Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: rq1bqXQXE6mkbSyBQxBcbrqWFRn8avoL0wSShNxlc68=
Subject key identifier: A7:1C:49:31:C3:04:BF:0C:5B:27:8B:B5:87:79:57:85:D5:26:6B:B1
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019A55D28BCC055581E55C4E8564365BC4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 0280
Signing time: Wed 05 Nov 2025 21:00:52 +0000
Manifest this update: Wed 05 Nov 2025 21:00:52 +0000
Manifest next update: Thu 06 Nov 2025 21:00:52 +0000
Files and hashes: 1: 6Y-Gwm1pYQZ3zoiYn55sRZyOo7E.roa (hash: c/B6n5T0x8EmEsvZEc0l8JbZU1xcXl0cLbnUAdZI57M=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: Fdk1DnotwqqpUVExnv7sra2DgC9xQiLMZJF7/J0oJKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:8b:cc:05:55:81:e5:5c:4e:85:64:36:5b:c4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Nov 5 21:00:52 2025 GMT
Not After : Nov 6 21:00:52 2025 GMT
Subject: CN=a71c4931c304bf0c5b278bb587795785d5266bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:d0:33:ba:ab:f8:59:dd:6e:64:f2:69:62:
07:58:25:68:d7:71:fa:44:14:0d:24:93:8d:7f:a6:
4c:bf:1f:a7:06:4d:b8:d2:1d:13:d0:c8:2e:28:2c:
44:c6:3f:4b:8a:d6:7b:4d:77:4e:5d:db:99:00:d4:
75:cd:35:03:b5:40:5c:fc:6b:04:e2:54:0f:c0:6e:
88:98:67:ea:1f:2e:29:52:86:97:a2:91:68:53:a1:
a3:65:b1:4d:08:de:cc:1d:f8:9b:36:24:f1:3a:5c:
6b:67:2e:61:94:52:ac:0e:d7:b2:a9:e7:dc:5f:d3:
68:c7:4d:5a:9d:d0:8d:18:c3:08:15:e7:44:c4:80:
41:4a:f8:ff:d1:22:41:8e:61:42:13:ba:8a:f5:47:
0d:27:e1:fc:09:f4:20:5d:55:34:6d:0a:42:9e:c1:
58:59:db:23:65:af:3c:bc:38:19:9c:a1:6b:5a:58:
c3:cc:8c:3c:7c:ae:d4:2e:bd:63:05:5d:09:d7:90:
e7:53:0a:3e:a7:94:96:c6:de:63:be:72:8b:ce:1a:
bc:8d:58:c8:98:c1:c4:61:4f:0a:cd:7f:c1:ce:c0:
dd:f9:49:d2:90:dc:bc:65:f5:2f:c4:54:b5:66:a8:
6f:d2:8d:d1:d2:4b:de:08:b5:dd:ae:e6:aa:10:8a:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:49:31:C3:04:BF:0C:5B:27:8B:B5:87:79:57:85:D5:26:6B:B1
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:91:0f:39:a1:d8:08:80:2b:cb:d7:80:ef:d4:02:e7:bc:c4:
4e:41:5b:c6:5b:7d:90:3d:ad:b4:d3:ac:b1:9d:31:c7:a6:35:
ce:55:7c:02:6f:56:38:89:a3:82:29:ab:eb:1c:12:9e:8c:c8:
e5:39:42:62:76:d7:91:e4:14:9d:dd:5a:29:56:7b:b7:e3:85:
96:d1:22:fc:3d:32:a4:55:53:02:4e:5c:df:97:32:0d:5e:c0:
ef:7f:a2:47:eb:e1:79:ed:e1:0b:33:79:47:e6:ef:fc:36:ca:
d2:d7:81:6b:f4:27:d5:21:cc:b4:ad:0a:72:a8:3d:09:a5:4f:
00:cc:d5:d1:e5:88:05:a1:6e:c1:6c:69:a2:50:eb:b6:cb:31:
e9:72:25:13:79:1b:3c:f5:48:22:65:a2:e3:55:cb:56:e3:a1:
ca:4e:61:61:06:f9:65:05:ef:9e:1f:03:f8:91:89:d7:e1:65:
4a:85:25:ec:99:34:01:6a:e2:5c:8f:4d:f7:01:93:b5:36:c4:
05:97:2d:54:51:86:9c:92:80:ba:f3:f6:e9:ba:b4:8d:83:64:
17:0b:87:cf:a2:05:d1:f3:3d:6b:df:0a:1b:8c:6f:39:24:19:
65:b4:39:6b:50:e5:91:34:8b:d0:4a:07:76:24:7f:27:9d:17:
b3:16:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:05:41 2025 by rpki-client