Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: 3XbdftEsmAgQkynFfmOh6hive+VpC+8k/qBk5Mu5NFs=
Subject key identifier: DC:73:5B:48:20:7A:A5:87:4D:C6:2D:BC:89:E4:3B:BC:73:D3:99:9F
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 019A52638CE4E2832713E723084D9A008A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 07D1
Signing time: Wed 05 Nov 2025 05:00:47 +0000
Manifest this update: Wed 05 Nov 2025 05:00:47 +0000
Manifest next update: Thu 06 Nov 2025 05:00:47 +0000
Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: EJc9VkgK5oxeIaLKMhwjIMDJYDb1iwTxIgF22cNLgIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:8c:e4:e2:83:27:13:e7:23:08:4d:9a:00:8a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Nov 5 05:00:47 2025 GMT
Not After : Nov 6 05:00:47 2025 GMT
Subject: CN=dc735b48207aa5874dc62dbc89e43bbc73d3999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:d8:db:36:19:a3:1c:4a:b9:0f:24:6a:a8:
a0:8d:50:ba:36:5c:51:1f:e4:9d:6e:ca:ee:4f:31:
cc:49:bd:34:33:3d:69:10:47:7f:f9:e1:83:a1:9c:
12:cc:d1:7e:a1:f8:1c:12:9a:5a:24:80:e7:eb:f4:
cd:7e:f8:59:97:74:3d:6b:c3:a9:03:34:5c:23:ef:
11:42:5f:10:d0:a2:66:91:00:79:d2:c9:0b:6a:a1:
52:51:2a:ee:ed:ca:32:27:00:d1:14:58:57:d2:2d:
9d:30:f0:65:a7:94:20:85:56:c4:9d:ab:42:0c:c5:
4f:04:bb:2a:65:fa:63:dd:3a:94:59:36:10:5a:96:
b7:d5:22:1c:7f:66:1b:ba:89:26:e4:76:2e:a5:30:
10:f2:a2:4e:47:d2:2b:cb:f5:18:f1:dd:5c:49:8e:
63:89:5e:76:b0:5d:ae:15:82:1e:07:91:70:ac:5c:
68:5f:f2:a0:13:d0:74:bb:2c:46:4d:4d:21:fc:87:
3e:48:29:2d:da:09:30:87:11:61:58:e0:ad:f6:86:
f9:3a:f0:c4:34:3e:d0:36:5c:9d:a8:ce:f7:44:aa:
ed:96:de:81:82:30:8f:75:f8:57:fc:67:8d:a6:ca:
10:9e:9a:58:88:2f:7f:39:25:f8:2c:6f:88:c5:7d:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:73:5B:48:20:7A:A5:87:4D:C6:2D:BC:89:E4:3B:BC:73:D3:99:9F
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:24:41:53:42:12:11:00:e7:47:6f:ec:c6:37:43:87:d5:7c:
bf:8d:21:ab:14:2f:f6:9f:4e:a6:79:4e:79:b6:f4:e6:42:a4:
ba:ca:b0:67:a7:d9:e1:44:7b:22:65:ea:0f:69:0f:2a:61:6a:
3d:3e:d2:c8:bb:84:4b:b1:7e:71:96:c6:3a:fd:b7:d0:48:db:
b6:64:5a:e4:79:30:2f:1a:5f:86:64:aa:de:ee:87:d0:83:9f:
92:ed:a2:ba:13:1a:bf:3e:a8:fd:89:1f:cf:37:30:3c:da:bd:
ea:79:58:88:99:b4:5f:5d:a5:c4:ce:ef:76:35:66:f0:bd:09:
c4:da:e1:68:ce:6e:a8:02:55:df:8b:d9:a0:57:bf:e7:fc:cf:
52:ac:85:99:7e:73:f1:22:da:38:52:49:a4:4c:30:68:d5:63:
48:be:f2:b4:bf:7c:00:54:15:ff:9d:6a:ce:05:d5:5c:91:6d:
11:ab:79:72:85:27:3f:5c:68:2b:e3:32:24:99:8b:ad:65:94:
15:79:85:24:d7:4f:6c:c3:b6:b5:08:18:38:dd:5e:52:87:ba:
c5:f3:74:5e:49:35:57:35:91:4a:0e:eb:84:ff:94:fd:f1:b7:
42:27:f9:48:b2:70:a3:66:85:24:4e:ec:af:93:f7:5a:39:93:
19:0e:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:26 2025 by rpki-client