Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier: 5EVixb1e2apOz294RK9IEGU7GGCAN1btMx6Ki/E7+DY=
Subject key identifier: 65:6E:75:E3:11:46:0C:0D:AA:18:A1:70:90:1F:5D:FE:6E:CF:38:63
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial: 019A51F58973718FF583B48F9DD97B49FBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 03:00:37 +0000
Manifest this update: Wed 05 Nov 2025 03:00:37 +0000
Manifest next update: Thu 06 Nov 2025 03:00:37 +0000
Files and hashes: 1: SxgKNPaYJVhAK36SOSTuyxJmYzI.roa (hash: iBEUhnRScZ+rajzC9bqU9rcXbnYIQMvrpQOY+tW8FQc=)
2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: 9+/b+fnTd9R6UYrkdqagtxXID95Ydxr1ikQT9A4AeTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:89:73:71:8f:f5:83:b4:8f:9d:d9:7b:49:fb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Validity
Not Before: Nov 5 03:00:37 2025 GMT
Not After : Nov 6 03:00:37 2025 GMT
Subject: CN=656e75e311460c0daa18a170901f5dfe6ecf3863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:aa:9f:dc:05:6c:5a:b6:27:a0:85:0d:17:37:
39:0d:ea:3c:f1:26:b2:af:b3:88:91:2a:da:29:96:
af:3d:f2:46:d0:cf:bb:7c:19:80:05:a8:a0:82:0a:
83:2a:64:c6:08:72:3a:25:22:05:34:f1:5c:4d:05:
c1:41:02:10:9c:3a:89:f9:a9:da:9a:bd:00:85:e9:
14:29:40:33:43:09:54:34:3f:41:b0:96:12:5b:1f:
b0:75:e8:a4:0f:5b:1b:e0:47:34:b3:41:d6:f5:df:
4d:cf:9b:43:b8:3d:6f:98:8c:0a:e4:65:84:4a:85:
ff:20:ef:d4:38:45:9f:b0:8e:da:75:d7:3c:db:40:
a7:62:ec:c9:76:9d:1b:ec:4f:64:5c:15:ed:7d:0f:
8f:26:17:be:a6:97:93:29:54:fe:e5:aa:1f:70:61:
7a:47:03:05:80:eb:90:83:e0:eb:94:2a:5e:95:b9:
fd:50:0d:81:77:e2:63:04:12:f9:35:6f:12:0c:e1:
a1:ea:c4:2c:2c:60:ba:89:50:f2:98:62:fc:55:66:
ad:a4:bd:60:fc:86:02:c8:b7:b2:ea:aa:4b:c9:37:
37:ef:15:e7:2b:96:75:c5:e4:8e:e5:0c:0d:e3:e7:
63:7e:cc:1c:fe:b0:cc:2c:b2:21:f0:12:d2:53:9e:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6E:75:E3:11:46:0C:0D:AA:18:A1:70:90:1F:5D:FE:6E:CF:38:63
X509v3 Authority Key Identifier:
keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:1e:29:7e:0d:46:93:7b:a8:a4:4b:e2:b6:3e:d5:de:18:
c3:22:bc:b4:e4:86:b7:94:e3:3f:f9:7b:11:b0:8c:67:c5:4a:
b7:f2:f3:8f:41:33:a7:16:43:0c:b5:37:c3:19:e0:d4:cd:f6:
22:cf:e1:9f:61:29:e9:31:c8:79:9a:00:fc:e7:8c:81:ce:67:
f4:c7:ec:cd:f4:b6:20:0c:37:50:b8:87:3e:6d:27:0e:d6:fd:
ca:30:d5:82:92:ea:1e:8f:7a:67:bc:88:df:8f:73:59:85:ee:
f6:05:86:d6:9b:71:2d:4d:e4:c8:9f:36:da:96:5b:3a:22:f6:
e5:99:e2:e2:1c:70:ef:3e:9e:0d:62:7f:6d:6d:e3:10:22:af:
39:bb:bc:d8:7f:71:42:da:47:4d:4c:9e:6e:25:f0:89:b5:f7:
a1:89:51:e4:7f:58:21:6d:9e:58:5e:43:8e:99:20:d9:88:92:
2c:24:4a:05:b2:70:ff:97:5f:9d:20:d8:f6:69:3d:3b:f8:9b:
d2:99:cb:d2:38:60:7f:79:37:81:62:60:e5:de:d7:24:6b:14:
43:18:a0:f5:46:fa:f9:4f:83:bd:fe:1f:bb:81:af:14:66:bf:
ac:11:70:25:18:dc:c5:a3:32:da:73:85:f8:36:b0:2d:70:d0:
b3:53:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:30 2025 by rpki-client