Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: pB8vdGLqilHScV/lXXQ5fp3hilFcV6na6VQb3V/tpqE=
Subject key identifier: 66:30:39:82:86:C6:E2:7E:D0:65:E0:22:86:B1:2E:4D:54:E1:74:88
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 019A71EEA0CB5B00F0ED83A06A9AA20EADA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 1284
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: Wrwo75YC2XsTqEKSsDzgp9pwuRHYq7rCeGhpGGV42Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a0:cb:5b:00:f0:ed:83:a0:6a:9a:a2:0e:ad:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=6630398286c6e27ed065e02286b12e4d54e17488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:b9:a9:6d:a0:c6:bb:2b:09:7e:94:0b:aa:
7f:d3:e0:b9:7a:b5:4e:97:ac:72:e4:c5:bb:46:d2:
52:07:04:6b:d0:bc:1f:b7:f7:61:66:66:81:ed:83:
0b:c0:c0:bf:86:62:4c:c3:49:e7:79:eb:56:e5:36:
63:a9:47:04:c2:10:3a:3b:db:4a:bb:14:db:61:d0:
56:e2:92:e1:af:47:26:a8:5a:6c:a5:06:55:f7:53:
70:6f:0c:60:ec:73:48:fe:da:e5:25:1a:80:0b:6a:
3a:37:11:7c:ae:b9:5d:ad:ec:04:1e:f3:87:65:6e:
83:1f:4e:d1:92:f8:5a:d0:46:12:c8:d7:90:95:e4:
ba:be:60:1d:f8:06:32:45:ca:78:28:4f:c0:bb:28:
78:f1:fc:d8:d4:0c:c4:df:98:2c:42:ca:3b:66:16:
c8:42:17:1f:3f:96:7f:1c:aa:70:85:39:74:eb:b4:
af:c5:ae:67:15:7e:07:05:9e:05:2f:4a:29:d5:37:
cf:ba:a2:a3:51:bf:67:66:98:9b:7a:ec:eb:a1:f6:
cb:03:ed:25:a5:95:b1:6a:ee:1f:11:26:36:39:3f:
20:62:cf:da:82:95:59:d9:28:ae:9d:6e:81:9c:43:
23:5d:73:5c:fa:6b:96:a8:4b:61:c6:36:d5:65:37:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:39:82:86:C6:E2:7E:D0:65:E0:22:86:B1:2E:4D:54:E1:74:88
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:a0:e9:8f:b7:f8:fb:33:7a:ca:78:b7:0b:a3:c4:00:d8:
48:03:8e:cd:bc:d4:51:88:25:58:6f:73:af:ad:4a:5e:96:b4:
3d:4a:de:ad:2a:46:b9:fc:fd:3c:42:94:ed:cd:c0:58:7f:e7:
0c:e0:35:e2:fd:b2:51:ce:eb:a4:a3:50:5f:2b:55:18:a0:4f:
75:86:f0:29:97:26:de:60:12:8e:87:e4:9f:1e:39:c1:36:26:
1a:e0:25:eb:17:b0:e5:c8:a6:e3:0f:18:8d:8c:e3:8c:ef:c1:
85:be:6c:af:1c:0d:a6:9e:0b:63:62:f6:d3:e6:e4:10:b4:b9:
88:de:c2:c1:fc:4a:ec:51:2f:61:37:9a:b3:b1:e4:ec:94:6b:
d1:d3:f3:0b:9e:30:c9:2e:a9:43:56:ba:db:d3:3b:89:e8:ec:
42:50:f2:a7:65:a5:90:b2:6d:5e:5f:61:9d:01:65:a7:70:b4:
50:5a:9c:cc:8d:3b:d7:e0:d8:2b:51:6a:ed:51:2f:f2:42:e5:
6e:7b:cd:e1:a9:0c:77:4a:b1:5f:e0:86:14:43:34:81:32:b7:
bd:d3:78:0f:f4:9c:fa:7c:3c:35:fd:87:01:9e:a2:e3:d6:5a:
fe:99:13:1c:08:76:6a:75:8d:14:34:3b:21:5e:7d:58:1e:83:
89:ba:2e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client