Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: Fl9DNt7glcQ31Pm9fyPNOmX8FWPhLcX23+iubgQ7B4g=
Subject key identifier: 7D:69:C9:07:35:7C:91:EF:D4:BB:0C:9C:99:2F:2F:B9:A0:51:FA:19
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019A503DF4E60122EAF3CE54C94E9EFB0DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 12CE
Signing time: Tue 04 Nov 2025 19:00:28 +0000
Manifest this update: Tue 04 Nov 2025 19:00:28 +0000
Manifest next update: Wed 05 Nov 2025 19:00:28 +0000
Files and hashes: 1: Vk-tGAmV5TZofFrkU8NsN6eg260.roa (hash: n+OnJ5MdOwQk0fYvXBBSZ9AYECq0X6y6UCleUqQHa9c=)
2: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: V/1HPtgE4uUXG9dctqmTK57SYUTGp4AGzImoQsAvIBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f4:e6:01:22:ea:f3:ce:54:c9:4e:9e:fb:0d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Nov 4 19:00:28 2025 GMT
Not After : Nov 5 19:00:28 2025 GMT
Subject: CN=7d69c907357c91efd4bb0c9c992f2fb9a051fa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:89:c0:bf:76:f7:6f:cc:15:f4:35:79:fe:42:
2e:69:fb:98:6c:7e:67:22:df:22:16:17:18:10:34:
81:d7:1b:fb:2b:00:b8:44:9c:74:94:4d:05:50:a1:
c4:8a:28:80:dd:eb:d8:cc:f6:cb:fc:1b:55:b3:74:
9c:f7:e2:1f:a1:7b:15:9d:00:a9:6f:91:04:50:fc:
a1:d3:1d:80:8b:90:75:02:60:41:8e:52:25:b4:4e:
5e:e4:6f:2b:55:b9:77:4b:be:1a:9c:c5:f0:86:9d:
bf:53:a8:bd:84:3b:1c:0f:04:9d:6f:df:9f:34:2f:
15:d9:38:38:69:8c:b1:98:2f:2c:08:db:5e:30:f7:
39:55:0f:ca:96:f2:6b:05:d2:9e:6a:4c:80:b0:0d:
1b:a0:7a:2f:2c:2a:65:c1:18:3d:98:04:db:de:2a:
43:67:c9:0d:04:da:11:19:e8:7d:81:0e:cb:85:cf:
d6:36:46:94:58:0f:ea:18:d6:42:62:e7:9e:d0:ee:
f3:dd:e7:af:8d:a5:3a:e4:93:fc:47:a7:68:88:94:
86:dd:25:d4:bb:b4:a4:31:7b:e2:ea:2b:d0:7b:1c:
39:c1:23:2f:b9:ff:53:85:99:a8:94:44:cf:ab:48:
a4:6c:0a:87:7e:e8:30:01:31:c8:1e:ce:b1:7a:1b:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:69:C9:07:35:7C:91:EF:D4:BB:0C:9C:99:2F:2F:B9:A0:51:FA:19
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ba:a6:e9:ae:56:9a:db:2b:9d:79:64:c2:42:f7:2b:b6:03:
37:d8:ea:bd:b9:6b:e9:7a:e5:f3:b9:d1:0c:df:75:d9:cf:b6:
b0:20:49:a0:f1:03:46:4c:5a:78:90:e5:25:65:d0:f7:33:97:
4d:4f:23:3b:65:8f:1a:1f:bd:6c:ca:93:40:93:f9:eb:fd:a3:
03:0a:12:2b:75:a9:44:2a:f5:8b:df:1b:93:60:02:5b:c7:a1:
13:17:c7:25:32:94:54:2c:6b:9e:37:b3:b7:41:ed:18:3c:ea:
86:22:a1:83:0f:ad:6f:7c:20:ce:2c:52:27:33:9c:33:e9:b4:
e9:5e:41:43:59:b2:0c:42:24:20:88:8d:6d:5e:f0:2b:ec:86:
f7:ab:93:6a:10:62:18:da:44:35:49:be:c2:bc:14:23:e1:7b:
90:5b:95:f8:62:fe:01:9e:17:87:59:01:39:4f:26:6a:a0:12:
bc:6d:a9:e0:8f:1c:78:a8:e8:11:e3:e8:1c:0b:d7:b8:d8:7a:
c7:ad:d6:09:a1:c7:60:a9:2b:41:a1:dd:2f:0e:fd:1d:46:0f:
52:2d:46:88:29:47:7d:bd:2d:be:ce:1d:94:17:5f:3e:f6:dd:
d6:ab:aa:24:f5:79:f7:d3:1f:ae:75:27:dc:44:67:48:a4:2a:
ff:98:6f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:03 2025 by rpki-client