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: NHB82vgwllXJdlg8F71X6cvXV54YoCvzo0eB3ogKjcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f0:5b:43:76:85:f1:21:fe:0d:75:84:20:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=4acce21a25e642cede696cb45e56057bc99b61f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:13:ed:18:88:d6:51:df:f7:86:49:d7:c6:
17:8d:9e:39:62:d0:9b:08:0a:07:48:95:88:c5:dc:
8e:5a:1c:fd:ea:e5:6e:86:40:16:a2:c5:60:ff:92:
05:d8:db:f8:f3:d3:1e:06:14:20:f5:33:ad:e4:77:
31:54:fb:48:c4:1c:6b:e7:c6:f5:e0:1a:9f:86:dd:
6a:3e:9c:17:cd:76:45:1a:4a:66:62:0a:b8:25:39:
07:cd:91:47:85:12:c0:3f:c7:53:95:c7:62:45:f1:
82:01:97:43:d7:28:1d:07:59:90:46:2d:e4:0a:fa:
43:f1:44:b9:69:16:67:09:bb:7d:50:7e:f6:4b:a8:
2c:49:68:1f:4d:a7:51:07:01:cd:bb:81:83:bf:d0:
16:1b:55:df:87:bf:20:b2:cf:34:3a:41:d6:87:9a:
52:68:f6:e2:e4:31:89:78:cc:70:dd:99:ac:9f:e9:
40:a0:1d:fb:3d:0b:43:cd:d9:2a:c1:63:d2:1a:d3:
f3:d2:39:ef:62:7d:1a:7a:1f:19:a6:32:48:ba:a7:
ba:a5:96:8c:75:3c:be:9b:87:e2:16:28:11:f1:ef:
2c:98:33:60:81:a1:37:a8:99:8c:f2:89:f5:e8:12:
fb:5b:c5:b3:7a:08:6e:b1:a2:82:e8:27:15:72:fa:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:E2:1A:25:E6:42:CE:DE:69:6C:B4:5E:56:05:7B:C9:9B:61:F6
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:41:40:95:24:e5:10:fb:c2:6a:79:d2:39:46:73:ca:b9:af:
da:72:f5:07:42:10:ba:22:4c:84:b2:bc:38:84:7d:11:95:25:
b9:e7:ae:6c:fe:78:2b:48:d4:dd:29:09:7f:70:83:57:f6:af:
e3:71:ce:23:cc:d4:0a:f3:1c:55:07:f4:14:9d:33:69:be:5e:
a8:de:ae:13:2d:6c:e1:6e:bb:d1:d9:ab:40:20:e4:2e:59:35:
e7:bf:11:73:b6:06:93:d1:0a:b0:30:bf:b8:ad:58:78:07:39:
9e:fa:20:68:16:05:2c:18:5a:80:89:6f:86:41:ba:9f:b4:75:
89:a0:42:5c:4b:34:32:b2:c7:32:a6:a3:8a:05:8c:e5:5e:b1:
10:12:9c:f8:b0:32:07:b4:1a:e7:5a:7e:52:89:2a:10:ea:c0:
a6:16:25:52:90:dd:60:47:0e:c5:a9:3a:d2:31:2f:44:47:b5:
02:5b:26:b2:48:9b:6c:d7:d4:89:4d:f8:47:97:79:13:2f:34:
c3:ff:93:03:88:c1:b1:fd:5c:73:4d:11:f2:11:7b:5d:2b:31:
8c:ef:51:81:c9:d7:a0:ae:00:92:fe:83:33:b9:68:4c:b1:d9:
3c:5c:89:05:f9:e1:42:bb:6e:f6:c6:7c:a1:af:56:20:93:1c:
8e:09:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:09 2025 by rpki-client