Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier: zoE2n0N3nGhPMnbkYHbZIdMAmCe4G8kWX5w166HLqmI=
Subject key identifier: 2A:85:F7:8F:1F:2B:32:B9:F5:6C:A6:13:C1:38:AB:5C:A3:B4:E6:55
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 019A3EA585FC9B16BCA3C509D8CCEE438881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number: 0AE2
Signing time: Sat 01 Nov 2025 09:00:26 +0000
Manifest this update: Sat 01 Nov 2025 09:00:26 +0000
Manifest next update: Sun 02 Nov 2025 09:00:26 +0000
Files and hashes: 1: 1-PaCd_Y10QJoUUeIrj0GdEbNVLI.roa (hash: j+eLciDjCsp12nQcBR9D7UEF1xqzrRU1gZJQ4tcVOKg=)
2: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
3: eGHMp6XiUZXSvWaQdrxkZKMhkiw.roa (hash: w65T1Q47xszh2JQk5p3/bfyIzCGf7RqoYh4hz/srZNQ=)
4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: IiyMbXTry6gDFbXyjG1PrUug9b+6tjHjTZ//XxWRwwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:a5:85:fc:9b:16:bc:a3:c5:09:d8:cc:ee:43:88:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Nov 1 09:00:26 2025 GMT
Not After : Nov 2 09:00:26 2025 GMT
Subject: CN=2a85f78f1f2b32b9f56ca613c138ab5ca3b4e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:64:bb:8d:47:7f:7a:68:69:58:03:36:15:
1f:00:78:ee:43:be:d0:6a:90:91:68:1f:f6:3c:7e:
d0:a3:94:98:13:40:7a:29:c6:0a:b6:01:24:bc:64:
a0:43:70:1c:51:28:5d:a7:2e:f6:95:3b:37:cd:6b:
d4:b3:43:33:09:61:68:63:02:20:cf:ae:14:6c:98:
2c:0d:bf:c4:c9:4b:9c:37:36:99:a0:dd:54:63:d4:
18:c2:ad:b8:e4:5f:1e:96:2a:50:cf:f2:ea:96:cb:
46:de:36:75:58:97:16:3e:76:f6:9c:7a:80:e5:52:
3d:9c:e5:b4:03:67:af:9c:9c:c8:78:b7:d2:0d:fb:
66:87:13:90:b5:1a:29:e8:4c:7d:53:e3:41:96:c3:
56:e3:f3:35:c5:c9:84:95:40:c0:aa:6f:f6:fd:cc:
d2:27:08:64:0f:42:0d:1b:67:e4:35:89:a8:c6:2f:
cc:54:41:32:40:c7:e6:c4:5c:c8:f7:f5:7f:97:9b:
0b:23:32:05:86:e1:ec:5a:4a:04:b8:7e:cf:36:04:
92:e2:52:ba:e4:45:94:94:73:ea:9e:60:a3:7b:bb:
08:5d:1e:98:76:6d:05:73:58:98:66:33:8e:a9:29:
0d:a1:e5:b0:e4:e5:85:f0:f4:56:f6:eb:79:67:8f:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:F7:8F:1F:2B:32:B9:F5:6C:A6:13:C1:38:AB:5C:A3:B4:E6:55
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:40:50:9e:d3:3c:e5:99:e3:d5:94:bc:a8:de:67:f0:38:df:
4e:b4:ae:eb:9f:87:02:f2:51:ec:5b:c7:76:5e:87:19:db:ec:
74:bd:5b:0e:92:64:bb:e0:d3:b7:45:36:9a:94:6b:f0:f9:b6:
f5:bb:2a:b0:d7:a8:71:05:ad:89:b1:b9:97:b9:22:d4:de:b1:
fd:98:9b:35:10:25:8c:49:87:44:47:ad:e4:f9:f6:af:d8:28:
b1:90:17:b0:32:54:3b:b1:b8:c9:03:42:06:a4:68:c1:d1:30:
a9:55:fa:b6:db:17:43:61:3f:23:71:1f:7b:8d:d1:3c:6c:15:
b2:2c:51:a7:ef:ed:27:4b:02:23:ba:44:9f:52:dc:12:23:b7:
63:9f:6e:5b:84:f6:b5:a2:1e:f3:e1:e1:22:13:56:86:aa:47:
2e:4e:eb:3c:8d:c5:53:07:24:26:5c:96:6d:f3:4b:26:0b:5f:
7c:18:eb:2d:1b:ee:47:67:aa:82:28:a0:c8:cf:a8:34:bd:a6:
86:0a:bd:4c:3f:01:59:93:14:3d:87:fd:3b:34:d1:11:8d:c4:
b1:bb:eb:ab:e1:53:7a:79:ae:a3:ba:50:d7:e0:0a:f2:14:ab:
ae:90:38:e9:0b:c0:26:6e:9e:4d:4e:99:f4:7b:55:5e:c1:e4:
8e:b2:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 18:00:56 2025 by rpki-client