Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: W6oVR8fZl/2jTIzJe7Lab8UiSxMCclbEE4zlLNF2gTk=
Subject key identifier: 24:3D:3A:53:F4:27:01:9F:88:BE:2C:04:E6:54:E6:D1:0E:7A:0F:61
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 019A730186882AE895745F0FF44A2E56CB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 1687
Signing time: Tue 11 Nov 2025 13:01:10 +0000
Manifest this update: Tue 11 Nov 2025 13:01:10 +0000
Manifest next update: Wed 12 Nov 2025 13:01:10 +0000
Files and hashes: 1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: 0PoU/W1+VQZotLu853LZf5L25jKkU5Lx6BwOdSWZzDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:86:88:2a:e8:95:74:5f:0f:f4:4a:2e:56:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: Nov 11 13:01:10 2025 GMT
Not After : Nov 12 13:01:10 2025 GMT
Subject: CN=243d3a53f427019f88be2c04e654e6d10e7a0f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:16:85:cb:c5:60:94:09:3e:3d:c6:b1:ab:
d0:e3:31:0f:a8:dd:9a:ad:21:a9:49:a1:a6:d2:9e:
45:cd:b5:30:2b:d6:2d:eb:45:e9:7e:48:14:45:05:
36:f7:93:1c:5f:d4:20:b7:d3:f6:be:b3:19:f3:cd:
9f:32:8b:86:7b:97:8e:f3:7d:79:42:e5:68:23:19:
77:5c:79:25:3d:ce:67:63:43:b4:5d:ed:07:f0:3c:
d1:4a:e2:87:2a:11:ae:bc:3b:be:20:fb:be:ee:29:
e1:00:3a:6d:ca:8c:07:20:4e:ed:11:38:cf:08:42:
69:f9:26:5d:f1:5a:0c:a9:54:8f:4c:a1:2b:9c:44:
2a:d7:f0:5d:65:68:a7:7b:c6:f8:c0:66:fa:64:d0:
4a:ed:0c:e8:b6:9d:43:8c:9e:d8:6e:ab:f1:61:77:
21:1e:88:ae:eb:ad:56:12:45:4d:6a:3c:3b:30:37:
1e:57:d5:47:c3:5e:bf:63:c0:9f:59:e7:cb:49:92:
28:05:38:97:05:78:2b:15:07:93:6b:9c:9c:53:cf:
f6:7b:e4:7c:14:fc:aa:08:6b:90:b6:a8:79:a5:6d:
3c:df:3b:78:1d:06:b9:95:93:73:3f:e8:96:55:d9:
f2:4b:b1:29:10:d9:fb:b3:08:04:03:d1:29:bc:03:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:3A:53:F4:27:01:9F:88:BE:2C:04:E6:54:E6:D1:0E:7A:0F:61
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c0:61:8b:4d:a1:57:22:5b:7b:d0:e3:76:20:06:48:c8:71:
c3:f4:4e:f3:d6:ed:ae:40:79:03:ed:3c:d6:4c:51:49:d3:cd:
09:96:f3:89:a4:33:8d:3b:69:cb:27:42:aa:fd:63:4f:9d:1b:
4a:b1:42:44:9e:2a:09:60:a0:62:ca:57:71:cc:13:5c:65:33:
96:2d:62:86:a8:d7:46:f8:da:a2:89:65:8f:68:8a:c6:50:99:
3d:22:19:20:d4:f5:be:be:ed:86:fa:c2:81:4e:10:ee:24:4e:
60:9d:48:5a:52:5d:e1:50:f4:0f:4b:dc:14:09:07:67:b0:d1:
48:07:c7:0e:2f:85:4f:7b:0d:a0:a9:e8:f0:ed:35:e9:90:d5:
30:e5:f3:d3:3a:a6:67:8f:b0:c7:5f:95:be:4f:48:71:7f:67:
41:7f:68:87:7b:f1:d9:2d:fb:6b:b8:18:7d:76:f3:7f:28:4e:
ab:01:15:66:4a:16:33:b0:48:08:62:ec:75:d5:09:ea:c5:26:
0e:3e:db:6f:d4:50:9e:2a:d9:d7:01:98:df:a3:2b:a4:67:60:
30:f4:eb:c2:d2:e2:23:f1:bf:19:13:60:3e:1f:3b:12:48:23:
d9:4c:77:67:b7:9d:4f:e1:d4:d8:d8:a7:14:b8:fb:b3:bf:a3:
8d:29:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:13:48 2025 by rpki-client