Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: NZ4k17n9EsB3x8TutZiWfR3jcdU4E4tHwTmYT7GOUEk=
Subject key identifier: 73:6A:F3:A1:9A:4B:C1:AF:40:35:FC:D6:CC:FB:61:B1:87:4D:E4:09
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 019A729364E8D91AF255527C6F0D3C887CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: GkbszIxcpsuMka+FuX50lleRSb/OCzgHQj4RAawz/Co=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:64:e8:d9:1a:f2:55:52:7c:6f:0d:3c:88:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=736af3a19a4bc1af4035fcd6ccfb61b1874de409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:a7:1f:c1:12:9c:b3:01:4d:7c:f8:f4:89:
d2:de:74:10:87:05:e3:49:3a:35:84:55:25:18:38:
16:5c:8f:52:b0:2f:f3:7a:c6:51:f8:ff:f0:5d:7f:
98:0a:7c:2c:ef:c7:62:f4:90:5b:f8:56:5a:43:73:
ab:66:f1:1d:f0:6a:ec:56:bb:ea:7b:d1:6e:e6:81:
a7:09:71:a8:e0:f4:80:45:5c:2a:96:56:f4:fd:cc:
75:b4:7d:3a:af:89:a2:a3:49:12:a3:31:92:1b:2f:
09:d3:2c:1c:53:78:29:d4:73:53:d4:96:29:39:c8:
22:a9:45:83:1b:81:1a:55:95:69:7b:0a:16:e2:cb:
37:bb:e0:1f:12:03:56:7d:c6:b7:37:9d:be:76:51:
20:7e:a7:cc:d8:db:a0:bb:1c:af:d6:fb:b3:36:b8:
13:e9:5c:cb:d3:8b:5e:40:f7:6f:94:cd:f3:29:e1:
b7:0d:52:be:61:29:61:19:04:37:62:c6:d5:b7:46:
22:57:ee:5d:95:18:11:3c:60:2b:a0:64:f4:5a:64:
eb:ef:7a:f1:bd:71:17:d6:93:eb:7d:d7:64:d2:88:
a1:88:1d:0b:5f:70:8a:d8:68:6c:93:b7:51:0f:a1:
43:fa:2d:47:d0:59:af:0c:f6:38:54:32:c2:5e:38:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6A:F3:A1:9A:4B:C1:AF:40:35:FC:D6:CC:FB:61:B1:87:4D:E4:09
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dc:3f:35:0f:34:cd:0d:4f:a5:42:b4:5e:ed:76:94:a2:3d:
db:ea:3c:0a:a8:9a:27:77:f4:cd:51:63:55:65:25:f3:48:e3:
ae:2b:e1:9e:b4:ef:45:82:c0:62:74:ff:92:d8:f2:42:f7:3e:
1f:81:00:d1:ed:31:17:65:10:89:52:45:88:ef:c5:f2:5c:af:
98:2f:63:01:c1:6a:f1:30:78:b3:fd:5c:a7:ec:b7:44:23:54:
67:da:6d:f5:c9:c1:51:c2:25:00:eb:ba:13:8f:e3:84:af:61:
50:e2:bf:8f:15:58:af:5b:72:67:1e:65:9f:37:af:29:17:30:
5f:61:46:18:1e:79:1a:2b:19:56:0a:a8:75:94:f1:6a:da:83:
80:44:34:19:75:4c:61:22:c6:3e:f9:67:9e:ce:ed:67:74:f5:
69:ed:7c:ed:a5:d4:3b:68:de:0a:79:df:37:2e:44:ee:d9:49:
da:5e:72:fa:0e:f5:f8:b6:2a:86:e0:11:9b:d6:cd:db:02:36:
8a:62:97:3f:11:ae:47:0f:7b:e8:98:3a:32:10:66:57:83:30:
19:f5:e7:9f:a3:e4:5d:b3:04:76:26:62:c0:d7:b3:6c:04:f0:
98:2e:4f:29:6a:58:0c:51:d6:28:1e:12:93:24:be:92:e3:59:
5a:c7:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:44:50 2025 by rpki-client