Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File: oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier: DGMoKps2SsjsHkK7kl9nDUOU2BYCzXQY/vitce5ggXI=
Subject key identifier: 64:64:54:F5:71:05:70:F8:CB:EC:04:3A:89:58:C4:AA:4D:64:6C:22
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 019A4E190CAB5B453C17F396486458C45E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: blse6v5EH2fVrElwGZmlrK99XJk.roa (hash: otAVsYT9s6hCs6g9uAr3ovy061yRH8/KdKxwyyD5qvk=)
2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: m7wD76pbk0z5NHo1unxcDe/nFT/BFSVgh4XuNhBHA9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0c:ab:5b:45:3c:17:f3:96:48:64:58:c4:5e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=646454f5710570f8cbec043a8958c4aa4d646c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c1:2e:ad:78:1d:9d:bd:f9:2d:63:63:f9:3a:
53:4d:cf:50:fd:f1:86:01:25:ca:8b:a8:ee:d5:84:
67:39:b6:23:d8:85:c8:9a:82:cd:03:f5:e2:d2:02:
ee:01:ec:a2:07:c2:6f:db:a6:f7:7d:4d:f4:a7:fb:
c8:8d:ca:53:48:b6:99:02:c9:b7:fd:a0:6f:ac:c8:
b9:08:13:04:0e:e5:9b:e4:10:04:ba:b3:51:fc:28:
9d:d6:c0:d1:b6:f5:56:1a:c0:3f:73:dc:84:56:f4:
70:ea:df:54:a7:03:53:20:6a:3f:b5:53:e9:8a:45:
6c:3a:a5:c7:a4:f9:d9:49:45:92:12:5f:d8:29:9c:
2a:47:89:38:1c:ee:b0:32:36:00:ac:44:25:fd:6e:
91:30:b5:80:ed:28:75:2a:66:db:7d:c0:d8:0a:a9:
18:c8:60:8e:bb:4e:d0:47:8c:9c:4c:50:c4:f9:4f:
50:8c:dc:e5:4e:06:b7:be:66:81:6b:28:3a:4b:0a:
51:9a:0e:0c:df:99:3a:57:bf:fb:4c:58:8c:3f:b2:
f0:65:cc:93:27:d8:0a:a1:c0:3e:04:b4:b9:22:1a:
1b:c9:80:3b:9a:d8:11:bd:7f:b3:8e:d3:4f:f7:d8:
7f:b6:99:10:a3:37:67:b1:96:5d:82:6a:ae:1a:b0:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:54:F5:71:05:70:F8:CB:EC:04:3A:89:58:C4:AA:4D:64:6C:22
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f9:4a:cb:b0:82:8f:81:ba:d5:d7:39:5b:83:e2:2d:a9:60:
10:17:c3:47:15:4c:dc:cd:0f:47:24:74:75:ca:96:c1:36:22:
34:48:0d:07:35:29:0a:7b:71:94:9f:bd:57:45:e0:d4:7a:77:
75:ed:7e:2e:1d:8e:cf:a1:a4:a1:b6:4e:46:89:56:40:12:04:
f1:3f:83:f2:54:3f:72:28:7e:77:7c:53:43:6c:6f:5b:2c:69:
16:fb:c6:35:89:c2:f1:5b:04:b1:a8:95:29:d8:07:d4:8b:8a:
18:90:7f:1c:61:09:da:28:e6:5e:15:dd:3c:57:95:e6:ec:15:
ff:00:7f:f8:f3:17:6c:19:79:ed:74:44:4d:dd:4a:20:51:5c:
42:ed:9a:8a:ef:ea:d4:92:48:ed:5b:dc:c7:8d:11:04:c6:ef:
9e:dd:53:3b:ef:31:ed:f2:93:16:70:70:50:f1:fe:f4:ea:8e:
61:d7:ba:a7:81:86:94:4b:af:b9:45:c5:91:47:b5:3f:83:2b:
6a:1f:03:b8:08:19:a6:6c:e1:3a:7e:20:57:21:2f:58:f2:58:
51:dc:c7:41:00:28:c6:e0:47:60:56:9b:82:06:9f:69:ec:2a:
80:08:f4:71:da:6b:3c:dd:98:56:91:e2:a3:3b:da:2a:2c:72:
99:ff:09:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:19 2025 by rpki-client