Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: pRYtv/2+3mjAR4lAbZsRC8lvN7bcNHghWIdJPfVyIZI=
Subject key identifier: A0:B0:00:AE:E6:97:FC:DC:11:9F:FC:68:88:D7:B6:B8:80:72:28:9E
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 019A71B7E544BC3C6F4763437395017EA7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0BB0
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: bcgHeTecNhcHR9QWO6gmvpmmI5c.roa (hash: EV6/wlUYGCbS7xEazmx8eI5Bar/BgAFt51P9o3UlOuQ=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: Ap2qIcJw9FvoaYdPdn743uyzyTtPQkA8aoQW32H+4KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e5:44:bc:3c:6f:47:63:43:73:95:01:7e:a7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=a0b000aee697fcdc119ffc6888d7b6b88072289e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:16:9d:fd:4b:de:46:b7:6f:60:ff:63:9b:
35:cd:b5:69:65:3c:22:79:01:07:d3:2d:10:34:cd:
03:1d:a2:14:59:45:07:f5:0c:75:b0:95:13:66:6d:
c9:f4:a5:2a:a2:0f:35:f4:0b:4e:fe:10:3e:fa:63:
08:52:f4:00:6e:6e:d8:52:9e:45:29:53:88:54:7e:
f7:ca:8a:61:db:ec:0e:1d:05:1d:e0:08:44:4f:1e:
13:02:e0:2d:df:77:21:89:da:95:02:c3:e3:75:4b:
85:04:ee:a1:35:0f:1d:b3:5a:00:55:2d:c2:17:2d:
03:5e:d0:d2:ef:0a:3b:09:0d:5e:f5:46:da:e3:32:
ad:57:cd:1b:93:2c:a8:8c:08:f2:34:8b:9f:49:2d:
50:34:45:fb:3e:0a:df:e2:66:6e:02:73:32:f8:b6:
d4:7a:10:c8:4a:59:1a:f6:7b:e5:f5:67:38:e9:84:
80:9e:b6:d7:83:7b:e3:a9:ac:b8:47:76:a7:5a:4b:
e7:78:5e:29:ee:dd:82:97:43:e9:04:48:1c:c0:25:
82:2b:e6:d2:a5:17:a9:ef:8e:58:53:2b:cc:f9:33:
fc:bd:d2:07:6f:c9:63:ab:91:10:65:87:37:02:0a:
84:a8:84:10:7d:24:08:5a:dc:b3:01:8f:c0:13:f2:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:00:AE:E6:97:FC:DC:11:9F:FC:68:88:D7:B6:B8:80:72:28:9E
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0e:4e:25:8d:59:8c:3e:86:58:cc:f1:e5:a7:4e:18:f5:93:
2a:ec:c5:c4:67:7f:ce:ee:cd:7b:96:62:8c:3e:76:ef:3f:3c:
1c:30:da:71:98:bd:7d:30:00:e9:41:60:96:e5:23:e9:c5:a9:
ae:df:4c:2d:01:de:0b:2c:5d:fe:dd:6f:d6:ff:bf:b1:27:fa:
a6:ea:4b:bb:53:ff:0f:6e:8c:bb:61:f8:95:db:45:35:5f:9c:
a2:c3:18:4e:f9:e4:d7:da:06:30:46:cb:dc:40:32:55:a8:13:
b0:0f:ef:df:9b:03:ed:27:7f:6e:f0:ba:e4:19:34:c7:17:50:
89:87:be:9f:06:02:d2:bf:9c:a1:58:99:30:59:e3:eb:d1:f3:
08:36:f1:62:25:bf:84:7e:96:be:b5:eb:db:80:f6:a9:07:44:
dc:48:ce:e0:5f:5d:4e:75:e7:b0:78:92:fc:89:b8:dc:19:5c:
6e:39:75:21:56:d4:18:7d:03:3c:68:e5:d2:9c:e8:fa:46:3c:
dd:e0:18:8d:5d:43:27:c1:c4:35:c5:c0:52:d0:61:fd:b8:f7:
b2:2f:ef:0d:94:0d:45:54:0b:8d:4f:b2:c5:05:fe:64:fd:cb:
d8:6e:d1:b3:39:bd:f7:57:d2:70:5f:2f:cf:c5:ca:00:dd:e6:
a1:f3:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:00 2025 by rpki-client