Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
File: OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft (raw, json)
Hash identifier: X/MONzxJ61C6IWzCiz/obVKkTruAkPgrw88vWqgnJuE=
Subject key identifier: F0:22:64:90:19:30:22:CF:D7:AC:02:F6:41:0D:46:37:8F:7A:1A:91
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Certificate issuer: /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial: 019A7225D434E3106358AAE673312B2DF343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:13 +0000
Manifest this update: Tue 11 Nov 2025 09:01:13 +0000
Manifest next update: Wed 12 Nov 2025 09:01:13 +0000
Files and hashes: 1: OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl (hash: AdRgsVyDsEQsV80x5LaPIWpy5QsSJy1XQkdghj7kUrU=)
2: RsGZdVH4KWGZ4OCvnGaMXWv4oaQ.roa (hash: fuepCE8j+3Iy2fKvIdO+nibeCW6A9px2SfnOVg5ddX0=)
3: fYkfiykKnS8ZeTHGRB-UgiJB3G8.roa (hash: r/260Im8uYUydEHgzIf9ZOg2UlQ6MQMr6ct6EbwfvX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d4:34:e3:10:63:58:aa:e6:73:31:2b:2d:f3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Validity
Not Before: Nov 11 09:01:13 2025 GMT
Not After : Nov 12 09:01:13 2025 GMT
Subject: CN=f0226490193022cfd7ac02f6410d46378f7a1a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:86:3d:83:2d:49:41:84:d4:ed:b7:84:cb:
fe:b3:54:2b:e0:e8:53:54:75:46:b4:67:fa:9e:da:
fb:00:c0:be:b3:52:01:6b:6d:26:4d:be:ea:02:5f:
68:56:bc:ee:4d:82:ce:d7:63:9c:92:3a:d2:90:f4:
a3:af:73:08:6e:d0:86:d1:d7:18:2d:fc:92:b7:fb:
3c:1d:8f:56:96:47:15:95:e1:c6:40:13:5b:ef:6d:
ce:24:fd:75:67:26:09:c6:dc:c6:e6:53:89:99:f8:
41:04:74:58:47:8b:25:c5:c4:56:2e:d8:24:41:28:
68:6f:d8:53:66:c7:b5:f6:fe:13:c1:d2:15:53:f6:
ca:9d:3f:c5:4b:b4:2c:fa:29:25:92:fd:a7:0a:02:
d0:af:5d:d0:77:4a:b5:d5:7b:0b:4a:1e:ac:10:70:
a7:45:e6:bd:ea:56:de:42:63:b5:83:5d:6b:85:b7:
d7:7e:0c:ee:cd:40:97:6a:67:1c:41:14:0c:e6:8b:
22:37:23:8d:fc:7a:0f:ae:56:5c:4b:f8:53:8f:91:
7c:3f:21:5d:a4:16:c7:b8:12:4a:fe:42:2c:5c:9a:
27:36:ac:79:a2:5e:98:04:0a:16:95:2e:39:ab:32:
78:14:21:bc:3b:84:49:30:6f:81:8e:31:db:93:be:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:22:64:90:19:30:22:CF:D7:AC:02:F6:41:0D:46:37:8F:7A:1A:91
X509v3 Authority Key Identifier:
keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8b:dd:af:b5:3d:7f:81:21:14:44:cd:78:ab:21:42:55:a4:
59:c9:fc:66:2b:a9:0a:30:c5:b7:68:e7:ac:03:33:4d:be:16:
82:9e:e5:b8:b9:69:ac:4d:9b:c6:c2:cc:d6:7b:ad:49:35:a0:
28:29:05:52:18:5c:f5:bd:07:bd:31:a1:de:32:37:34:fc:2b:
ba:f0:4d:7a:2a:5d:1d:1f:44:b4:08:ac:d3:1c:56:c6:ac:00:
83:26:84:49:0f:36:71:00:a6:4b:a9:df:38:5e:3b:3b:bc:b6:
d9:8f:07:d5:9f:b1:f7:17:96:8a:07:de:13:8f:2c:bb:1d:aa:
81:d8:44:50:81:c2:c5:c5:72:d4:33:ce:3d:23:74:73:dd:fd:
23:72:1e:9f:ee:4f:7b:f8:47:7b:ac:1c:43:7a:0e:5c:aa:bf:
16:f3:87:1c:be:c1:b0:b4:0d:c8:14:6d:3d:2b:62:64:c4:7e:
2c:b7:dd:50:d3:f2:3c:82:78:25:d4:00:8c:40:06:ac:97:3a:
16:0e:1f:a0:2f:92:a9:cc:da:62:9e:8c:f6:d2:f2:14:45:92:
c9:74:ef:d5:c8:ea:3e:40:a8:f2:cf:6a:91:63:fb:9c:90:ff:
1d:60:51:38:de:9f:eb:7a:f0:ac:b1:86:22:2f:b3:8b:b8:f4:
54:88:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:30 2025 by rpki-client