Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: uD/N1Ujl5U4bQ0v71BsQSiudthWS2gSje1CRJebuzrE=
Subject key identifier: D9:5A:59:CA:56:E0:BE:AD:3E:68:F1:37:EF:7B:79:0C:D6:AD:D0:70
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019A545201AF53DAA1861D59C72C9EF73357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 1668
Signing time: Wed 05 Nov 2025 14:00:51 +0000
Manifest this update: Wed 05 Nov 2025 14:00:51 +0000
Manifest next update: Thu 06 Nov 2025 14:00:51 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: S47k1qxPAOyMMULd6CVJqq8/fEUYcRUAPnAOKNwErNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:52:01:af:53:da:a1:86:1d:59:c7:2c:9e:f7:33:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Nov 5 14:00:51 2025 GMT
Not After : Nov 6 14:00:51 2025 GMT
Subject: CN=d95a59ca56e0bead3e68f137ef7b790cd6add070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:fc:fc:90:62:29:38:4b:63:5f:1a:95:19:
65:3c:d0:f0:4e:c4:9d:3f:9e:42:1a:b6:40:a5:7f:
82:74:19:b5:95:7a:cb:8f:81:92:94:9e:e5:18:50:
8d:ef:70:c6:b2:d1:0e:76:00:82:22:40:bb:34:53:
3b:b6:25:1d:61:05:08:ee:0d:78:8d:1f:a0:7d:2d:
6f:ad:56:45:63:c0:53:9c:00:3f:9f:d0:d9:d3:fb:
c0:bd:01:76:52:64:b0:d8:60:96:c0:1c:dc:1e:38:
36:77:c2:d6:94:96:9c:f9:c4:48:f7:1a:52:2d:03:
5d:58:b6:db:87:a1:97:e2:82:67:a7:34:dd:f8:3e:
52:b7:7f:81:6a:22:c5:b6:69:6c:62:c5:eb:6e:1f:
dd:f8:fe:ac:32:fa:c3:b7:8e:4d:85:b8:84:e2:e3:
dc:45:d5:96:71:5f:23:05:9a:9d:ce:b0:54:c3:96:
8e:4a:86:f1:1c:12:b5:e1:0a:a8:9f:14:92:1c:b9:
9c:24:a0:06:6f:a1:41:95:25:ec:ea:78:ac:90:d1:
b0:13:b3:4d:a1:b3:91:2b:17:f5:bf:82:78:b6:4c:
cb:bf:b0:ba:b7:44:32:7c:4e:1b:fc:0e:7b:b5:f7:
26:74:e1:8d:fb:4b:9d:84:de:eb:9b:6c:d2:af:2a:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5A:59:CA:56:E0:BE:AD:3E:68:F1:37:EF:7B:79:0C:D6:AD:D0:70
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:eb:77:20:85:d1:19:a2:fc:bc:65:69:7f:2d:5e:36:74:3d:
98:dd:6e:8f:20:b3:1e:74:f8:7b:e9:06:ef:a2:68:71:ec:b9:
7d:9f:ea:58:0b:2b:e1:96:80:39:a8:db:6b:d2:e1:ec:83:5a:
77:7e:8e:98:33:0c:89:42:9a:b2:2a:94:d3:0d:68:0c:55:db:
36:65:5a:01:b4:d2:05:2d:e3:fd:df:97:d9:d7:16:22:38:5a:
ce:3e:10:3a:6e:88:1f:87:f4:f7:94:a2:f3:80:de:00:65:c5:
ea:f4:02:af:c5:76:9b:90:d4:db:b3:1a:ec:41:3f:71:78:a1:
19:d1:bb:07:86:bd:06:f8:58:21:89:dd:01:fb:22:37:c6:8b:
c7:ad:4d:06:4b:d0:18:05:ec:70:21:c6:37:49:5d:81:19:04:
b5:bf:b3:ac:7d:72:74:0a:52:85:5c:58:7d:28:5a:8f:63:21:
55:cc:1e:68:c9:f6:6b:e8:48:f1:b3:6d:42:60:c3:e1:41:8b:
84:71:3a:30:16:6a:b7:c0:fc:9f:ce:b7:0b:06:37:a4:8c:90:
ad:13:0d:2e:b9:ca:95:da:9e:a8:df:d3:83:4c:5f:74:25:37:
dc:1e:39:09:eb:22:5c:f9:c5:60:f0:9f:d3:b9:c4:c7:e3:97:
c3:d3:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:34 2025 by rpki-client