Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
File: oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft (raw, json)
Hash identifier: 0Pt23uZSIKBH8CqSMycVKINEYfhf1wSRIhwKAG8Lw6o=
Subject key identifier: 4B:9C:55:B5:19:4D:D0:79:AF:65:60:3F:19:1C:33:E0:F7:BC:F1:EE
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 019A21094109BF1BB0BD2BDD6BDF1E518EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
Manifest number: 1341
Signing time: Sun 26 Oct 2025 15:00:45 +0000
Manifest this update: Sun 26 Oct 2025 15:00:45 +0000
Manifest next update: Mon 27 Oct 2025 15:00:45 +0000
Files and hashes: 1: cGnnbkiVLX_2V8eckMDBKTSh5es.roa (hash: 17Bbtx++8vEIOl6usyCHj+Kebb1Ac8VgiDnBmWVz9UM=)
2: oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl (hash: JYmDCrtHXYy8nt3cK12FqLkPhkJCde0P+nEtZIV/ttQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:41:09:bf:1b:b0:bd:2b:dd:6b:df:1e:51:8e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Oct 26 15:00:45 2025 GMT
Not After : Oct 27 15:00:45 2025 GMT
Subject: CN=4b9c55b5194dd079af65603f191c33e0f7bcf1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:67:6c:cb:26:c0:43:0f:87:e7:e4:66:f2:
13:f2:a2:eb:a0:f6:9c:23:5e:c5:9b:80:57:64:fc:
7e:62:ba:14:ef:34:e7:0b:7a:17:9c:83:71:eb:99:
cd:63:b1:6f:b4:37:ec:ff:89:04:ad:56:bb:67:3b:
02:23:4e:0c:06:e1:33:8e:05:f0:1b:d9:fc:87:28:
ea:99:40:9c:0f:49:ff:46:c5:09:a3:f6:0c:f0:ff:
c5:35:a6:b2:1e:34:61:06:28:ad:3b:9c:ae:42:e0:
4d:9a:03:f5:c5:db:c1:33:68:10:67:cb:ff:8c:69:
41:f0:f4:1f:95:30:1a:85:16:b7:01:56:9e:e7:48:
df:3e:b1:7f:71:e6:55:43:72:48:dc:9a:45:06:9b:
9e:eb:b6:82:da:25:26:4b:3d:2f:a3:f0:ae:0b:98:
4f:98:96:4c:5b:f6:bb:5c:f3:d8:cf:aa:63:3e:9b:
4b:73:ad:b2:2d:f1:29:db:37:39:a4:21:2f:be:8f:
ff:be:7c:43:e5:4d:57:ef:25:54:3b:c8:73:48:ea:
80:7b:4b:30:7d:34:dc:92:48:f1:72:0a:6d:df:53:
fe:a7:f8:4d:5b:d5:df:3e:e4:a9:57:19:8b:89:d1:
90:d6:c9:d9:25:58:c5:e5:bf:90:0a:61:e9:82:1a:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:55:B5:19:4D:D0:79:AF:65:60:3F:19:1C:33:E0:F7:BC:F1:EE
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:19:ff:fc:8b:b4:62:12:6d:1a:d6:2a:d9:89:83:aa:88:a8:
7c:5a:77:1e:11:d3:ae:97:62:57:8a:b5:ed:a9:89:b2:52:3f:
71:2b:79:ed:06:5d:f3:3f:fb:ae:02:b9:1a:26:21:df:62:56:
6f:80:d2:3b:50:31:bf:0a:76:b7:f3:67:98:34:d2:57:db:80:
60:94:da:0b:8a:4e:f2:4d:4d:57:7d:82:4b:39:27:63:c4:ba:
37:88:4c:64:26:92:e2:40:c4:5b:db:1d:da:75:2a:89:c1:85:
3c:cb:ee:c9:96:8a:d1:2f:61:00:ce:c6:83:bc:53:e2:87:fb:
67:fa:51:80:a6:66:ba:f9:40:28:99:47:76:eb:41:f5:6c:33:
ee:0f:b9:56:ec:a9:0a:53:de:3a:b1:e5:4d:c0:f7:fb:c1:5d:
9b:2c:25:0a:50:cf:62:36:06:2e:e1:5b:bd:94:f3:09:45:cf:
a8:b3:fd:de:be:7b:f9:45:ae:94:03:e1:cb:53:e2:8d:ad:79:
a7:80:7b:8c:75:f3:7a:10:3f:03:a2:98:aa:7c:fe:ba:ff:df:
ca:97:cc:f1:0c:ef:61:d3:cf:b4:69:5b:f3:29:fb:19:94:1f:
b4:34:22:04:35:8e:4a:c2:98:de:93:46:14:cd:40:13:67:de:
fb:d3:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:31 2025 by rpki-client