Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier: oR44lYKBopBNvlgYAo97pMuBiXiJhJa5wNRgRYzuDh0=
Subject key identifier: 85:B8:DF:60:64:4D:C0:A9:F5:3B:E0:2D:FE:A1:89:FA:BB:79:BA:76
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial: 019A7225EB8F1772D9B487BBEB4EFC7B90C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: Pjmr+peNe510HkokIF8vGQwhs/x2tD4d7OrtuD0059I=)
2: ctA-0p3K0spN-aqa_vSCSuEPIl8.roa (hash: 9zjfwehArRYt152AyBxRUd+hpMMW5KWg3wsX7MAnHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:eb:8f:17:72:d9:b4:87:bb:eb:4e:fc:7b:90:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=85b8df60644dc0a9f53be02dfea189fabb79ba76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:40:5b:bf:57:0a:c6:a3:81:f8:3e:db:1a:
a8:ee:08:50:bd:18:a6:5e:cb:1b:7d:0e:c3:ea:ec:
f2:e5:05:94:66:e5:38:d6:b9:0a:38:35:9d:cd:2c:
04:59:68:47:9d:7c:3b:8e:ab:ac:06:0f:ce:92:50:
23:01:af:11:99:0a:1f:ac:c6:d8:1e:c9:7a:a8:de:
6e:a7:b2:e6:50:b5:00:c0:2d:49:d7:f7:c8:32:17:
08:bd:00:63:32:50:b1:c2:21:ef:5c:f6:79:3d:45:
cc:99:e9:39:f8:9d:c3:47:89:f1:b8:0b:cf:f4:c4:
6f:25:51:23:5b:03:c2:fb:c3:fc:fa:5d:80:1c:22:
d6:fa:5b:0f:ae:33:ad:ec:e4:7d:cb:d6:cd:3b:8e:
2d:e5:b9:f7:9f:50:00:b0:06:96:ff:c1:4c:8a:28:
af:17:a6:e3:f7:24:1a:34:3d:cd:b0:2e:48:6f:22:
6c:0f:64:58:3b:8c:44:cf:e6:96:95:fd:d1:a4:3c:
0e:64:66:68:a7:05:28:61:ac:b7:01:da:20:0b:24:
fb:57:ac:b6:de:c1:91:c3:70:36:88:04:97:ab:f3:
75:8e:ad:85:c4:22:d0:b1:52:6c:63:2d:58:bb:56:
8d:b1:ce:8b:54:cb:42:d0:1e:7f:23:a7:1a:bd:05:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:DF:60:64:4D:C0:A9:F5:3B:E0:2D:FE:A1:89:FA:BB:79:BA:76
X509v3 Authority Key Identifier:
keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ab:ce:e5:0b:67:e1:d3:85:bf:d9:06:b2:2d:9f:b0:00:97:
68:73:33:b6:bf:04:5f:5e:ad:c8:19:db:0a:b4:8f:89:1b:d6:
96:b7:7c:e1:97:91:60:f4:da:69:fc:0a:17:bf:fb:64:c8:cf:
43:f8:cc:48:41:12:8c:30:b2:bc:ee:00:1c:ba:df:f7:86:48:
bb:2e:28:cd:d3:01:5f:99:20:ab:26:c6:09:1a:6f:23:38:e9:
8a:8b:ba:76:0d:0c:93:cc:10:70:82:46:c9:2e:98:18:c4:26:
50:47:d4:a4:fd:80:36:9f:9d:d5:b8:ec:36:c9:01:7f:32:67:
98:1c:06:81:d9:83:52:2a:12:87:90:ff:02:2b:4a:2c:1c:19:
76:f7:f3:3f:c6:17:67:85:5c:24:60:49:20:49:9a:52:b8:c7:
01:d3:35:57:80:dd:d2:f5:df:55:17:ab:05:ed:b8:99:85:59:
0c:c9:34:f0:50:e0:d1:9e:e0:50:99:ac:11:37:da:41:f2:1d:
a9:90:62:19:a0:9e:69:8b:df:e3:94:92:38:17:2c:6f:f8:b6:
0a:52:4b:37:84:60:41:15:70:09:92:ff:e8:63:b7:61:35:b6:
bf:d1:2b:e2:85:df:cb:5e:a7:64:98:3a:ed:01:2c:59:bd:6c:
6d:6e:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:14 2025 by rpki-client