Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: DAdUw3af4y1JGvXm5QCdUmxcvy92rZh292uwP2VZ9Nk=
Subject key identifier: D9:1A:AA:31:B2:4E:35:87:B7:AD:BD:05:29:E9:78:F4:46:76:1B:77
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 019A4DE167634AE7EAECB9BA0F63857BC333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 11B5
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: FMG36HBqRtUqt7COIUG1QrrrsQw.roa (hash: +rIibyVY3fY3kT8o9SPGAfNUmFMRWDiLA0uoH2crZuE=)
2: Lvq4EYAEnD7iSP_yLHhiYfgSFsI.roa (hash: OuBem9w/c6wr2MmfA4/euItVJTNd4ynaKBvDB6V5Dg0=)
3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: OjmqN1Cy70JbuI+uqdSPDYoF7rhwjZb51C3T9CSE0NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:67:63:4a:e7:ea:ec:b9:ba:0f:63:85:7b:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=d91aaa31b24e3587b7adbd0529e978f446761b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:70:74:5f:d5:48:fc:84:d8:46:28:82:68:
db:3e:26:6c:d2:d9:2b:5e:b5:74:12:93:61:7a:a2:
62:44:0e:5e:2e:49:45:1c:6a:67:ac:0d:9a:a5:81:
44:84:cd:25:61:f9:e1:6c:2d:41:94:d3:64:0c:65:
98:41:2b:85:cc:7e:eb:22:6b:34:d5:72:ff:83:0c:
63:7c:99:79:10:6d:a8:e9:d1:59:9a:c7:34:f3:f6:
11:3c:27:db:da:07:3e:3b:4b:50:11:da:77:49:11:
10:3c:74:ae:85:5e:57:95:03:1e:a0:1f:8f:0d:85:
63:e1:87:7e:a9:97:56:d9:af:92:78:8d:23:34:05:
1e:c1:b1:c9:80:ad:e4:6e:45:bc:67:36:6f:16:23:
93:e0:7c:53:10:af:d7:03:66:32:d8:ba:53:16:1a:
7b:03:4d:43:76:36:30:bc:bf:f9:12:b6:0c:42:11:
2b:4a:43:6d:5f:5f:91:56:df:4b:5b:40:aa:72:38:
46:89:78:b5:d3:6a:a8:0c:0c:f3:78:f6:42:5f:5e:
ad:ea:80:79:ec:8d:5c:2b:78:f3:84:37:ce:f1:77:
43:c7:17:17:a7:7a:ac:9c:6f:00:e0:81:d6:03:ce:
c2:2b:85:ff:f3:58:91:d6:27:e7:13:3b:df:4d:2f:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1A:AA:31:B2:4E:35:87:B7:AD:BD:05:29:E9:78:F4:46:76:1B:77
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a7:9c:ba:5e:92:aa:0c:d6:21:86:ed:37:c8:fe:21:dc:42:
a5:1d:96:a7:ff:60:3a:f8:73:f2:4f:ab:70:39:f6:4b:19:dc:
c6:74:16:8e:17:dd:35:2f:33:12:c0:07:83:7d:39:ea:cd:e4:
3c:47:65:c4:20:19:0b:a3:8e:73:1f:cf:f3:6a:56:f8:56:80:
da:dc:13:aa:f7:58:7a:a3:2b:21:e5:81:3b:13:f4:84:68:c3:
bf:92:b6:90:51:50:e1:12:8c:84:aa:14:05:f3:05:8c:85:5e:
0f:aa:a4:c9:ab:3f:18:6c:ea:2f:ac:69:cb:c0:f8:7d:a8:9a:
0b:bb:8b:18:4b:7e:27:d9:21:10:0b:8b:3a:71:92:12:51:c0:
63:1d:8c:12:60:4d:6f:07:29:5c:1d:3f:6b:6a:e3:5d:cd:b7:
6c:a8:10:bb:a7:f6:73:12:e2:d2:41:d0:13:01:e9:53:0f:f1:
56:d0:53:8b:09:1e:cc:72:8c:ee:0c:91:1e:7a:a1:55:3a:3e:
76:ab:a7:3e:98:79:62:1c:99:dd:7f:26:f5:9b:0a:b9:ed:14:
24:fc:98:c7:f7:4a:c3:ae:fc:93:b6:13:ab:ab:d8:6c:d0:8c:
d6:84:67:bd:96:29:fe:4d:30:c7:1a:db:80:2c:24:d6:3d:16:
38:b1:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:38 2025 by rpki-client