Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: 3FOud9lw4+yGkDtOTGq8qESvCi7aVc+wsOcb5dIShfY=
Subject key identifier: 6D:31:56:76:45:2F:AE:60:C2:8E:9E:CD:50:ED:E3:4F:D4:55:23:59
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019A51BEDB5D8FFE9BCD13EE3A8B8A848B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 02:00:53 +0000
Manifest this update: Wed 05 Nov 2025 02:00:53 +0000
Manifest next update: Thu 06 Nov 2025 02:00:53 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: IMCdauRrxocZhkjqh3H0zIGUQXUMM484Ecc2sRTUWeM=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:db:5d:8f:fe:9b:cd:13:ee:3a:8b:8a:84:8b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Nov 5 02:00:53 2025 GMT
Not After : Nov 6 02:00:53 2025 GMT
Subject: CN=6d315676452fae60c28e9ecd50ede34fd4552359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:54:ee:02:4b:ac:6d:64:e5:83:94:81:47:
dc:62:5e:d9:5a:40:0d:25:11:43:00:b0:aa:6d:a2:
e6:f4:d6:fa:74:14:48:23:8b:0b:29:a5:f8:de:84:
34:03:a6:b6:ff:1d:f0:c4:2a:9b:65:45:aa:58:27:
70:1e:37:90:c9:d7:53:cc:c0:d2:aa:4e:8a:a2:b8:
8e:17:74:b9:c7:7d:f4:c2:d8:fe:50:0b:69:15:e5:
d1:88:d7:12:d6:58:a2:38:b4:2a:ec:e0:8e:1a:56:
ca:0d:72:e3:21:6d:8d:51:f5:bf:ca:54:f2:55:9a:
f1:84:40:b7:96:a5:49:99:b3:86:ea:b3:7b:44:d3:
ec:20:e3:e6:76:73:c1:92:37:12:b5:59:fa:68:cf:
fc:59:3e:53:72:64:1b:9c:7a:cc:b3:bf:79:e0:21:
32:4f:83:f4:e3:0e:74:e6:88:78:8b:19:be:05:98:
08:68:53:1e:ad:80:b3:d1:79:be:21:fb:d3:a5:78:
c5:63:48:35:ca:31:eb:e5:e8:c6:f5:c3:17:a7:47:
9d:be:64:fe:4b:d1:27:28:77:cb:8d:1c:48:87:95:
11:12:09:ea:33:65:1a:83:61:d2:e3:e4:c9:36:83:
7e:e6:7b:5a:42:0c:32:cf:22:d6:57:9e:fd:18:08:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:31:56:76:45:2F:AE:60:C2:8E:9E:CD:50:ED:E3:4F:D4:55:23:59
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:fa:58:a5:d3:d5:bd:dc:d9:45:6c:c3:6c:dd:cd:61:22:
3d:42:5d:3c:52:fb:ac:68:63:10:00:54:7f:eb:25:40:2d:38:
bf:77:7f:f0:57:c6:35:c8:d0:32:66:2c:3b:69:db:64:ab:be:
81:76:32:34:6f:a4:8b:87:aa:c7:0d:eb:30:79:c8:c7:c3:70:
f7:41:2d:c6:6e:24:81:04:ca:34:f7:7b:3a:a4:51:a0:e0:4a:
af:6c:45:09:c8:f8:4e:a6:e4:ef:6b:37:6a:0e:c6:dd:fc:be:
d7:5e:60:7a:e3:50:95:dc:eb:72:37:f4:12:2f:f9:c3:ca:81:
6d:5c:fc:44:a9:47:93:f8:12:b5:4f:3c:ae:b3:f6:90:04:48:
b9:05:aa:08:d7:58:0e:f1:f2:97:98:0c:b9:6c:9f:a3:96:d4:
97:2d:2e:16:53:53:56:ef:cb:24:71:19:ed:2f:50:4b:e5:1c:
ed:0d:64:3c:d1:d0:f3:ab:66:a9:4c:8d:1b:14:f6:a6:93:c7:
ac:42:6d:e3:d8:e0:8d:92:6b:89:53:71:79:5e:c0:7d:51:08:
11:90:88:0b:b6:f4:4b:f5:32:7f:c6:72:94:6e:e9:93:cd:f4:
5f:a8:9f:d5:3b:6e:81:d2:86:ba:82:4c:40:7e:0f:c8:1d:86:
68:7a:6e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:54 2025 by rpki-client