Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: eS1A0wcDhxJmbSn7ZWv3cPjxS2rui8oZ4AQrFNPPsJ4=
Subject key identifier: 78:AA:47:2B:3C:51:CD:E3:8A:5B:F4:49:FB:9D:4B:93:09:CB:91:2E
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 019A71B828430029F9BB7664C4B1A9B5E0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 0940
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: kPyAk8sI7F6yAvfu31WW5yibTzs0U+RNl19uGc8mRSM=)
2: cNiza7IEiNMNBNBagOrbk4czUFI.roa (hash: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:28:43:00:29:f9:bb:76:64:c4:b1:a9:b5:e0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=78aa472b3c51cde38a5bf449fb9d4b9309cb912e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:20:94:94:14:3e:38:8b:fb:5c:dc:a7:31:
83:cd:c8:7d:28:6e:fd:e0:b8:62:d8:57:ab:86:ab:
1b:e4:49:68:cc:68:81:df:37:56:1e:e3:ff:84:c7:
d6:ca:67:38:84:d3:45:c4:22:5a:d2:d9:15:ba:1f:
49:e8:86:aa:33:92:03:ed:98:fa:20:e3:0b:f2:4d:
43:e3:57:f7:f0:e0:73:26:91:24:c0:50:cd:ba:80:
e0:8b:6a:7c:56:20:92:2c:e1:92:f1:54:05:ca:43:
1b:8a:db:0e:1b:5a:7a:3b:65:2d:27:c1:62:51:89:
76:2b:2a:ae:2a:b6:dc:5c:94:bd:d3:ec:b4:02:3e:
64:b5:08:b8:81:46:23:11:ac:8c:ef:9c:8b:0d:5f:
b2:16:4c:d6:6c:fc:45:13:55:fc:3c:53:f5:03:38:
c2:63:6a:ef:ea:20:a7:0f:2b:37:d0:5d:f4:c4:55:
d3:65:4b:1b:96:53:33:19:ba:7a:f4:19:c8:3a:dc:
47:ea:64:b9:4c:68:d4:98:9b:ae:88:55:d1:37:8c:
16:41:ef:4e:8e:70:78:85:60:b8:3a:06:ff:e2:ec:
2d:b9:cd:40:64:f2:39:89:9d:8d:b8:1f:50:63:9e:
fd:10:5c:5b:55:90:71:88:d3:86:72:c4:b6:8e:6c:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:47:2B:3C:51:CD:E3:8A:5B:F4:49:FB:9D:4B:93:09:CB:91:2E
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cf:02:05:3b:20:ab:fc:dd:3b:21:80:05:ca:73:a0:2c:ef:
aa:26:ac:c0:72:eb:89:d2:5d:02:3d:ba:2a:20:60:c9:a3:77:
83:4a:1e:dc:0d:f3:6b:62:2a:33:57:d9:a0:10:c2:95:2a:6e:
ff:f9:b8:62:6a:3b:1b:24:86:6b:ff:29:ee:e6:0c:2e:b2:dc:
85:0b:89:61:9b:5f:ba:f0:c4:70:dd:ae:98:2a:27:b4:84:45:
e6:2f:50:74:ff:62:24:2b:39:b8:54:db:c8:b8:07:7d:a8:38:
2f:3f:fb:f4:1a:22:49:58:96:9a:d6:73:3c:59:4d:43:e7:f6:
53:24:72:2e:11:5b:2e:cb:15:06:73:dc:aa:f9:83:56:88:d2:
89:0d:a0:3c:49:8c:92:f2:91:82:9d:3b:21:3d:3d:18:bc:b4:
81:9f:3c:df:7c:3d:9b:91:24:c6:0e:a0:e2:4c:51:8f:c3:8e:
44:67:6d:81:dc:71:c5:7c:16:56:01:e0:bf:c5:b6:ab:3d:50:
c7:6d:64:c2:09:f7:bb:df:18:d1:a0:36:d6:ab:75:8d:2a:fc:
76:a5:5c:59:e5:af:14:78:90:d6:05:af:4b:0e:4b:31:f7:43:
c5:9e:c4:80:24:81:07:4f:7f:cd:c3:62:82:e8:44:de:57:8a:
cb:16:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:34 2025 by rpki-client