Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
File: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft (raw, json)
Hash identifier: Lw3CuQnsoMBKWDGkZfGjLAMuj1A/XwAKJ8cAzSNNY3s=
Subject key identifier: E5:69:BB:7C:AA:CA:B6:C0:47:29:6F:AC:E2:6B:8E:82:37:53:FB:37
Authority key identifier: A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
Certificate issuer: /CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Certificate serial: 019A503DA8D3DEC32F55C918939F0610AA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
Manifest number: 062D
Signing time: Tue 04 Nov 2025 19:00:09 +0000
Manifest this update: Tue 04 Nov 2025 19:00:09 +0000
Manifest next update: Wed 05 Nov 2025 19:00:09 +0000
Files and hashes: 1: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl (hash: NXtGfW2kP2FYuzPmql+unL9X2uXa9KSTezs7DRHvq7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a8:d3:de:c3:2f:55:c9:18:93:9f:06:10:aa:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Validity
Not Before: Nov 4 19:00:09 2025 GMT
Not After : Nov 5 19:00:09 2025 GMT
Subject: CN=e569bb7caacab6c047296face26b8e823753fb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:e8:f7:6c:bb:cb:79:7b:46:aa:73:bd:36:
33:f3:36:29:2f:18:dc:0c:24:2a:65:f8:bd:14:c1:
7e:21:c5:17:96:e6:d9:0d:61:01:93:b5:f5:75:ad:
8a:f0:c5:d8:83:20:1e:56:1f:5e:ea:71:77:1f:21:
5c:62:1e:17:72:8d:80:fa:b7:57:b2:38:67:f0:05:
2a:62:13:8f:0d:17:a3:c7:ea:2c:20:42:28:7f:4c:
1c:40:6f:ef:c4:e8:ac:46:3b:81:b8:84:a7:d5:a5:
2b:53:c6:21:7b:d1:b6:8f:81:32:bf:46:63:29:aa:
8e:42:43:ea:23:6b:d7:38:33:e5:1f:35:c8:f6:23:
d0:fe:3c:33:8f:3d:5e:1c:23:a5:95:76:43:23:37:
3f:18:9c:83:0d:32:9e:e8:de:4a:48:19:df:16:d6:
54:b1:d9:c1:86:71:7a:09:a1:74:0f:84:de:84:8c:
37:e1:16:dd:58:23:64:00:69:b1:94:89:f2:6b:3b:
38:c3:10:35:d2:58:23:d4:04:c7:ac:7d:a4:c4:bb:
b9:76:c0:d2:0a:52:c1:96:60:9b:27:f2:87:db:d9:
65:3d:a6:83:dc:e7:49:74:ea:de:2b:e5:ed:6e:ff:
e0:6a:b5:41:96:7d:c9:d5:c4:88:50:b6:09:bf:b2:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:69:BB:7C:AA:CA:B6:C0:47:29:6F:AC:E2:6B:8E:82:37:53:FB:37
X509v3 Authority Key Identifier:
keyid:A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a4:63:61:ab:81:b4:9b:67:f2:87:bc:4e:b6:15:a3:49:46:
65:54:c6:0f:51:bc:7e:35:fe:66:33:be:63:fa:f6:33:f1:b2:
5b:41:c4:da:cc:ab:d9:72:85:3f:fc:6b:c9:12:b9:64:34:e9:
df:46:d0:12:85:ff:a0:46:b1:4f:17:6a:23:b4:b1:0f:08:d6:
d3:79:28:5b:1b:c6:51:e3:43:13:00:c2:5f:b2:d2:90:78:45:
c7:bc:a0:b5:51:43:b2:8a:d0:bf:ed:5a:2c:52:ea:f8:ec:a1:
09:e9:bf:b8:55:39:9d:df:f5:b5:91:c5:4e:65:63:5a:ae:47:
9a:0f:06:ce:27:e3:10:47:9e:1c:63:51:5b:bd:c8:62:b1:05:
00:c9:0f:1a:07:f8:87:b1:a3:c6:a0:44:32:d4:30:b1:34:36:
9d:42:cb:19:66:38:59:5f:dd:d2:bd:4c:2e:31:67:b6:63:9f:
73:3f:de:29:db:ca:4e:98:24:73:0c:60:70:85:14:3a:1c:82:
56:bc:31:28:8f:cd:7b:33:50:e3:5a:ea:32:be:eb:ce:27:af:
81:8d:4b:6c:7c:59:18:f8:a9:69:3e:93:ba:24:e4:f1:f7:07:
a9:ef:fb:12:62:cb:22:2e:4f:be:2f:e2:27:07:1c:e6:8e:cd:
d7:66:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:38 2025 by rpki-client