Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: /V53pXj8j8IzJekh8T6kLLin/Ud3EmfdTBTwcsb2SX4=
Subject key identifier: 58:BB:E7:98:CE:AA:D4:06:43:2E:B7:D5:E8:DA:02:D7:A4:4F:1D:75
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019A53E3F983AFDCEF71AF5CE7D4BFA776B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0E03
Signing time: Wed 05 Nov 2025 12:00:40 +0000
Manifest this update: Wed 05 Nov 2025 12:00:40 +0000
Manifest next update: Thu 06 Nov 2025 12:00:40 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: QtcHaE2idtrfrux9VEqmbXsnqN3eSsPu0618vSm9pYo=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f9:83:af:dc:ef:71:af:5c:e7:d4:bf:a7:76:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Nov 5 12:00:40 2025 GMT
Not After : Nov 6 12:00:40 2025 GMT
Subject: CN=58bbe798ceaad406432eb7d5e8da02d7a44f1d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:eb:9e:a2:3f:84:35:39:b1:5a:99:c6:02:
d6:fa:b6:8b:ed:1d:59:31:36:d9:d6:b0:6d:a7:7e:
71:1c:02:28:17:cb:fb:ae:c3:d5:38:fe:6b:47:b8:
1c:0d:8a:50:6d:1e:71:1c:6f:0b:7a:90:3d:8e:15:
ca:30:28:6c:0d:f1:9d:15:da:9f:4b:40:b9:d9:51:
aa:83:77:04:f3:2c:e9:f9:98:ff:bb:ae:1b:2e:1b:
d0:f9:5b:aa:f4:8f:f9:30:8c:1d:d7:87:03:62:33:
b3:1c:70:95:e6:04:8a:44:c9:64:cf:56:1a:ca:ee:
a2:e4:5b:a5:6f:7a:9e:76:56:13:83:1d:04:1f:be:
46:bb:88:45:a7:16:5d:94:6b:d0:6a:89:4f:ac:bf:
c4:3b:47:93:6b:34:24:98:53:76:15:2e:19:1c:69:
22:e8:fe:92:22:40:b2:3e:76:fe:d5:93:6e:2a:fe:
67:56:eb:4a:47:16:c6:cf:a1:2f:8f:ac:2c:12:71:
ab:06:c9:97:32:b7:98:4a:02:05:b2:b5:56:a0:da:
35:1a:07:72:b2:b0:45:4a:e7:b5:21:e7:d9:29:06:
10:37:49:15:d1:bd:7f:e1:14:b8:ff:50:e8:b9:00:
7d:14:fa:b2:e2:70:92:c3:7f:3d:01:c6:03:b0:0f:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:E7:98:CE:AA:D4:06:43:2E:B7:D5:E8:DA:02:D7:A4:4F:1D:75
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2a:22:46:bc:de:f1:db:26:0e:3e:eb:5a:2f:26:54:58:7e:
48:84:e0:2d:c0:65:9d:19:e9:62:2d:ef:92:58:6d:b0:98:e0:
2c:c8:d0:6a:06:d0:1e:cc:03:da:2a:18:a6:63:eb:5a:4f:7c:
99:64:d1:32:20:ab:13:6f:7f:33:12:5f:b3:f8:1b:dc:6b:a8:
f2:80:33:0d:2c:a3:19:b1:53:ae:cb:94:57:00:0a:e7:16:52:
64:03:9e:9f:01:39:5a:96:52:a1:eb:b9:5d:c9:80:87:86:d1:
a3:58:f8:3d:36:30:be:e8:94:f6:4e:e6:3e:2b:47:40:f3:ff:
e8:bb:6f:1e:90:ac:2d:a9:d0:c6:3b:71:c9:fb:58:91:b9:c2:
71:00:12:ea:2e:b7:17:f1:e2:1b:85:68:22:cf:17:90:85:61:
ac:d2:c2:45:12:44:4c:48:9a:20:e7:fa:34:8d:23:e2:24:a1:
b1:e5:54:3c:a2:c1:f5:c9:36:98:86:d4:b8:93:db:b1:d2:e9:
fb:d4:d7:36:9e:d7:54:39:1c:5a:b0:84:c6:38:4f:e6:d0:c1:
3a:e2:51:89:75:e5:cc:af:6f:fa:99:02:ca:12:ce:65:46:7d:
20:5e:5c:22:1a:b8:90:88:d1:4a:3a:49:02:6b:7c:df:f1:fd:
00:a7:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:01 2025 by rpki-client