Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: Y0YLUOirJkNQsCV3PO5TLR0B/RCqrTuDUuNJlvjRyrw=
Subject key identifier: 8F:5D:0E:87:CC:BE:5D:1C:50:64:B3:BD:D6:77:89:33:77:0C:E3:6C
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 019A4F2B38F72CF074FE0744AFDD6083981C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: kdxC1CRCyHBIZa3PdPd8GequrcJq+GphjXMa5Wps0Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:38:f7:2c:f0:74:fe:07:44:af:dd:60:83:98:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=8f5d0e87ccbe5d1c5064b3bdd6778933770ce36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:b1:f3:c7:2a:9b:93:84:16:b3:77:52:02:
c2:7f:b5:32:6b:13:2b:cc:79:1a:93:7f:dd:c1:a7:
83:30:36:e3:f2:0a:44:0f:8a:16:31:de:e1:08:e4:
ab:a7:b0:0c:74:aa:ea:02:63:d5:86:0b:2a:f0:d6:
4b:bf:63:fc:91:08:e2:47:fb:4c:6b:bc:bb:27:ce:
3d:ae:96:fc:ac:a8:16:72:8f:21:7c:50:61:f2:94:
0c:fe:12:b7:1c:0a:2f:d6:80:ff:0e:64:c5:0d:03:
3a:80:08:4d:a7:4e:34:a8:6e:f0:cf:76:8f:64:3d:
d5:39:be:e0:29:2d:22:71:d4:9b:ca:32:59:b1:99:
d4:c7:b2:3a:b7:e2:75:34:0d:fc:db:5b:1a:47:fb:
a8:69:17:49:84:3c:90:7b:7c:64:21:5b:a0:6d:eb:
dc:6f:34:6d:2b:d6:13:8f:f8:7a:de:13:15:c8:e0:
28:dd:38:2c:38:25:7f:73:9f:17:20:c7:91:e2:fb:
b6:5e:c5:5d:93:6f:7d:34:57:f3:2e:ee:7b:27:ef:
44:eb:68:bd:0e:7b:f9:29:9a:cc:95:93:a2:60:b0:
3b:4b:fd:cc:45:75:64:73:48:15:03:b6:e6:70:ef:
d5:24:ce:2b:d1:33:7a:d1:8e:5b:a6:0b:7e:82:e9:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:0E:87:CC:BE:5D:1C:50:64:B3:BD:D6:77:89:33:77:0C:E3:6C
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:10:7c:42:29:89:5a:1d:ff:91:75:1b:c3:1b:fa:8c:0e:
ca:16:b2:96:1b:05:4b:96:94:a1:1e:36:fa:4b:98:71:ff:7c:
14:8f:1d:8d:ed:72:8f:d8:74:e3:75:f8:a3:e4:da:d0:d4:b6:
0d:16:e9:51:b5:c5:d5:aa:4e:c8:23:b2:8c:0c:2d:f7:5f:31:
dc:b4:c1:7e:61:69:38:6e:d3:b1:5b:b3:49:01:bf:d7:ba:b1:
4e:fb:93:ec:74:54:24:de:8e:7e:f3:c9:c3:6b:b2:83:d7:75:
0e:24:66:df:55:3e:80:c5:a4:4a:5d:0c:05:2e:eb:f4:c8:d6:
c1:dd:91:60:3c:42:4a:0b:d8:7f:60:3f:e8:ec:31:1d:07:f2:
ff:4c:3c:f4:af:ab:e3:b0:27:f6:16:db:7c:aa:64:17:bc:33:
7e:2f:70:f4:51:3f:74:99:4c:98:d3:e8:2f:0d:db:fe:e4:dc:
13:aa:7f:4a:e4:04:7b:e3:e5:45:eb:74:c7:de:04:9f:7c:42:
09:f8:49:16:c9:e7:4d:3a:4a:de:48:d1:b5:f6:35:fa:15:4b:
86:8e:51:36:f0:ef:11:81:91:fa:09:43:f5:a2:12:42:5d:84:
0b:dc:c5:2c:ad:0b:df:d6:f6:66:9e:aa:18:a2:51:5e:ce:5b:
7d:04:6d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:55 2025 by rpki-client