Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: eZV+fPKxAtFc5CfkCgKV11RrnREgv+V2075MRp21c68=
Subject key identifier: EC:A5:95:F8:94:96:62:40:2B:F1:9D:09:E2:F0:BC:0C:D6:48:AF:BD
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 019A4EF41F76E62F364937CC508A25320FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 0EEA
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: MKMxfWvmz2LhPfN0AO6kIjx4_i4.roa (hash: RBO8o15DgznSyTBOVtLWyg+YfWl1Xfsv3AO7LGd0yBE=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: KQOhWjKQ4v73tKqMK9vnJtb1BGV48Ei1C/0dEu75HRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1f:76:e6:2f:36:49:37:cc:50:8a:25:32:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=eca595f8949662402bf19d09e2f0bc0cd648afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8b:7a:b8:66:be:59:a8:76:a0:a3:d8:42:65:
99:a5:c4:d8:9b:aa:d2:da:e2:b2:34:6d:72:34:2b:
07:5d:82:45:f3:df:13:c4:c6:ce:ca:8d:c2:84:0d:
11:b1:f3:bf:da:f8:bc:99:e1:53:ae:b5:c0:14:e6:
c0:2d:a0:82:c0:4d:50:c7:f8:0d:82:07:5b:6d:30:
ae:c0:96:2c:e3:f8:78:9d:b1:9a:00:96:56:89:2c:
2e:4e:78:04:7e:98:58:f4:14:d2:70:ca:f6:d6:6a:
8f:d6:c1:03:e0:ac:54:1a:bd:31:39:bd:cf:90:d1:
ba:30:6d:3b:5b:d4:75:5e:c2:c1:0a:c2:96:b1:88:
81:a0:be:46:6c:7a:76:ea:60:e2:42:d3:f3:79:c7:
4e:45:68:ed:cd:cf:7c:4e:7e:56:67:10:4b:75:8a:
72:e2:94:e1:09:3f:f7:18:67:a7:57:ca:86:2a:fa:
a8:5a:f1:f4:02:fd:68:83:2c:bf:d5:19:71:a8:89:
2a:21:a8:6f:b8:6f:ac:3c:f9:c8:c6:dc:53:99:b7:
49:12:f5:17:50:2b:0b:d2:d4:e3:9c:bd:c7:f6:b0:
6f:4b:aa:0f:98:70:c5:57:68:b1:78:64:28:79:2c:
07:ab:c0:bb:ec:01:12:18:dc:0e:3b:4d:89:f3:f5:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A5:95:F8:94:96:62:40:2B:F1:9D:09:E2:F0:BC:0C:D6:48:AF:BD
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:73:a9:c8:9c:d5:36:7d:17:14:07:03:10:a1:de:19:b4:
67:6d:66:ad:1e:64:5d:d0:e0:13:f9:ea:39:87:4e:56:3f:41:
f8:77:e9:c0:10:5b:4d:d5:41:ad:65:43:b4:6a:de:16:65:d9:
c9:57:e9:02:4f:76:f7:6e:10:68:3a:0f:61:29:d7:78:80:10:
12:16:c8:71:d5:23:36:cd:a7:d4:dc:9d:66:0c:13:51:aa:26:
31:22:b8:d5:2a:11:48:1b:8a:c8:7a:ca:26:a0:03:00:a9:29:
5b:e0:3b:f6:91:01:4f:6e:f5:d9:55:e6:82:8c:25:f0:6c:03:
ad:7c:d6:0d:0c:57:16:96:be:8b:35:19:1a:7c:bf:d1:e1:0c:
58:ee:ac:1f:a2:0f:ba:40:d3:6f:38:c0:6d:4e:e4:ac:b3:a5:
b0:ae:ba:ef:f5:8f:fc:60:b6:2f:b6:2a:b3:bf:ae:a0:1b:a0:
7c:51:5c:25:78:1a:aa:04:98:9c:db:2a:94:00:48:50:9d:98:
09:a6:4e:c9:37:17:d6:f3:d6:4e:c8:0f:c5:a3:83:87:d0:23:
a4:2c:78:9f:32:7a:d8:2b:a6:de:4d:c9:dc:10:87:18:20:5b:
e5:43:7b:ed:be:2b:11:ac:aa:e3:59:ae:74:0f:df:6f:f0:a3:
a3:e5:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:57 2025 by rpki-client