Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
File: ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json)
Hash identifier: aq/6lwCpsyemsG2ogE3F5/5UUEecF/8TGhjVRZ/8YSM=
Subject key identifier: C5:FC:1B:F5:F1:13:82:A5:79:7B:61:B2:6F:25:04:B8:F6:7E:1A:B9
Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
Certificate issuer: /CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Certificate serial: 019A4E4FF836059C054061D43A23CD8ACEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 10:00:54 +0000
Manifest this update: Tue 04 Nov 2025 10:00:54 +0000
Manifest next update: Wed 05 Nov 2025 10:00:54 +0000
Files and hashes: 1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: NgQwqNs9QJQxqxdmIca+HeIZ6musOE44CUK5umEHmWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f8:36:05:9c:05:40:61:d4:3a:23:cd:8a:ce:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Validity
Not Before: Nov 4 10:00:54 2025 GMT
Not After : Nov 5 10:00:54 2025 GMT
Subject: CN=c5fc1bf5f11382a5797b61b26f2504b8f67e1ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:62:1a:01:27:a7:11:e6:2e:2e:b4:3c:af:
b3:fe:5f:1d:63:71:8b:04:87:ae:95:16:e9:44:cb:
00:bb:bd:9b:02:0c:bb:31:92:83:4e:31:2f:30:c3:
68:bd:6a:6d:cc:03:f6:b4:f7:da:e7:f8:72:27:b1:
e1:c9:2e:4c:0b:f9:81:e6:c0:03:a1:9b:67:6d:e2:
38:e4:67:c3:7e:9b:b8:68:b6:44:1b:06:9a:9f:47:
0a:f2:67:b4:ac:92:53:10:7e:4a:e7:cd:d9:05:0f:
49:9d:7d:90:bf:14:84:f5:68:f9:5e:9e:95:bb:0e:
6c:2b:61:dd:d3:2b:74:07:a3:32:fe:7d:b1:24:ba:
52:10:52:fd:fb:49:9c:5e:0d:bf:7a:8b:4b:af:38:
7e:d8:45:b0:4d:e7:7b:69:ce:52:13:37:be:7e:5f:
af:04:cd:1c:7c:6c:54:bf:44:62:e2:e5:08:5d:fb:
5b:1e:65:31:b4:82:f7:0e:f8:3e:7c:36:67:97:15:
ea:28:f8:f7:77:61:f6:74:f7:49:e2:ec:ac:db:9d:
cf:08:b7:f9:9f:27:c7:aa:99:66:b3:05:ad:0f:9b:
00:23:ae:c4:1e:f8:e7:b5:71:b5:59:3a:73:05:21:
44:86:eb:33:c4:cb:16:8f:d8:6a:5f:1c:53:f9:c9:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FC:1B:F5:F1:13:82:A5:79:7B:61:B2:6F:25:04:B8:F6:7E:1A:B9
X509v3 Authority Key Identifier:
keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b1:ed:27:56:16:81:a6:d3:aa:10:f1:81:aa:6f:dd:f2:f3:
99:f3:d5:a3:0c:52:02:2b:95:36:6d:4e:02:f8:37:99:14:6e:
b4:12:b5:e8:73:00:1b:78:a5:8e:87:0e:fa:35:f7:2c:07:8e:
97:1e:57:cb:0d:63:b1:f9:f8:d3:7a:e2:e0:c6:69:11:c6:44:
ab:96:a5:a9:ac:62:a6:ec:ad:81:1b:03:83:df:d5:e1:bc:9f:
e2:14:70:e7:0b:a2:19:87:51:42:4e:2a:41:68:92:2d:37:00:
d6:e7:2e:da:6a:9f:51:1b:9e:b6:5c:19:37:76:8a:b6:2d:7d:
75:f5:08:6f:47:09:72:68:f9:a1:17:20:22:86:e3:42:7a:46:
23:9f:04:6e:b3:29:e2:8d:33:ce:df:d9:9e:f6:19:9b:33:6c:
9c:4f:a4:56:dd:83:a7:4a:e3:bf:6f:df:40:bd:04:d6:bb:5a:
30:2a:08:7d:85:0f:5e:c3:7e:b0:e3:18:5d:cc:46:17:d9:e8:
e0:39:a8:72:e0:9f:34:ad:21:26:f8:18:3d:85:81:ab:27:13:
12:52:8b:c7:bb:e0:5a:96:cd:30:c0:eb:b1:73:a8:73:47:bd:
17:cf:66:95:b5:b8:d0:f1:74:55:38:9e:d2:5f:62:d6:c9:2b:
aa:83:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:28 2025 by rpki-client