Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: SR1rkMEjfo7D0Vd0oEv10u7wST9DBr4ui4+kQM0h5G8=
Subject key identifier: F4:8B:62:38:C1:41:6D:E0:61:39:60:13:0F:49:24:02:FC:BF:BE:2C
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 019A522C8342EA29B9A5FF79C93BB8345872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 12E1
Signing time: Wed 05 Nov 2025 04:00:40 +0000
Manifest this update: Wed 05 Nov 2025 04:00:40 +0000
Manifest next update: Thu 06 Nov 2025 04:00:40 +0000
Files and hashes: 1: 1-rpUgw0W3sKSFdW3yshaE1HCCc0.roa (hash: c/Tt5N/pZWiN2mpptC/U9LHYusWW/dCE4lcNMT3U+WE=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: KlE4ilw/Z4woTIbmcMyMbGqnbpPg/dolXNqgotupqTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:83:42:ea:29:b9:a5:ff:79:c9:3b:b8:34:58:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Nov 5 04:00:40 2025 GMT
Not After : Nov 6 04:00:40 2025 GMT
Subject: CN=f48b6238c1416de0613960130f492402fcbfbe2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:36:f4:73:a1:fd:00:30:95:f9:37:90:5c:
50:f7:2d:eb:a2:31:ba:73:b4:db:8e:ee:cb:68:45:
a9:66:80:65:d3:47:4f:fd:1e:5e:90:2a:5d:85:a8:
87:59:c6:66:7c:af:da:48:5b:23:41:3f:8c:45:01:
99:b7:f7:bd:17:5c:e3:c7:6c:f4:9c:63:7f:52:0b:
eb:af:dd:4d:03:73:39:e0:f9:8e:e5:d1:be:58:35:
79:bf:8b:c4:83:ac:3d:1a:f4:72:d3:28:74:9b:c2:
be:67:90:07:a9:7e:3a:b1:e3:0a:a1:73:58:ea:07:
e9:2a:81:7d:97:ae:8a:22:32:14:d3:c1:00:82:0c:
89:4e:d1:48:dc:27:18:df:a2:95:35:9d:2f:11:23:
dd:54:49:24:56:e8:de:dd:10:d1:de:07:12:b3:a2:
fa:6e:d5:47:18:2f:a8:c5:fa:09:17:e8:e4:a1:24:
ce:7a:6f:b9:c9:49:ea:65:36:e9:d5:23:4c:b2:be:
0b:b2:c5:18:5a:0f:38:c9:56:39:f0:11:b2:76:ad:
84:45:d3:31:7f:05:d1:31:43:e2:43:a9:11:9e:97:
28:6d:06:31:de:be:49:67:6e:d5:3d:64:9a:b4:14:
57:a5:fd:91:d0:47:c0:90:dc:8a:5d:88:7f:a4:24:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8B:62:38:C1:41:6D:E0:61:39:60:13:0F:49:24:02:FC:BF:BE:2C
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e0:75:59:0a:8e:54:95:17:c7:53:cc:b0:85:9f:00:f9:e2:
57:5e:5c:0a:63:6b:b2:18:4e:21:fc:f8:0d:ab:89:85:96:9e:
5a:b5:da:11:ec:52:c9:cb:b8:46:1c:19:83:66:3b:32:4c:f0:
5e:17:7d:9c:86:64:9c:0f:b9:8f:32:da:58:37:02:7b:db:da:
ef:ad:cd:b8:14:15:0b:ab:d7:d6:75:5d:0b:a8:da:30:c6:08:
12:09:71:07:f4:36:9b:ff:d4:ba:3a:51:80:b2:a2:b0:cc:9c:
5c:2c:5d:75:c3:8b:45:bc:1d:9c:85:f7:82:18:f3:2b:e2:b5:
bc:c5:08:db:5e:88:5f:0e:e4:7a:79:d1:dd:14:a4:dc:66:c5:
d2:ee:09:6f:87:01:a6:58:c2:8e:5d:c6:33:8f:58:ca:b0:56:
01:70:3a:ce:14:d2:91:b9:bb:d0:40:d9:da:d5:38:44:b5:a6:
00:1f:f7:d8:88:c4:d7:fd:a7:1e:4a:c0:47:fd:7d:93:06:ff:
ad:a9:91:33:72:44:96:a9:e3:63:95:c4:99:6c:cf:94:45:4e:
33:73:b7:80:a4:9c:78:55:b3:58:26:05:79:4e:38:db:cf:b8:
a1:b1:c9:6c:5a:a0:1f:26:70:2c:dc:13:fe:98:0b:98:72:4d:
86:69:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:02 2025 by rpki-client