Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: biNltlnYZSVewWiqwq7y5TP+l2oyP/deuAsbOn4nkVA=
Subject key identifier: 38:25:5B:A2:27:FE:D0:AC:BE:83:38:FE:7D:AF:D2:B5:38:C4:F9:36
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 019A4F6240E670B60834EBE023402ED3980F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 11FC
Signing time: Tue 04 Nov 2025 15:00:30 +0000
Manifest this update: Tue 04 Nov 2025 15:00:30 +0000
Manifest next update: Wed 05 Nov 2025 15:00:30 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: 1zMUvts/bhYLF1PdJkvKodYW8tJGgUZq3V4xZTTExUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:40:e6:70:b6:08:34:eb:e0:23:40:2e:d3:98:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Nov 4 15:00:30 2025 GMT
Not After : Nov 5 15:00:30 2025 GMT
Subject: CN=38255ba227fed0acbe8338fe7dafd2b538c4f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:f4:e6:77:59:2d:c5:21:ae:91:ac:58:03:
5b:7d:23:9f:95:af:b1:fa:b7:28:8f:aa:df:49:30:
d3:07:20:62:66:9c:bc:98:7c:37:4e:03:c0:d5:46:
6c:91:50:11:6b:75:f5:22:5c:d8:f8:9d:c1:a4:e8:
85:7d:74:1d:e0:f1:e7:7e:d9:72:d0:d2:0e:b5:64:
c0:c1:d2:f8:2b:e2:89:93:dc:1a:b5:fb:b1:f2:ae:
e8:73:d8:4c:a3:0f:28:68:ea:a9:ed:5f:ba:10:b7:
f0:2b:59:17:c4:60:81:2f:e4:e7:c9:ba:cd:97:6b:
27:08:59:66:05:34:09:78:aa:18:fd:52:2a:f5:75:
05:aa:9a:13:7b:b2:52:6a:38:b3:d5:8d:56:e4:98:
a6:15:4f:7b:cb:51:ef:04:85:c0:25:25:86:bf:6b:
77:59:ac:1e:f5:44:54:39:a5:2f:c1:9c:88:11:94:
18:36:e4:01:45:ce:cb:cb:99:b2:9d:05:da:d6:f0:
3e:e5:53:78:7c:8e:05:97:f4:18:c9:ec:44:a5:b0:
7f:a0:a7:d9:c3:03:91:29:5d:7a:de:f6:20:00:4b:
f6:87:c5:9e:9e:e7:51:ff:a0:f5:42:38:41:b7:d9:
13:8d:71:ed:60:5c:78:54:16:4a:55:b5:85:d8:0c:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:5B:A2:27:FE:D0:AC:BE:83:38:FE:7D:AF:D2:B5:38:C4:F9:36
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:67:f9:21:29:07:8a:7c:e3:f8:83:68:ed:a4:75:cb:ed:85:
bb:a2:55:b6:c2:86:e5:ed:09:c2:93:3a:6a:e5:8c:91:58:6e:
0c:22:cb:54:95:bf:0a:82:8d:7f:93:1c:fc:73:70:77:38:a3:
60:f1:41:81:fd:d4:62:78:49:ad:53:6f:d6:e0:d4:e5:fd:d7:
c6:91:c5:27:43:11:b1:fe:cb:d4:1e:f7:39:07:65:e6:91:f5:
dc:fb:be:47:b4:99:2a:da:9b:d5:fc:f6:d1:a0:37:c8:0b:26:
ad:6d:6c:94:28:b8:45:59:71:ae:7c:a5:0a:6e:58:66:78:1b:
57:d4:8e:dc:28:93:b8:58:08:74:d5:e2:92:d5:3e:e2:1e:45:
41:35:51:47:f7:eb:cd:e1:fc:6a:59:34:97:cf:d3:51:04:51:
66:84:f6:2d:1a:b7:5d:dd:8a:ac:98:18:1b:81:cf:d2:e2:c8:
6d:78:4a:a5:a3:5e:85:fb:0e:03:fa:ea:41:3a:3b:e1:6a:c1:
5c:a4:e0:45:3f:cc:8f:a8:8b:cd:ab:eb:02:42:d6:5b:e7:fd:
6e:9b:93:ad:bd:95:83:49:61:4c:2c:65:cc:11:5e:77:0b:cc:
84:12:f7:c6:6f:1d:8f:8c:2b:cb:8f:3a:dd:31:79:b7:fc:ba:
d9:c7:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:36 2025 by rpki-client