Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: 58LSkmCchrjqt3nfcQn1xphjflJ0mapIdCfJDvt/IBA=
Subject key identifier: 59:3C:DF:E9:E7:44:1B:17:9F:B1:CC:01:FF:6D:AD:8F:5A:5C:D1:D4
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 019A4EF5F119BA46B8DEBDA3F877DE02ED0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:02:12 +0000
Manifest this update: Tue 04 Nov 2025 13:02:12 +0000
Manifest next update: Wed 05 Nov 2025 13:02:12 +0000
Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: E6UkjT/UyDtU0VfqRiEujec2D40sGy4Yk/iB4mfaep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f1:19:ba:46:b8:de:bd:a3:f8:77:de:02:ed:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Nov 4 13:02:12 2025 GMT
Not After : Nov 5 13:02:12 2025 GMT
Subject: CN=593cdfe9e7441b179fb1cc01ff6dad8f5a5cd1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:2a:6b:5f:41:6c:c4:79:13:1c:f1:58:25:
1f:1f:2b:f6:42:87:d9:b6:41:1b:2c:ea:43:75:e9:
e8:f5:3c:5a:89:d8:9a:62:56:b6:77:54:c1:04:bb:
b0:8b:10:f0:ad:a5:d6:03:22:6f:61:86:23:42:01:
c1:25:bf:fe:f4:49:c6:93:2f:de:7c:c1:f0:3d:2b:
68:06:ca:b7:bf:ab:d2:a6:ac:54:09:99:e5:fb:ef:
0b:0a:57:54:c7:97:a5:05:8f:91:ce:3e:3a:aa:86:
24:88:84:4f:40:47:df:d2:62:96:d2:bb:c9:f8:24:
a1:43:0e:75:87:86:59:d6:7b:9e:17:11:e8:ac:5e:
cb:2a:a8:45:99:2c:0d:4d:27:c5:80:bb:d7:a8:19:
35:51:99:ed:40:d2:66:c0:56:12:d6:88:93:9f:f2:
9d:32:22:ec:48:58:ae:20:a0:a9:37:ef:b6:2e:18:
d0:70:15:9d:73:83:62:ff:54:57:56:65:03:d4:c5:
2e:d7:f9:3d:a0:0d:a8:b4:31:e1:fa:66:7e:93:c9:
8a:54:13:a2:1f:be:09:b2:4f:51:fd:71:67:50:48:
45:91:2f:29:c1:b9:9b:aa:92:06:4b:d8:62:d4:6d:
f8:c2:9a:f4:e0:40:fe:72:bc:ef:72:f3:14:66:01:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:DF:E9:E7:44:1B:17:9F:B1:CC:01:FF:6D:AD:8F:5A:5C:D1:D4
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:56:d0:4a:4a:d3:18:0e:8a:1e:54:de:a5:66:8d:bf:bc:ab:
37:d6:ce:e5:24:21:42:8d:19:68:f0:ae:f3:f0:2d:ff:44:7e:
0f:b3:e4:d6:85:4a:d9:d6:46:c5:d1:ff:db:2e:49:ad:7a:ae:
f0:88:bb:c3:0b:ef:c2:11:1d:bf:c5:ef:ab:6f:33:4c:e6:ba:
da:a4:ee:59:10:b5:5e:94:36:bd:d5:b8:e6:b8:26:5d:06:14:
96:f0:c5:b0:ff:94:38:21:29:56:ee:7f:10:33:61:4d:29:52:
1a:fc:8d:86:d5:f8:a6:fe:1a:1e:52:b2:7d:a1:c1:ad:cf:a7:
49:2d:ba:92:37:8b:aa:fa:f0:45:8f:d4:68:67:72:e0:5c:61:
b7:6c:6d:c9:b8:a7:37:d7:6b:86:6d:f5:30:0d:32:e2:1f:95:
af:3f:e7:71:7e:da:57:2b:27:24:e7:b4:f6:a2:8e:6a:f7:4f:
88:ae:a7:50:ad:c3:14:97:f2:e3:1a:20:d1:20:3d:00:30:da:
f8:ef:b7:e1:5f:26:af:74:c3:be:a9:fc:f1:75:d3:15:06:cb:
92:9c:57:46:14:94:ec:49:2f:f0:57:79:e4:4c:ae:be:7c:bd:
bf:ae:65:19:34:12:53:9b:29:21:f0:ae:42:80:16:2b:08:aa:
e7:44:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:39 2025 by rpki-client