Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: +L2bRGS/xDQbOFeUMpoWtlus9b9wgnyXMTC925/vVEI=
Subject key identifier: E6:76:4B:86:30:99:2B:42:86:7A:8A:EB:52:85:26:32:46:70:FB:76
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 019A4EF515C5B6BC9D65C1C424213E56A97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:01:15 +0000
Manifest this update: Tue 04 Nov 2025 13:01:15 +0000
Manifest next update: Wed 05 Nov 2025 13:01:15 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: q6GbYkgnODc+yVfn7T4RA6/QQapuYA42nesthzDaXOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:15:c5:b6:bc:9d:65:c1:c4:24:21:3e:56:a9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Nov 4 13:01:15 2025 GMT
Not After : Nov 5 13:01:15 2025 GMT
Subject: CN=e6764b8630992b42867a8aeb528526324670fb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:7b:c9:3b:ff:2d:9f:64:53:07:ed:72:d2:
c8:ce:8d:18:fc:32:7d:33:2f:b1:80:ad:48:13:8e:
9e:85:3e:64:8f:8e:e0:00:f1:2e:18:11:0d:74:77:
19:0f:8c:ac:e8:99:4f:91:9b:47:1c:e9:dc:92:4f:
51:9a:19:22:41:24:43:a6:8f:b5:cf:b9:05:3a:03:
67:a8:ef:78:3c:27:4e:38:b1:4c:74:45:e0:6f:55:
36:e8:93:ba:23:af:c7:a6:ce:52:5f:47:6a:36:5f:
bc:2d:70:2f:d8:84:13:bd:13:71:e4:fc:8e:c9:5c:
a4:94:da:1b:9f:ea:ad:48:bf:28:90:b8:e2:17:f2:
30:50:21:d6:16:6a:6e:a0:3a:42:b0:a4:2f:46:ab:
c4:d6:d3:b0:b4:43:96:47:7b:3f:a3:b0:aa:26:ea:
cc:59:ee:71:aa:5f:11:2c:0d:76:88:48:52:c8:4a:
98:b7:08:07:4f:36:20:9b:d2:7d:05:97:3a:1c:9e:
f5:c6:80:7c:26:77:aa:81:83:46:da:a6:57:dd:f9:
39:22:7b:f4:6a:2d:92:07:16:a9:a7:5d:7a:ce:bf:
30:05:d0:dc:85:6d:e6:bb:c9:49:ff:d9:1f:44:f2:
b3:9f:62:55:c3:63:9c:93:62:c8:8a:60:d3:32:29:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:76:4B:86:30:99:2B:42:86:7A:8A:EB:52:85:26:32:46:70:FB:76
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:c5:db:c6:32:0e:f0:e9:dd:f4:68:00:c4:4e:10:d5:18:
84:3a:26:4d:f6:f3:7e:e0:89:e9:52:4d:0e:c9:25:77:b4:68:
2f:55:13:a6:bc:cd:d0:a9:ae:5d:ae:3b:23:f4:d7:2c:47:a7:
aa:95:bf:a5:c8:8a:cd:75:a5:1b:12:41:1e:e8:d6:90:01:a1:
fc:e6:40:4c:eb:28:78:9f:62:36:6d:de:94:9e:b2:2e:94:8b:
65:0f:3e:8e:60:50:58:ed:3a:49:df:a3:85:1e:27:78:33:63:
fa:3e:14:50:d1:90:21:56:1d:5f:48:24:e8:66:91:f5:7f:1a:
56:6a:ae:96:a3:41:4b:e3:bd:63:e7:1c:42:6d:2a:98:56:af:
83:8c:2c:73:e1:ba:19:0e:82:3a:06:11:70:a9:12:b5:cc:6c:
fd:85:4b:c9:b9:e9:b0:68:ce:7c:5b:67:73:f6:f5:f9:7b:6e:
6b:4b:d6:01:8b:79:e5:49:dd:12:5b:f8:b2:67:07:17:31:e5:
55:68:9e:70:73:93:32:b6:2f:b2:6b:f4:0c:b1:81:0c:ca:d4:
e9:30:f5:65:28:e9:fb:29:73:07:7c:0a:88:9c:60:a1:23:34:
d2:c6:9e:1a:1c:09:2a:e1:1c:fd:87:75:29:04:1d:5c:16:8f:
79:5a:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:28 2025 by rpki-client