Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: tXE2aJTVdwLau6v2fmNC84qCc1eNXUCEgSrl+ayUozs=
Subject key identifier: 15:8C:71:E0:DC:58:83:32:42:10:18:C4:07:65:AC:81:2E:6E:30:8A
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 019A70DC334DC45EC078573D06FE5B4B338D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 10E6
Signing time: Tue 11 Nov 2025 03:01:10 +0000
Manifest this update: Tue 11 Nov 2025 03:01:10 +0000
Manifest next update: Wed 12 Nov 2025 03:01:10 +0000
Files and hashes: 1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: Jn4e1cka3f80P39TMtRtp0tEubHCVb+I8azH2yR7gVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:33:4d:c4:5e:c0:78:57:3d:06:fe:5b:4b:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Nov 11 03:01:10 2025 GMT
Not After : Nov 12 03:01:10 2025 GMT
Subject: CN=158c71e0dc588332421018c40765ac812e6e308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:d5:32:83:65:51:1c:8a:08:2c:a1:c5:4f:
38:f5:e6:f4:67:a2:05:82:30:a5:22:69:7f:b2:31:
49:b3:f4:43:1c:21:2f:8c:1e:24:b8:53:e8:50:92:
42:b3:c6:f3:23:14:92:c1:fe:ad:9d:8d:3e:e1:e1:
34:f9:03:97:94:3e:a7:7f:a9:c5:07:12:a4:55:d6:
c4:f1:f2:88:cc:71:5e:82:86:63:8f:98:91:f4:cd:
f9:e3:77:9d:f4:95:8b:6a:85:f7:02:ef:c5:bc:19:
73:3e:96:78:56:9b:1a:e4:08:ee:63:ac:66:ec:73:
e5:02:d0:16:1a:c6:11:7c:b2:b3:8d:c2:a3:5c:af:
16:7a:78:1c:85:44:f8:38:84:be:79:ac:7e:6a:70:
ec:68:9a:ee:7e:a3:d6:d3:e0:b9:cc:1e:48:d1:18:
08:d0:44:5a:f9:44:48:18:31:03:9b:6f:1a:29:ad:
3b:76:58:93:b5:8a:2f:7b:ff:eb:d0:7e:87:e5:f3:
c7:79:ce:42:ca:f3:62:49:b8:80:d0:c6:f1:fa:f4:
71:a0:22:fb:0b:2b:b9:9a:b9:02:c5:e7:02:a9:6f:
53:88:c9:83:d9:df:e4:9e:de:b7:72:9d:6c:27:9b:
36:b2:a4:90:ea:5c:ef:a2:51:85:9c:fc:7d:a8:02:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:71:E0:DC:58:83:32:42:10:18:C4:07:65:AC:81:2E:6E:30:8A
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:85:72:23:23:aa:ab:4f:7f:0c:11:0f:b9:b5:d4:89:95:a0:
16:11:2b:83:70:d7:fa:9e:70:5e:23:81:65:3a:6a:89:1d:2f:
e3:61:0e:10:fd:00:de:5d:43:9c:75:e7:29:74:3c:69:8b:b3:
20:a2:f2:2e:29:ab:38:11:df:af:5b:b4:ed:ce:20:ef:c6:b1:
0a:ec:11:3c:b2:d0:52:25:7a:c5:e6:3f:82:b9:15:69:64:6d:
37:48:60:e0:3d:a4:0c:31:b9:ab:ea:73:3f:c0:44:a0:b6:ff:
81:35:7c:04:cb:16:6d:4f:37:04:9a:3d:b9:f6:71:a5:03:3c:
c1:c5:d5:a7:70:59:52:f6:42:19:b0:d7:74:8d:9b:1f:95:5d:
91:5c:76:ca:f0:85:8b:9d:e2:99:9e:c2:6f:00:f1:bb:2c:31:
5a:7c:d3:02:02:9f:25:67:0a:b7:e5:59:90:74:b9:9a:ea:38:
f1:c8:e3:73:85:82:ff:99:f8:e5:76:ac:83:3e:2b:ef:93:1a:
74:e4:36:4a:e2:c3:17:7c:c0:86:b4:23:51:1d:b0:19:05:44:
9b:0a:27:0c:99:bb:ac:de:3c:3d:23:35:bd:d1:af:69:7e:2a:
7b:fe:7c:4a:0b:25:e8:f0:ab:b3:34:08:cd:88:68:25:2b:0e:
44:e9:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:26 2025 by rpki-client