Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: ZPVHrHQsa7OsJfGVd1Bw37c4FoBrbl+DH9xuni2BHoQ=
Subject key identifier: FB:D5:B0:56:50:7B:B1:42:09:7A:88:57:90:89:A2:9F:61:88:DE:0F
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019A4E18B1657E5AD2BA9B2ABB81B9501134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 04D0
Signing time: Tue 04 Nov 2025 09:00:32 +0000
Manifest this update: Tue 04 Nov 2025 09:00:32 +0000
Manifest next update: Wed 05 Nov 2025 09:00:32 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: IQr/aoKEGnFFFTlzeIb53EmUl1Xk/5nLVK/sXundTRc=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b1:65:7e:5a:d2:ba:9b:2a:bb:81:b9:50:11:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Nov 4 09:00:32 2025 GMT
Not After : Nov 5 09:00:32 2025 GMT
Subject: CN=fbd5b056507bb142097a88579089a29f6188de0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:01:d0:12:84:b0:ae:07:47:be:4b:3b:cb:
3a:16:40:3b:8f:4a:c0:d9:87:e5:28:b0:c9:d9:d3:
ce:90:9c:92:d0:76:67:9e:8b:cc:5a:1c:31:c9:0b:
33:b2:fe:7b:a2:a8:da:78:9f:a6:ab:d9:ef:5f:cb:
e2:86:24:32:20:6e:1a:86:e6:97:cb:51:07:b7:1c:
1b:a2:49:0c:16:bc:eb:0f:5c:c4:fd:ff:fc:f4:81:
54:77:60:a3:e5:8f:9c:ff:21:93:13:75:29:e3:2a:
97:6b:1e:2a:c6:e3:0c:f1:d4:fb:9a:60:4c:cd:8f:
20:67:21:e0:a2:54:b3:38:52:8d:9e:d5:c4:4d:4d:
8e:21:17:4b:59:9c:3d:57:2f:73:b5:e7:ed:47:59:
3c:8b:28:07:54:3c:ff:24:14:bd:ed:df:ff:c3:73:
d2:69:ac:a2:0e:d7:39:1c:59:9a:20:1a:5d:11:09:
dc:c5:40:ab:f6:ba:bb:75:dc:57:f4:e5:b7:cd:58:
48:fe:09:47:91:f2:61:36:bb:b3:ca:3c:79:81:59:
d2:85:cd:36:a6:eb:0d:04:5b:56:ab:42:d5:5b:dd:
36:d4:19:89:76:cd:1f:96:c6:b6:4e:72:db:a8:44:
06:84:c3:07:69:35:3c:24:61:5f:97:a2:cd:3d:31:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:B0:56:50:7B:B1:42:09:7A:88:57:90:89:A2:9F:61:88:DE:0F
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:67:35:7f:76:56:22:4d:d9:2b:72:71:fb:67:63:e4:08:
a3:86:ea:94:d7:67:74:fc:7b:64:c6:6b:5c:ea:a5:1a:d2:82:
9b:47:40:36:36:70:06:d0:a1:e3:95:62:ce:f1:73:ac:1c:02:
8c:da:dd:33:f7:ad:9f:4c:5a:be:14:52:4b:87:34:9e:54:cb:
b9:91:db:aa:a8:4f:a9:e6:92:8e:79:55:a6:ed:39:64:60:4b:
44:9f:bb:5f:99:56:7e:2b:05:42:8f:96:ef:1a:4b:ea:8f:ba:
88:7a:af:fc:3d:e8:93:18:c1:43:a6:bc:b5:71:90:bb:23:65:
64:28:cc:7f:0f:71:76:6e:f9:3a:a2:aa:3b:f0:fe:7e:bc:22:
3e:1a:a0:f4:1d:c8:87:81:90:9e:dc:8b:92:f0:57:0b:7f:3c:
42:8d:00:50:53:e6:d0:60:0f:d5:4c:00:79:f1:82:9a:73:31:
8c:74:82:ce:6c:62:10:00:d9:3a:b9:d1:b8:4c:bc:7c:49:5f:
85:8d:ec:4e:57:6b:e7:e8:ed:96:98:bb:b3:b4:e1:25:a6:44:
f3:2c:ae:ea:cb:c8:9c:ab:e3:7a:88:d6:81:7b:32:c9:d4:cd:
74:74:f2:65:71:31:14:86:3e:bc:95:63:8e:ab:c3:30:3a:41:
eb:a4:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:55 2025 by rpki-client