Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: ErHD9+s/TzS9TGB74y29eJMrW464L7Jx4FrgG98c6vo=
Subject key identifier: B1:C2:D9:DD:B9:5F:27:F2:36:27:4C:AF:58:E6:B8:6B:7E:BE:A8:0F
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019A537635DB6D94115811071B485D315E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 0FD1
Signing time: Wed 05 Nov 2025 10:00:47 +0000
Manifest this update: Wed 05 Nov 2025 10:00:47 +0000
Manifest next update: Thu 06 Nov 2025 10:00:47 +0000
Files and hashes: 1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: NltoVI5AxnpgLFqBzvK7rMUvKbh9DTm7gCowD4ttFo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:35:db:6d:94:11:58:11:07:1b:48:5d:31:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Nov 5 10:00:47 2025 GMT
Not After : Nov 6 10:00:47 2025 GMT
Subject: CN=b1c2d9ddb95f27f236274caf58e6b86b7ebea80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:bf:20:db:bf:5d:7c:2a:62:4f:9a:e7:6c:
22:38:d8:98:ff:a2:01:54:e7:46:15:8e:8f:49:58:
e9:f2:f0:2d:5c:f2:8d:07:45:9a:3d:a9:ac:ee:81:
a8:ce:1b:9f:02:e0:49:3e:c3:01:ec:af:d4:69:f7:
ba:31:87:a5:cd:dc:ee:7c:3d:f6:96:f1:b5:3b:b5:
36:29:c5:fe:d2:97:3e:b2:26:9d:84:db:fd:41:33:
1f:a7:5d:6f:e2:1a:e8:98:ac:be:a7:8b:a7:b3:f2:
ed:ff:63:f4:42:7c:88:8a:6c:a5:1e:a1:50:fb:47:
b1:5f:8f:b9:07:64:81:22:dc:b3:dc:43:ea:ac:cd:
14:cc:fd:2b:46:85:a5:1f:b0:d4:00:38:85:c8:b4:
b2:a4:18:ad:4b:2d:93:75:22:30:b4:52:5e:be:f7:
7b:9b:58:2b:7f:f2:ac:61:5f:29:c3:f8:9c:aa:14:
6a:a6:7f:4a:8f:60:20:eb:47:ec:8b:71:72:11:47:
69:12:62:1a:ee:25:af:a1:96:32:d6:d2:4a:06:f9:
7b:38:ee:42:65:f1:f0:96:c7:84:db:58:10:fc:de:
51:1a:dc:d2:ae:f3:b7:c8:16:99:70:a8:4f:a6:d8:
d1:f6:db:c1:9f:21:dd:f4:c7:f1:87:76:ae:81:b4:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C2:D9:DD:B9:5F:27:F2:36:27:4C:AF:58:E6:B8:6B:7E:BE:A8:0F
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a4:c4:4b:86:d9:42:9b:5a:18:28:73:cf:14:73:d8:b7:77:
43:72:2f:af:b4:76:a2:b1:f4:9c:58:a0:04:f1:b4:f1:3e:84:
ed:9d:31:33:48:7a:d4:98:13:58:d7:3a:a1:8a:df:f2:db:08:
da:2d:5a:e0:77:a9:67:a9:1b:91:af:97:7f:e2:77:3b:7d:58:
4e:e4:77:ce:ec:42:31:92:05:7e:a9:3d:15:8f:fc:72:4e:6f:
b8:43:e6:8d:fe:4f:a8:31:c7:68:df:84:57:c2:ca:7c:c7:8a:
19:a7:fc:f8:6e:75:99:7a:d0:96:9a:ae:d9:26:1f:81:f6:73:
26:57:6c:d2:2d:c5:14:34:34:31:00:b4:cd:a1:49:c5:1c:70:
74:2a:83:b2:03:4b:8c:81:04:4f:e4:c1:2a:a4:9e:d9:a0:b7:
f7:ef:67:83:17:37:f0:35:c5:cc:4e:7e:1a:ab:33:c4:72:0b:
f2:80:93:c9:b6:47:c6:03:0f:c4:9c:3d:da:a5:37:94:10:97:
1b:67:1c:31:50:58:f9:f1:65:60:38:cd:ce:3e:35:5f:29:76:
ef:1d:52:29:d7:ed:c1:c6:b3:ef:62:1c:79:f7:69:bd:ec:3c:
c2:57:db:85:f3:63:17:25:ee:ed:16:33:c9:a7:9f:d5:45:6d:
16:45:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:52:05 2025 by rpki-client