Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: Nrn8GlQwRA3azxA7g7ULDNxHm62PtNhUQc9q6Vnjyes=
Subject key identifier: 1A:E0:6E:BA:3C:88:17:EB:48:51:EA:8D:FB:2E:69:1A:95:79:B2:AC
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 019A71B8022B2F1EDF92155ABCAA78D76037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0CE8
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: q+QfrEddVeylIywc2xOfIHmvM0zRSNlGDQw96uNRzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:02:2b:2f:1e:df:92:15:5a:bc:aa:78:d7:60:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=1ae06eba3c8817eb4851ea8dfb2e691a9579b2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:fd:56:62:78:30:5c:14:27:31:13:0f:35:
d8:a8:b2:88:f5:fd:d8:3e:95:b6:c8:07:8a:e9:0f:
1f:7f:89:9c:fb:1d:a7:7a:89:a7:26:bd:e3:bc:b4:
b6:cf:05:89:82:d3:4a:19:d0:79:26:2e:2c:9d:65:
91:1f:2d:cc:75:4f:30:11:10:ab:c0:21:76:a1:37:
c8:f4:96:18:9e:11:2a:a5:d1:b5:20:46:b2:25:7c:
9c:16:6b:82:c9:5f:b4:81:d1:60:d6:59:8e:89:2f:
65:f9:1d:b1:75:06:a8:9d:6e:eb:8d:37:32:d9:d9:
05:38:0c:c5:98:b9:62:f9:af:69:e1:d1:9b:e3:a8:
5b:cf:1d:6a:28:c4:72:0a:c7:ad:09:5f:a3:1e:e7:
47:84:85:ab:13:ad:e2:e7:23:15:71:ed:39:38:16:
d4:e7:a5:c7:b8:6a:08:cb:a7:f3:bb:08:c2:f8:fa:
6b:91:c6:83:e2:d5:a0:cd:b8:b5:82:7b:88:91:a7:
50:d3:08:f8:23:66:3e:a3:33:d8:8d:6e:6a:41:5e:
60:5c:65:c3:7e:7a:c1:69:6d:9a:34:9c:b8:bd:c0:
ba:b6:49:50:73:5e:9a:1b:3f:2e:e0:54:96:c1:cd:
7a:7d:cb:38:e2:e8:12:74:62:6b:28:5c:fd:2d:72:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E0:6E:BA:3C:88:17:EB:48:51:EA:8D:FB:2E:69:1A:95:79:B2:AC
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:75:21:1b:cd:67:fb:b5:30:bd:8c:7c:4c:6c:40:9e:3c:c0:
e7:96:d9:aa:ce:8e:d2:7e:05:ad:9f:ed:57:2a:f0:a0:60:33:
f7:85:4b:d0:d0:5e:45:ac:73:b1:3f:eb:f1:b9:23:c3:d6:a2:
f0:0c:0f:3f:7a:3c:b0:68:63:45:7b:f1:8a:fd:f7:fe:44:a6:
71:ba:46:a5:b7:26:2b:25:0d:d8:24:ba:0a:cd:6d:1a:84:70:
bd:9b:7a:0d:df:79:50:a8:6c:6b:42:4e:58:42:4f:88:3f:53:
33:a5:25:be:94:04:f4:b7:0f:3c:91:31:a5:da:25:13:8a:68:
7e:d8:06:87:8d:ed:d7:bb:24:59:0d:fe:fe:34:62:20:6a:27:
20:b7:8b:53:31:09:ed:96:1e:7e:8b:d8:83:72:47:17:27:41:
ab:17:e3:a4:bd:a4:a7:79:5f:28:31:64:41:22:97:31:e5:f2:
ba:9f:15:11:51:b4:50:31:57:d5:1f:b7:2a:a5:66:8a:ab:a9:
16:ad:5c:98:3f:8f:c8:95:9f:a5:8b:43:7f:f6:84:89:09:a4:
3e:ba:4b:3e:a6:46:8f:f9:8d:b4:b8:05:54:2c:a6:b2:f8:39:
24:7f:97:6b:64:a0:e3:bd:4d:2c:61:ca:3e:2c:77:94:ec:a2:
1a:e0:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:43 2025 by rpki-client