Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: hO1B4A7Hg/uBayQM8wUo31YxJPDSFutCbKYEm9mAX6o=
Subject key identifier: 50:F6:5F:A3:5A:35:DE:F6:D4:03:A5:3A:E7:36:A9:92:4C:8C:D1:DD
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019A503E0AB91E148B81CFEEA32FDDF5F85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:34 +0000
Manifest this update: Tue 04 Nov 2025 19:00:34 +0000
Manifest next update: Wed 05 Nov 2025 19:00:34 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: /kl0GgqgDBnZL8xEFh5SHnAH7F9oXkGoexeb7VpDgkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:0a:b9:1e:14:8b:81:cf:ee:a3:2f:dd:f5:f8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Nov 4 19:00:34 2025 GMT
Not After : Nov 5 19:00:34 2025 GMT
Subject: CN=50f65fa35a35def6d403a53ae736a9924c8cd1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:72:94:e9:2e:90:91:18:38:25:69:c0:e0:
16:4d:54:81:8c:57:9b:77:16:1f:77:36:3d:86:75:
d3:23:74:06:23:3d:13:52:49:d4:8f:08:85:d4:54:
34:37:a0:0e:7f:14:8a:26:16:22:b2:a1:2e:00:f5:
90:d8:66:1c:70:a4:35:3a:02:f3:96:d2:29:af:82:
b4:c0:9e:58:36:81:7e:06:50:c5:dd:8f:c1:b2:27:
80:7f:9e:39:a8:30:98:62:fe:c4:e7:75:a4:8a:84:
a4:aa:a1:49:64:07:e1:e8:ae:4f:5f:1d:c4:51:d4:
74:ae:33:13:9e:23:b2:19:45:b9:8e:a4:b6:2c:ce:
68:49:0f:27:f0:42:d7:9a:8b:42:8e:b1:5f:05:9a:
a0:0a:c1:cf:e8:bd:cb:c0:e9:00:1f:cb:35:6c:f8:
8e:04:d7:02:bc:e6:60:a5:7c:3a:ef:14:3a:28:89:
7d:8a:db:d0:6f:c7:4a:ce:2a:7b:0c:50:65:80:92:
bc:bc:a2:34:db:e6:3b:ec:91:de:50:c3:b1:44:fa:
7f:ab:b8:8a:29:81:cb:aa:8b:5b:2b:84:6c:66:69:
26:dc:dd:09:64:9f:5b:27:5e:89:12:0f:14:46:ee:
25:b8:8c:ce:d8:59:29:eb:93:8f:24:27:7d:c3:9e:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F6:5F:A3:5A:35:DE:F6:D4:03:A5:3A:E7:36:A9:92:4C:8C:D1:DD
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d9:2b:d7:97:11:86:31:8d:5a:a8:50:f1:c3:02:6c:00:dd:
7b:a4:91:df:bc:cb:5f:01:d4:e0:41:19:57:ca:2a:1c:8f:09:
5c:fb:77:42:16:1b:54:1d:e1:52:43:cc:1a:d4:51:83:a8:51:
ab:66:10:58:88:d9:18:a3:61:ec:65:32:42:c5:59:cc:2a:f8:
2e:63:9d:91:9d:90:4b:67:30:cc:77:d9:d0:8a:54:6d:11:47:
79:49:30:32:a1:34:22:8b:6c:dd:8c:8b:a6:0b:0b:7e:7e:b4:
58:66:62:83:ff:10:66:36:49:35:d9:ed:07:40:ee:28:51:11:
22:ef:6c:e0:b6:d7:a1:97:79:02:c2:d5:14:37:11:5e:1d:e9:
d1:80:d7:8c:17:e3:b6:94:ec:e0:8b:b1:2f:be:73:9b:6f:85:
4e:0a:38:55:47:60:d5:29:47:b3:db:4c:47:42:6f:f9:cc:0d:
37:63:b1:9a:65:20:89:4d:3f:5f:62:78:f0:0f:f1:77:d1:23:
0a:dd:8e:28:47:ca:d8:14:0f:d9:07:d3:7c:c1:65:bc:13:6d:
30:f5:2b:38:ec:4b:67:aa:27:74:bc:f9:bd:fd:de:fc:7b:f4:
a3:31:5a:b7:d5:36:a1:75:e6:a8:74:76:b3:5a:46:c3:e3:cc:
82:8d:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:12 2025 by rpki-client