Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
File: OEhy6BezpF-Y1LFbZd1FK12i1hE.mft (raw, json)
Hash identifier: q80zD3irBPMwtaJtgQx/CB4n4x3+doZBMvBJ/B9p1oU=
Subject key identifier: 80:FE:86:6A:F4:28:F8:3F:6E:2E:9D:FE:6A:62:57:46:A2:3F:16:C9
Authority key identifier: 38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
Certificate issuer: /CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Certificate serial: 019A70A4E6CFB7E7C92BE7895CE30BB82AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 02:00:46 +0000
Manifest this update: Tue 11 Nov 2025 02:00:46 +0000
Manifest next update: Wed 12 Nov 2025 02:00:46 +0000
Files and hashes: 1: OEhy6BezpF-Y1LFbZd1FK12i1hE.crl (hash: OS+AYpKlJVJdYiD7SdFcEF1A90DrEfG9qwCAWPQZK/I=)
2: vMh15nJtc0WhPa3adfD72rfDpjk.roa (hash: k90mC6UYUEFlWPzqOLS92+FcHPT0CjyGgsFnNEcMpl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e6:cf:b7:e7:c9:2b:e7:89:5c:e3:0b:b8:2a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384872e817b3a45f98d4b15b65dd452b5da2d611
Validity
Not Before: Nov 11 02:00:46 2025 GMT
Not After : Nov 12 02:00:46 2025 GMT
Subject: CN=80fe866af428f83f6e2e9dfe6a625746a23f16c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:f4:9c:00:d0:e4:8c:55:ae:ff:01:93:b4:
5b:42:9d:ff:07:25:db:b5:e2:1e:13:b5:3b:6c:b2:
2f:dc:53:77:f3:ad:a4:48:10:12:79:32:90:bf:82:
15:4c:c5:9d:b4:59:9f:5a:7d:3e:df:0f:83:74:53:
1b:28:d8:25:89:d8:45:a0:bb:c1:c8:1b:f9:1f:64:
22:8f:61:6c:88:7b:52:9c:eb:e8:6b:cc:4f:73:65:
98:1f:26:32:0d:b9:e7:a8:50:d1:ae:0f:0f:6b:2d:
42:59:ea:4d:05:82:87:f4:02:61:ad:7a:ec:bd:74:
31:3b:e8:22:01:81:63:29:9d:fd:eb:7a:0f:08:2b:
d9:8f:61:05:8c:be:41:5a:21:5a:a6:06:0d:19:87:
67:83:c2:95:2e:d8:52:53:ff:05:34:4c:03:1a:9b:
09:5e:76:78:4d:8d:cc:79:2c:b4:23:9b:c0:e7:b2:
46:ea:c4:7c:46:49:df:12:bc:c6:d7:41:0b:e2:42:
48:28:cb:48:65:cb:14:da:59:b4:ca:c8:5a:74:48:
9a:5b:9b:f9:57:e2:3d:95:a1:a0:f2:f4:0f:64:c8:
7e:d3:ce:c9:90:bc:b0:2e:f8:c2:9c:c9:a3:10:66:
d0:9e:b2:d4:12:35:1a:26:59:5b:90:3a:9e:27:74:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FE:86:6A:F4:28:F8:3F:6E:2E:9D:FE:6A:62:57:46:A2:3F:16:C9
X509v3 Authority Key Identifier:
keyid:38:48:72:E8:17:B3:A4:5F:98:D4:B1:5B:65:DD:45:2B:5D:A2:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEhy6BezpF-Y1LFbZd1FK12i1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/17e663-eb10-45ed-81f2-bfbe1bc15fc2/1/OEhy6BezpF-Y1LFbZd1FK12i1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a1:15:fb:a4:13:3b:97:13:26:61:81:63:61:cf:33:03:f8:
96:19:7a:8e:75:11:2b:03:c4:d8:0e:f5:51:ec:5c:4c:fa:55:
90:f6:aa:bd:f6:63:55:9f:83:d2:c8:73:54:a5:dd:68:19:7a:
84:47:3d:3d:b8:48:06:85:8b:47:76:f1:aa:7b:4f:af:d6:72:
76:9d:dd:0f:b0:3d:d6:24:54:8c:91:c2:4d:2b:e2:8e:2c:96:
6c:5d:58:f9:bc:1b:3f:e4:5b:05:c8:05:54:47:31:d9:f9:fb:
92:c7:ba:f9:2b:13:a5:c1:48:d5:bb:10:dd:10:e9:72:ed:b1:
ce:ef:e8:d2:87:f7:23:a5:8d:4c:a2:4c:d8:f0:26:d0:48:49:
f0:dd:e4:20:79:2c:26:77:67:67:da:b4:18:59:e6:9b:f1:d5:
1b:ea:14:49:00:8e:c1:4b:26:fe:ce:9c:b6:4d:93:3d:ac:df:
26:cf:5b:c1:63:fa:5d:2e:89:37:0f:a2:8c:b1:ef:e9:4c:2e:
bb:65:f3:d2:97:84:c8:bf:37:8d:b5:9c:1a:e1:21:06:31:0f:
e2:2c:d8:b0:0f:31:e7:6b:4d:42:2c:4f:ab:15:47:55:5a:4b:
df:7d:88:46:c9:59:2a:c3:83:79:68:30:23:16:01:e6:22:b5:
c8:9d:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:15 2025 by rpki-client