Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier: ovn83a7FHindaW9W83F4OBNGZUxx5lastKPKBvoD4Vo=
Subject key identifier: A2:0A:92:A4:D8:00:AC:9E:85:05:3A:26:69:A5:DB:07:A3:FA:4E:39
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 019A72259B750AB8AC134904C5D10EBE3FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number: 0803
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: GzEFY4FMaNIn9ALjdEIyqJJseSE.roa (hash: A0TZx6QvZikNrmKwA+Q10TiJHkrQxZ4XZGZdjheoj80=)
2: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: rHekKUibKmTfR/HjiWguDfhZUQC+rjEN7rg5gN9ADzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9b:75:0a:b8:ac:13:49:04:c5:d1:0e:be:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=a20a92a4d800ac9e85053a2669a5db07a3fa4e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:82:9f:6e:33:d8:ab:de:45:0f:8d:47:7f:
a4:21:e2:be:51:dc:0b:c9:08:32:02:59:85:f6:6b:
a0:47:51:12:8b:4e:f1:bc:0e:e7:e0:32:d8:9f:e7:
85:16:bb:20:b5:d8:26:4f:df:b7:4a:3d:5b:19:63:
d4:c7:fa:5b:cd:b8:08:2d:67:34:e3:2b:b4:de:09:
a9:a7:29:17:0f:60:4f:98:87:37:1d:bf:c2:53:b1:
21:56:65:b8:da:7c:27:a9:cc:41:1f:0e:59:8e:d9:
28:15:aa:fb:cb:dd:ec:58:e2:3a:2c:80:d1:53:2f:
ee:7a:6a:29:ca:2f:51:94:42:b0:5c:ef:3d:1f:0b:
a7:36:a5:5b:16:08:da:f1:4d:b6:16:eb:a6:96:93:
4e:4f:2a:89:20:dc:10:01:b3:08:bc:82:a8:8f:19:
96:fe:96:0b:8c:72:2c:7d:d2:53:dc:70:14:97:e2:
7b:f1:17:a9:3e:5e:1f:f9:41:5a:11:42:1c:bf:f1:
3c:c4:93:c4:ae:f0:3c:c9:1a:d0:ca:8a:0b:92:06:
1c:a6:fb:98:dc:b2:0e:61:44:51:e0:4a:5b:f0:17:
5b:86:15:67:bb:fd:07:36:94:2a:d3:7e:6a:3b:bd:
ad:ea:00:76:f0:a6:9e:e8:25:fd:a7:bb:c3:79:ae:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:92:A4:D8:00:AC:9E:85:05:3A:26:69:A5:DB:07:A3:FA:4E:39
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ee:80:91:4b:75:2f:f7:1a:7e:60:28:ec:57:36:bd:1c:d1:
29:19:62:14:97:c3:91:fc:2e:29:98:6c:d5:8e:84:bf:25:dc:
77:96:d8:7d:3e:0a:e5:84:61:e7:ea:e8:9d:8f:1b:e3:c2:7c:
61:ae:52:44:f3:fb:92:85:c0:3c:ba:f8:43:19:69:57:71:56:
aa:ef:7b:01:ee:de:4c:6a:ad:d0:f4:d7:81:90:b3:c0:d7:59:
d1:14:0d:fe:b6:56:53:5e:2a:94:1d:ba:d5:b1:4e:79:06:d4:
4c:2b:9b:49:1c:ca:c1:70:1f:27:ae:e5:3b:3f:e0:b0:a6:25:
ff:2e:17:b7:6b:45:47:3d:7a:69:21:75:a9:47:ef:5d:9e:fc:
e8:d4:fc:4c:fb:6b:32:6c:5c:2c:32:bf:5d:1c:ef:b8:88:2d:
eb:83:4a:d4:80:8a:bc:25:0b:48:4f:96:a0:a5:c0:44:ce:f6:
5e:92:91:b8:69:c9:37:2e:c8:72:c3:6c:d8:83:60:d1:ff:27:
96:73:f6:b4:2a:5c:2f:5c:bd:54:72:3d:d5:43:c8:ac:7b:bb:
97:a0:8b:cc:6a:77:60:e4:21:64:ca:67:ce:78:f3:40:e2:b7:
d8:e6:0b:5b:8e:97:be:b8:19:01:c8:0a:9f:d5:a7:17:1a:85:
c3:93:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:19 2025 by rpki-client