Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File: ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier: hfbjiqDVRUFJepOtGrLigJo4cNOFyzP+mG7MSSPUbpw=
Subject key identifier: 96:41:AC:F7:C4:5A:73:31:11:0A:22:4E:21:D7:F2:9C:B5:47:58:AB
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer: /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial: 019A72936396ED41609C73944CC38E20BBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: e-gDJNXzm0Ybkz_ors_9mzoknFc.roa (hash: EmVgkp+dxUqbi6FSU/qMEIRuJJb2TeTwsYYhWoEauko=)
2: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (hash: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=)
3: mEEdwwEWwRFuOQjXEE0GqAJtD6g.roa (hash: 9OEXXQKo0v2yF8ajNKcSoh8Qu8qa2iGEylM4hM3dSfo=)
4: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: itbOhUxPzIG0i36TYCwtrAwVMXqQnBUwmeVKIOAPKtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:63:96:ed:41:60:9c:73:94:4c:c3:8e:20:bb:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=9641acf7c45a7331110a224e21d7f29cb54758ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:ec:20:66:6a:98:3e:63:77:63:70:ed:1e:
d4:89:f6:17:1a:a5:9c:0c:96:b8:29:f3:a3:2c:65:
6b:d4:e7:54:d7:96:2a:99:25:05:ce:29:31:53:99:
0b:ab:3f:2c:08:4d:59:b2:7c:2b:8d:fd:89:e1:18:
ee:82:e2:91:d4:c6:06:c2:7c:86:fc:0f:b9:64:9c:
4c:10:c7:32:09:ea:31:15:be:4c:63:82:ea:8c:c5:
ea:d5:38:eb:fb:31:c4:37:a5:3d:24:71:69:15:51:
a7:7b:9a:91:e0:c2:36:6c:6e:75:70:9f:5d:b7:06:
31:58:5e:96:27:4c:62:4c:95:bf:49:95:23:a7:e3:
2f:3c:e9:24:a7:f9:ea:76:21:6b:09:77:6b:56:db:
9f:e1:63:3c:a1:c5:2a:61:1f:ba:03:36:5e:ce:1f:
a6:43:3e:0f:3a:66:82:1c:3a:af:3c:54:b8:90:6b:
d9:ef:6b:0e:31:d4:c0:76:81:36:c0:cc:db:23:5f:
99:a1:7b:8c:c8:f8:43:db:73:37:fc:a0:39:51:29:
be:3c:f5:5f:69:c8:b0:f3:04:3f:ff:9e:45:77:58:
79:5d:d1:a6:22:dd:3e:26:3c:b6:62:80:8d:3a:74:
79:4f:1d:00:19:2e:56:75:2b:fe:d2:6f:03:f9:14:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:41:AC:F7:C4:5A:73:31:11:0A:22:4E:21:D7:F2:9C:B5:47:58:AB
X509v3 Authority Key Identifier:
keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2b:cc:b7:6f:54:14:b2:d1:24:90:93:26:f9:6f:2a:9d:2b:
2a:2f:81:65:60:aa:a3:5f:dc:b6:89:9e:1a:b2:b0:04:96:67:
ba:a2:b2:3e:e9:7b:6f:9f:e8:de:2e:d2:df:1d:fe:5b:a3:c2:
31:2c:08:f5:5c:86:a9:bd:8e:f6:73:2b:cd:f8:c6:41:9a:10:
ca:85:f7:05:8d:37:ce:70:e7:6d:ad:bb:65:5c:32:88:6e:93:
17:6f:fc:7c:bf:17:f4:49:e0:8a:d0:9b:30:bf:69:90:5a:05:
a1:a6:c3:de:26:a0:ad:25:dc:ad:b5:9a:b4:a8:dc:ae:83:64:
52:b1:3c:ad:f4:71:9d:ec:fc:b4:b6:c0:11:e6:ac:46:a9:17:
0b:9d:b9:2e:82:52:07:43:1b:9c:b2:cf:04:e3:6a:38:e7:f2:
e6:12:bc:0e:98:5b:80:22:c9:19:97:80:c1:c5:67:56:5a:37:
e5:47:e0:f8:5d:16:ef:29:dd:cd:6a:e4:1e:77:22:88:cb:81:
9c:69:aa:5d:0d:0a:3c:18:a0:ee:55:b2:3c:49:92:66:00:19:
2f:56:5f:17:2d:2e:27:f0:a7:0e:59:dc:47:90:91:38:80:96:
3e:5e:53:a9:59:8d:40:61:fd:bb:67:a9:12:22:be:ac:c5:60:
21:a2:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:51 2025 by rpki-client