Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: 3E9SJs/hbhU3V6J0JUrnqwJVEI+XYPdOH4tK5GApDmo=
Subject key identifier: 86:E4:82:0B:84:4B:44:39:DB:42:88:E6:F1:2E:37:F8:7C:9B:EE:C3
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019A4D0789E22F60F7BB360E86BB1240FEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 03BC
Signing time: Tue 04 Nov 2025 04:02:10 +0000
Manifest this update: Tue 04 Nov 2025 04:02:10 +0000
Manifest next update: Wed 05 Nov 2025 04:02:10 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: EZKsrajSJ9869mpDb6rSaxpF6AxCaAjComUxZOMZioo=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:89:e2:2f:60:f7:bb:36:0e:86:bb:12:40:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Nov 4 04:02:10 2025 GMT
Not After : Nov 5 04:02:10 2025 GMT
Subject: CN=86e4820b844b4439db4288e6f12e37f87c9beec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:fa:a5:9c:dd:66:3a:8e:7c:82:29:c0:46:
5e:31:87:ec:15:b6:1b:b0:bd:fc:0a:e0:b5:1d:55:
2e:c6:35:0d:48:6f:c1:a5:0e:78:5f:4f:99:bf:fe:
8c:a8:fc:92:dc:21:e2:e2:f6:1b:79:0f:f2:aa:b4:
54:c4:42:bd:d5:a0:7a:1d:d4:c1:69:d8:da:28:ab:
d7:38:6b:0d:4b:47:5a:ce:b4:14:89:14:98:a3:78:
03:00:8c:aa:db:a7:96:b3:e9:16:20:d2:30:a4:f8:
71:15:d4:85:1e:ad:39:bc:d8:d6:c5:b8:77:41:05:
19:69:ea:0a:70:46:f6:5d:98:59:3c:2b:c2:55:5c:
c3:36:1f:db:66:e8:1a:f8:d0:26:d0:3a:39:e6:db:
6b:ee:c6:07:87:92:6f:ba:47:94:42:aa:29:ec:b6:
6f:0f:6b:dc:79:f6:4b:0a:d4:e7:90:68:40:58:64:
25:b6:bc:30:47:24:ee:7e:e0:85:d0:ab:c3:60:6d:
94:6c:56:d2:f5:41:22:03:da:20:3f:e9:8c:1c:d3:
f2:93:18:14:49:6b:10:66:58:12:28:3a:6b:f2:be:
02:d8:f5:0f:16:54:e1:ca:64:81:3d:ef:25:9e:92:
b1:b4:64:95:f5:b1:68:be:98:2a:3a:ae:73:be:57:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E4:82:0B:84:4B:44:39:DB:42:88:E6:F1:2E:37:F8:7C:9B:EE:C3
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:aa:00:43:34:e9:b4:34:15:09:4b:6c:06:93:b2:86:f1:87:
e2:ba:93:a6:c1:24:67:6e:ed:67:e0:af:8a:1b:62:71:4d:95:
c1:5e:5a:4f:10:9b:15:ce:86:1d:1d:fb:55:e3:89:9d:42:69:
3d:36:6b:50:10:77:9d:39:7e:ed:45:8b:86:93:8f:4e:1e:a7:
89:11:d3:35:a4:cb:1a:4b:63:d4:82:06:e3:98:2a:bc:ff:fd:
53:ce:70:c8:f3:4c:76:77:06:7d:05:71:c3:56:89:75:ec:15:
f9:55:a5:20:a8:bc:67:62:64:d3:c4:6c:07:4e:f9:c2:e7:0e:
d4:2d:53:9b:58:a9:dd:b5:e9:18:20:55:08:4d:a5:7c:41:7b:
9a:70:27:0e:b9:9a:0a:83:77:b8:30:b7:70:d0:52:a9:4c:17:
31:df:e9:83:b9:9d:10:6e:a8:fb:d2:8b:74:f3:53:01:54:7f:
04:03:8f:dd:af:8f:19:fc:aa:71:53:ad:b6:8d:44:79:91:ff:
be:66:7a:58:91:2a:d6:c3:1a:3d:0b:39:53:1d:1c:73:16:e8:
42:84:95:d8:f2:2c:a6:0a:bd:e6:cf:0b:07:bd:d2:ad:b1:17:
27:41:52:24:75:e5:58:b7:27:37:f6:a5:ba:45:34:5e:36:c2:
1f:31:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:19 2025 by rpki-client