Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
File: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft (raw, json)
Hash identifier: YOlvuJD/rTyeyLzpsU6j4E7oRIO8LnTnb641RyluZPM=
Subject key identifier: 74:5A:03:E5:21:8E:07:1E:86:B6:58:7B:11:F7:59:07:EE:48:6A:58
Authority key identifier: A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
Certificate issuer: /CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Certificate serial: 019A72CA1B1B997D77BFF34FB34640C2B687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
Manifest number: 06D8
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: QTH68uA3y3zqOE98H-X27hlKLHg.roa (hash: POyUR/thMzWlT6agcEoWXyNHRaqJHhqSVA15ql0XP6U=)
2: ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl (hash: fbBWt8eXT1GothQI5OlOSScovHbzUFoYcjFX0ncixfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1b:1b:99:7d:77:bf:f3:4f:b3:46:40:c2:b6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e68ae99c24b2073a0ac32803243c3bea1e67ce
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=745a03e5218e071e86b6587b11f75907ee486a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:70:c0:7b:9c:28:bb:a8:83:6a:92:0a:6e:4b:
81:85:e4:9e:30:65:e4:d8:4d:ab:f9:02:e7:15:08:
06:96:b3:43:b3:f1:9c:60:fd:4c:54:2e:6f:3d:1b:
4e:cb:3b:93:63:16:ce:9a:55:dd:cd:e3:0d:1f:3f:
46:8c:98:37:28:35:3f:16:dc:06:87:cb:8a:a5:2b:
0d:39:54:ea:fc:a2:31:91:ea:de:58:31:a2:15:1b:
47:c5:08:c9:5d:15:d6:20:f4:01:8f:9a:a5:3e:7b:
d6:a6:07:7a:ff:aa:97:ae:d1:ed:94:dc:43:a8:c1:
8f:0b:c1:51:b8:41:f2:29:7a:e9:be:84:55:20:d7:
50:bf:a9:e7:2f:fe:8f:31:c1:8d:90:7b:49:72:83:
04:26:75:92:6a:2f:33:27:7d:61:6f:40:7c:23:7b:
0d:df:93:8e:26:69:18:c2:b1:ae:4a:de:aa:aa:26:
6e:b1:72:eb:9f:b5:26:ba:3e:18:66:34:9a:4b:1f:
eb:31:7c:ef:82:0e:68:dc:1b:6e:0d:6c:80:1e:61:
8b:4f:9d:9c:9a:ce:42:03:ff:71:90:78:8b:86:12:
10:c5:81:c4:fb:4e:bd:7e:28:ad:01:e9:99:33:a5:
1a:b3:10:72:bf:4c:60:04:0d:16:20:f7:c9:4b:69:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:03:E5:21:8E:07:1E:86:B6:58:7B:11:F7:59:07:EE:48:6A:58
X509v3 Authority Key Identifier:
keyid:A2:E6:8A:E9:9C:24:B2:07:3A:0A:C3:28:03:24:3C:3B:EA:1E:67:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e84c77-5272-412b-b3fd-c4de67e13eb0/1/ouaK6Zwksgc6CsMoAyQ8O-oeZ84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e7:cd:14:f4:8c:f1:32:c8:e1:fc:f2:d3:12:ee:99:2d:90:
84:a4:83:13:7c:88:35:3f:53:aa:dd:2a:b1:01:17:53:32:ae:
a6:f6:3e:9e:0e:a2:3e:8a:cf:f0:4a:1c:43:3b:8c:69:c5:bc:
d9:3a:c5:f2:98:24:c4:2c:a0:b3:ff:4d:ef:a9:41:7b:98:25:
47:97:22:6b:f8:c7:e2:c3:a2:63:a7:64:30:47:73:38:21:49:
ef:fe:72:61:f1:61:12:e5:69:e3:83:78:69:cf:7b:22:3a:09:
e2:e6:28:58:be:cf:02:20:4d:3a:a8:44:bb:39:73:4d:8d:4e:
27:e0:17:56:b4:b6:9a:7a:a0:6d:d8:4c:9c:e2:04:03:0c:0d:
a6:e9:7b:8f:78:6f:66:2a:04:9d:ff:d4:3f:cc:92:20:6b:1d:
7f:d3:88:29:38:6c:07:59:59:46:b8:53:4f:a7:16:3c:d8:c7:
3e:b1:3b:03:14:f6:b2:fe:4e:fa:23:8f:37:e5:71:ea:d7:4e:
fd:dc:11:ce:be:f8:36:ee:7d:8f:e4:bc:93:9e:d6:ed:c6:95:
78:f8:d4:c0:04:59:e5:6d:d9:37:e9:be:18:47:31:d1:e7:af:
4b:f6:23:13:88:e4:fb:e6:3d:05:b2:7d:0b:c1:1d:cb:ff:ac:
a8:75:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:33 2025 by rpki-client