Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: oSa6WF+9vee89h23Is89qJMuX6wpWwvYLSahEjiOQ2I=
Subject key identifier: 5C:04:72:A6:DF:96:03:14:F2:F5:54:7E:76:09:C2:B5:FC:25:62:4B
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 019A4E4FDD90F36BE10E312A344827B17CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 169B
Signing time: Tue 04 Nov 2025 10:00:48 +0000
Manifest this update: Tue 04 Nov 2025 10:00:48 +0000
Manifest next update: Wed 05 Nov 2025 10:00:48 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: Y8CwdMYTgF642s7A2E93JCzDT2mo7SIBLt9r/gFe1q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:dd:90:f3:6b:e1:0e:31:2a:34:48:27:b1:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Nov 4 10:00:48 2025 GMT
Not After : Nov 5 10:00:48 2025 GMT
Subject: CN=5c0472a6df960314f2f5547e7609c2b5fc25624b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:45:d1:51:ab:3f:e7:e6:8e:8e:10:11:7d:
f4:79:d9:69:95:a1:21:8d:0e:cb:ce:7a:eb:9d:41:
88:7e:a4:c7:9e:30:a5:52:91:e0:33:6c:6a:7d:b5:
40:2a:a7:f1:a2:24:d7:a3:68:a1:0a:f4:54:ea:6b:
00:0b:c8:8a:b3:24:f7:cc:07:af:89:11:28:32:ae:
4a:cb:ee:63:eb:c4:4b:53:ff:ea:d4:56:4f:7c:c8:
5e:47:91:17:23:69:fe:78:fd:d8:a8:ae:c7:cf:6e:
7c:aa:80:85:a7:24:51:95:8a:84:84:7f:61:0a:68:
b6:16:9b:82:aa:1b:3c:16:ab:d2:7c:b4:7a:9d:c8:
16:24:02:df:29:6c:74:aa:03:02:26:87:c9:97:ae:
8f:95:be:f7:74:70:af:9e:80:38:b8:2a:81:ea:9a:
3e:65:ab:2d:31:66:90:01:59:82:99:41:66:a3:ae:
e5:5c:0b:c4:66:a7:b7:83:99:25:e1:c1:3c:e9:59:
a6:ec:27:cb:2a:dc:87:9d:4c:e4:2f:9a:7c:15:0c:
27:03:c4:25:ed:35:09:38:cc:c9:52:9b:df:e6:30:
33:27:79:67:af:ae:ad:62:49:05:d3:ef:55:ce:cd:
83:d7:35:71:1f:51:51:2a:47:d7:5e:e6:10:ae:6b:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:04:72:A6:DF:96:03:14:F2:F5:54:7E:76:09:C2:B5:FC:25:62:4B
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1c:bc:e2:dc:1d:9d:98:6d:cc:d6:b2:44:88:f8:3f:47:16:
ca:e5:06:b8:cd:a5:52:54:eb:c8:62:75:e2:0f:fd:d9:ef:94:
18:33:43:92:19:22:71:53:ab:da:6c:47:38:41:2a:61:3c:f4:
43:14:49:1e:05:b7:94:9e:c6:4f:b0:ec:5b:16:ee:69:1e:07:
13:f8:92:bb:b8:c3:d7:d8:75:f1:30:c7:b4:09:67:ea:60:31:
0a:ac:e9:1a:de:b1:6e:f5:65:55:b8:9a:da:e3:1c:7c:d3:ce:
95:ca:23:5e:bf:89:72:fe:9a:5d:59:f9:03:9c:0a:b0:39:ad:
9c:db:00:2e:a5:a2:54:52:54:c8:43:a6:ee:a3:83:90:21:87:
ef:d7:a3:c4:c0:99:e7:6d:05:b4:7a:19:77:f4:cd:3a:5d:3e:
f9:c4:f6:e3:98:e6:6d:1c:f2:f4:9b:47:bb:2a:54:cd:1e:fc:
ba:0e:91:34:20:67:c0:4b:cc:6e:e9:cc:46:62:5d:0b:b9:5d:
c0:33:5c:5a:c3:26:d3:30:7e:ec:14:ba:3b:b2:12:4a:59:67:
e1:16:67:92:c5:99:45:95:a1:82:fe:47:0a:db:e6:87:43:b4:
9a:0c:55:c9:a3:3b:60:51:14:a3:54:ee:ef:0f:eb:79:da:9b:
e4:a5:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:41 2025 by rpki-client