Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: LJpx6ZMGMNojdfCJgrZUapxOJLtBWKIa21q5CBXxfRc=
Subject key identifier: 34:53:D7:74:F4:04:98:1E:BF:70:11:27:2F:EA:DF:3C:A3:C6:87:C9
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 019A7225ABB8A7434B6C843EA4E9439751DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 115D
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: 3UICQUvpsJ4uZSvBRSFpv5dqgJnhGYqTRGuLM5iCLlk=)
2: pO6JOWv_WdU5UYruljyF3xtIEXQ.roa (hash: 6mBeADEPhX3Wn3E6Qd5AZNwAKvX4/dbYe8jgqQoewTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ab:b8:a7:43:4b:6c:84:3e:a4:e9:43:97:51:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=3453d774f404981ebf7011272feadf3ca3c687c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:4e:e4:3c:2a:35:6b:00:5b:b9:a5:01:af:
ad:00:61:1f:86:c0:36:b7:4e:9a:d7:79:82:e9:d2:
5f:a3:55:c6:9f:7e:cc:39:8a:04:30:77:e5:68:1c:
92:f6:e8:4b:16:e1:2d:2c:57:50:e5:52:f9:89:8b:
a9:43:80:31:12:58:da:ae:ba:e4:25:9f:7c:77:6f:
5a:45:81:e8:a4:b8:65:e4:4e:54:8a:43:13:16:59:
1a:af:09:07:10:f5:ca:fe:26:ee:de:0f:43:5e:10:
cc:5a:4e:ca:fa:ed:76:18:91:2a:77:1a:52:23:57:
7a:30:94:ab:00:5e:27:b6:fd:4c:bf:38:8f:f2:79:
02:16:67:ca:1f:d3:7e:4f:e1:a3:58:08:64:e4:87:
7f:24:ac:1c:97:a0:8d:41:16:26:68:ea:57:9c:51:
c8:0a:01:fb:bb:eb:3a:d8:8e:33:b3:27:2a:46:f4:
1c:2c:e3:74:62:e4:13:73:0b:c9:6e:a1:76:e7:5a:
98:cc:83:2b:40:14:06:4d:85:d5:c6:df:02:d0:c1:
61:49:c9:0c:87:9d:87:88:d5:7b:c1:4e:36:8f:02:
77:35:8c:1e:dd:19:89:c2:bd:0b:9f:ea:47:3d:78:
2d:99:ff:dc:b4:e5:c4:3a:ca:00:b4:cc:9f:38:b3:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:53:D7:74:F4:04:98:1E:BF:70:11:27:2F:EA:DF:3C:A3:C6:87:C9
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:50:7e:69:8a:02:1f:a5:67:64:43:71:ea:de:22:f9:bf:12:
31:e7:dc:d5:d2:70:c4:2b:b1:15:17:a8:aa:fd:3b:d9:8f:90:
29:49:d7:e4:04:52:70:97:cb:23:bc:93:3d:88:24:4a:39:b8:
32:8e:b2:08:e9:2e:7a:62:3b:49:cf:2f:db:bd:7c:69:fa:e6:
0f:ee:a4:71:ab:33:98:13:cd:70:7a:84:85:37:23:b3:b3:a2:
76:28:bd:07:76:ae:90:40:99:b1:b3:1c:be:39:a2:46:f8:25:
79:45:50:fa:ba:97:b2:37:dc:4e:1c:9e:bc:bd:5d:5f:ae:c9:
9f:36:d1:61:54:d5:e1:eb:46:77:0d:25:11:bc:35:b4:ab:e1:
c8:57:a7:2e:d2:b8:44:94:d3:ea:c5:92:fc:2c:f6:dc:51:cd:
ec:6e:23:c0:65:8c:17:f0:dc:d8:22:ae:1e:8c:22:cd:e1:52:
ba:29:0b:37:a8:8f:9d:3e:5d:89:73:e9:5a:26:0a:6a:48:40:
64:2c:5f:dc:4b:97:75:a5:98:aa:1f:e9:66:30:66:0b:6c:cb:
af:2f:d5:2d:b1:0b:9f:4c:29:77:0f:93:78:45:af:5f:7b:21:
e4:bf:58:ce:5f:c9:94:b0:f9:76:ff:95:02:23:e4:85:bd:92:
5a:1a:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:09 2025 by rpki-client