Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: 2kAxrDqSjA1vVJHtuWSwB12HHijGCR+Cp4Wdf1fNpOM=
Subject key identifier: 8A:16:41:C6:48:41:53:EA:34:8F:C8:65:76:26:3C:06:C7:BD:E1:B4
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 019A5074D5BAED1BE6C64ACA624C29C5A6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 115F
Signing time: Tue 04 Nov 2025 20:00:25 +0000
Manifest this update: Tue 04 Nov 2025 20:00:25 +0000
Manifest next update: Wed 05 Nov 2025 20:00:25 +0000
Files and hashes: 1: CrnwsA95yJmVEXlbmftIErRDbX8.roa (hash: 26F3HVvHxyFlycTNtQI23gW/r6OOmym9z31epdFUdl0=)
2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: 17tyI6VdOd6BCc4q5JFzDrSpUK+yj/L7usTSTUJIDlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d5:ba:ed:1b:e6:c6:4a:ca:62:4c:29:c5:a6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Nov 4 20:00:25 2025 GMT
Not After : Nov 5 20:00:25 2025 GMT
Subject: CN=8a1641c6484153ea348fc86576263c06c7bde1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:31:0a:27:27:09:0d:dd:19:0a:1f:6c:95:
a4:eb:6e:dc:1b:43:c6:a9:89:bb:ee:7b:9c:f2:a9:
be:68:90:b7:ee:89:86:88:9f:97:24:90:cc:bd:d1:
0a:78:01:48:e9:3e:5b:98:b0:ff:9b:fd:c0:8e:f4:
e3:84:7d:5a:bc:ec:b8:96:62:1d:4d:63:73:2d:51:
c8:61:37:5e:66:10:83:75:29:cc:0b:08:af:24:e1:
0f:67:40:97:34:69:0e:aa:ef:aa:0e:b3:ce:8f:23:
58:23:8d:ff:e2:73:70:91:ff:54:9c:cb:31:a7:af:
49:7a:fb:bd:26:9b:13:06:09:60:13:38:d8:86:9d:
f8:7c:12:f1:4e:c2:15:d2:29:1c:56:11:ec:2c:85:
74:3d:49:cc:3c:df:a7:7d:d9:14:9e:da:5f:08:d5:
55:ef:62:02:17:5c:95:19:b3:d8:71:19:79:6b:07:
bb:5b:79:2b:88:39:3d:13:8c:cf:e7:84:89:c2:3d:
06:81:57:50:d5:d1:0f:86:48:de:51:98:51:05:95:
21:b8:8a:82:10:64:a2:13:aa:e3:c5:8e:b3:14:b9:
06:09:44:7c:3b:df:76:f6:8b:fc:84:fa:a3:3e:17:
b5:10:a9:c9:96:10:5e:08:65:05:0e:8e:6f:f2:94:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:41:C6:48:41:53:EA:34:8F:C8:65:76:26:3C:06:C7:BD:E1:B4
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:52:c6:63:ff:a2:f0:55:5d:90:9d:4b:86:eb:f4:69:bd:33:
6c:a5:db:dd:9d:c5:12:dd:54:5f:3f:96:ef:fa:26:52:fe:19:
f6:b2:51:db:a2:1f:94:33:63:16:9d:50:34:58:c4:10:30:7f:
91:01:d4:10:14:f0:0b:81:e9:b3:c1:cd:c1:04:76:8f:47:f6:
8b:fe:71:b9:bd:15:47:a3:42:6d:40:d0:72:67:4f:39:58:94:
27:58:a0:29:08:47:ab:d0:6e:06:90:13:43:e6:36:f2:4c:d5:
01:25:dc:a1:06:d1:32:fc:90:e9:fa:c5:69:e4:a2:a9:e6:ea:
22:1b:a3:c3:33:b6:79:bd:fb:36:06:5d:0d:90:6d:1b:34:18:
d3:fa:40:5d:44:04:c5:07:41:c7:78:f6:ae:97:72:0f:6c:92:
76:d9:09:f9:05:80:89:e7:f1:58:d6:48:d6:c9:13:93:d9:ed:
01:50:80:39:c9:28:de:5c:78:d2:ec:ba:8b:b9:24:b8:4b:47:
00:cc:46:8d:e8:eb:1b:91:a6:d0:d3:82:fb:de:e4:d3:e6:14:
b9:1b:37:e6:cb:f1:5e:32:c2:16:2b:43:d5:a8:31:fe:a6:c0:
7a:79:65:c0:5e:37:28:6e:76:3a:91:1f:ba:41:99:2e:74:16:
1b:16:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:22:58 2025 by rpki-client