Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: ZaqAzo9vEyZdabzZs4uxWhfe5XHCC4S33raded9Apek=
Subject key identifier: C9:12:ED:CA:4D:D8:EE:D3:D1:2D:C6:55:23:3F:8B:25:BD:77:1D:36
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019A522CE8926673AAF3F17DE129C74EEB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 12CF
Signing time: Wed 05 Nov 2025 04:01:06 +0000
Manifest this update: Wed 05 Nov 2025 04:01:06 +0000
Manifest next update: Thu 06 Nov 2025 04:01:06 +0000
Files and hashes: 1: Vk-tGAmV5TZofFrkU8NsN6eg260.roa (hash: n+OnJ5MdOwQk0fYvXBBSZ9AYECq0X6y6UCleUqQHa9c=)
2: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: LK4HTcvxNOIMmFN7MADG/31yFDfa5HVhyVeNlV1xbBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:e8:92:66:73:aa:f3:f1:7d:e1:29:c7:4e:eb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Nov 5 04:01:06 2025 GMT
Not After : Nov 6 04:01:06 2025 GMT
Subject: CN=c912edca4dd8eed3d12dc655233f8b25bd771d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:5b:47:9c:61:5c:5f:2f:63:1e:bd:ad:fd:
32:89:29:ec:58:82:ac:57:6d:a5:07:b2:07:42:63:
31:e1:16:e6:eb:c6:92:fd:74:e7:ca:3d:83:29:38:
cd:ad:d8:b0:68:db:be:f1:50:c6:23:10:d0:0d:ec:
4d:0f:60:4a:c1:31:40:e0:15:2d:a2:85:de:44:f0:
d2:f6:89:d3:1d:a0:83:83:4e:e5:65:5b:9e:90:47:
1e:02:42:6c:97:38:d9:68:71:4b:ee:2c:a0:aa:7b:
cf:24:75:08:f7:3f:64:df:76:04:08:27:0f:ba:aa:
3d:7c:72:32:01:4b:e8:8f:f4:ea:52:e2:2c:73:a0:
28:6d:00:4d:36:e7:69:6a:13:4d:1d:ca:0c:03:fb:
14:ee:24:b4:ba:7d:79:68:3d:17:30:ac:de:a5:b7:
5d:9c:f6:93:d6:80:ff:17:16:78:4a:43:c5:57:49:
b6:80:93:2f:1e:0e:12:fe:81:f8:a2:47:f1:95:67:
b8:b8:83:69:70:56:17:57:94:ca:06:aa:c8:c9:f7:
0e:65:24:d0:fd:02:28:40:2c:6b:02:41:4f:f6:76:
e4:e1:8c:f0:e6:dd:4e:4f:e0:27:e1:b9:03:2d:c4:
4d:c0:cb:aa:b9:6d:30:cd:8d:5d:86:3d:1d:60:d6:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:ED:CA:4D:D8:EE:D3:D1:2D:C6:55:23:3F:8B:25:BD:77:1D:36
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6f:85:6c:8b:5b:78:25:31:da:f3:39:62:b7:7b:ba:9d:2e:
0a:2b:ac:7a:1e:b6:14:c5:a1:6d:13:23:66:ec:aa:05:a4:4f:
08:57:11:55:d4:9b:39:68:b2:5d:43:d2:92:22:d9:9e:f3:d7:
25:3a:59:e3:86:e1:4f:10:e9:a1:6d:49:dd:43:7f:94:39:e5:
c1:d8:16:c2:93:06:65:df:54:08:bf:8f:16:bf:6a:dd:e4:d3:
2c:86:14:94:8a:01:e2:c1:a7:1a:31:1d:11:ca:7a:80:df:bb:
6e:12:f1:28:aa:da:4e:b1:79:be:a6:a3:f8:49:1e:07:dc:a7:
92:fc:34:2e:10:71:47:97:44:85:36:5d:ef:f2:30:ea:84:ac:
8e:50:0c:ba:f6:3d:89:74:fd:ee:ea:72:37:2c:49:3a:3c:3c:
5a:ad:de:70:7c:e3:d1:c3:1f:4b:24:61:e3:45:e4:16:f8:03:
88:5f:2b:23:47:24:dd:97:1a:3c:16:74:f7:7b:50:1d:01:96:
54:d6:83:fb:70:71:6a:17:2f:73:8b:1b:35:c7:b4:67:8a:f5:
ee:04:b8:11:72:f8:78:8c:ed:c8:8d:f0:b5:30:11:82:35:fe:
9d:da:db:00:32:d2:90:71:c0:ef:d3:f6:6d:74:79:9d:f1:e6:
13:65:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:45 2025 by rpki-client