Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: P1kNZjdRi1fylQG3URupZYQRSn/4yLajXLk0/f2rAeg=
Subject key identifier: 19:D3:19:B5:5D:3D:5D:B2:BF:3C:56:EA:AC:58:76:66:9B:78:74:8A
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 019A711327D806E13FCF225643BE7F37BA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:11 +0000
Manifest this update: Tue 11 Nov 2025 04:01:11 +0000
Manifest next update: Wed 12 Nov 2025 04:01:11 +0000
Files and hashes: 1: PKIB0NDZswSqU-d6MbwA9JZfGMk.roa (hash: OewUcdT2Rw4jRK7U2p1ljpQHoVklDy1bcntiR+wXIOw=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: 208kFfMzQjarczV/MeLMsPyNoexj+wxBXRNEsq/+Y7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:27:d8:06:e1:3f:cf:22:56:43:be:7f:37:ba:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Nov 11 04:01:11 2025 GMT
Not After : Nov 12 04:01:11 2025 GMT
Subject: CN=19d319b55d3d5db2bf3c56eaac5876669b78748a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:cd:6f:aa:3a:55:3a:3f:16:99:d4:24:7b:
1b:74:f1:40:5e:36:69:b7:ec:33:07:bf:90:23:a8:
40:dc:24:79:cc:d9:df:be:6b:97:e0:23:a1:b6:4a:
86:b4:33:e3:f5:78:4a:6d:24:6a:a7:42:cb:72:b9:
a5:b0:1a:e6:8a:51:58:0e:24:c1:41:3d:6d:dd:ce:
3e:01:5a:52:f6:aa:52:ad:58:9e:75:3e:af:2e:60:
e5:e5:4e:fb:38:61:9d:39:6f:14:aa:f1:c9:99:e0:
66:7f:be:f7:72:6c:63:33:15:f2:1d:06:9b:cc:f3:
7a:3f:f8:14:55:52:00:ec:db:2b:5b:95:29:55:84:
a1:d1:f0:51:6c:15:df:e6:bf:c2:33:f8:e3:c7:50:
28:15:1c:ad:f4:53:de:52:2f:cb:fe:26:24:f6:1e:
16:39:58:aa:5f:7f:15:61:83:2c:a6:68:56:4f:25:
d8:63:73:f6:e3:fc:33:5e:34:96:16:dc:23:2e:fe:
4a:b3:ce:c1:79:17:3d:cf:bb:a1:f5:ac:8a:66:89:
52:6d:94:b3:ec:3f:de:dc:7b:cb:da:26:49:81:f2:
62:ac:85:4d:32:53:63:ed:fe:7a:60:1f:c7:32:5e:
eb:e4:a6:9d:05:2a:9c:17:8d:0e:90:42:30:32:ca:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D3:19:B5:5D:3D:5D:B2:BF:3C:56:EA:AC:58:76:66:9B:78:74:8A
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a6:7a:7c:a7:b6:44:9c:2a:f7:c8:62:34:52:af:ae:db:14:
62:d7:97:8d:02:1e:98:3a:f8:0c:02:99:ba:b1:7d:76:bd:9e:
16:87:06:f6:3b:fa:c2:18:c7:19:4b:13:fd:1c:04:a8:23:35:
94:85:45:74:60:fd:22:65:f2:d7:2e:d0:d2:84:a7:29:ff:fa:
90:be:4a:2e:a0:f1:9e:96:b6:0b:f9:bf:18:1c:c0:f5:33:70:
ba:1a:fa:68:d4:44:43:0c:68:97:d3:89:b2:ce:d5:a1:95:c8:
d8:50:6f:3c:4f:15:8a:8d:6a:fb:84:d4:59:59:85:dc:d7:22:
38:0e:15:ab:79:14:2d:91:1f:f5:63:56:e4:05:77:cc:db:e3:
56:21:37:5d:43:ab:d6:e8:ea:ca:d4:92:8c:01:1d:be:95:8b:
6a:21:5c:62:30:ac:ab:de:c9:34:71:23:51:84:3b:ac:33:63:
2a:76:f0:9d:76:1b:b4:7c:36:1c:0b:52:a9:38:3a:53:64:e0:
84:ba:4e:77:26:c4:80:11:88:6e:c8:eb:39:1b:4b:d4:90:a7:
b6:70:f6:a3:0d:8d:b4:23:48:a7:f6:87:52:02:bb:be:b0:af:
b2:45:fb:43:5d:87:66:18:ac:ea:22:48:e2:c4:45:26:00:e7:
77:58:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:39 2025 by rpki-client