Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
File: oWkKV2UZ54d6ZAis325pu4RyqhU.mft (raw, json)
Hash identifier: mAMye4cqqf6HK0UokmsH4Ep3bSY4LgVOg7nH32E4k9A=
Subject key identifier: B5:3F:02:1A:99:DC:45:D6:9D:FC:94:85:9D:5B:95:78:CB:00:82:74
Authority key identifier: A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
Certificate issuer: /CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Certificate serial: 019A725C785EE897183049A11C1E7178C3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
Manifest number: 0611
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: oWkKV2UZ54d6ZAis325pu4RyqhU.crl (hash: yxeyZf1x7//+g5Yy7j7uglaeQBiFrnAlt3rDQGx2qq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:78:5e:e8:97:18:30:49:a1:1c:1e:71:78:c3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=b53f021a99dc45d69dfc94859d5b9578cb008274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:79:70:7f:29:21:83:0a:29:6d:87:6e:a7:
9b:4e:c0:53:f7:43:f4:0e:35:71:fc:f0:94:36:28:
08:d3:eb:16:61:7e:98:f9:30:04:b3:bb:00:1a:84:
d9:42:d3:54:67:c7:81:74:12:f0:60:a4:d4:32:cf:
ac:65:54:74:55:f1:43:16:e6:f3:a1:b9:1f:d8:a4:
bd:10:2d:60:27:76:10:01:56:7c:5b:c5:a4:64:33:
4a:98:25:04:e0:c8:d1:78:fb:0a:76:a4:a4:ac:98:
14:2c:a0:d1:ec:ed:31:df:b5:3e:ef:42:fd:ca:a5:
40:03:62:0e:cc:74:ae:19:07:36:b4:e1:c9:ae:6e:
cd:90:ed:a6:1c:c5:a6:40:13:0b:b2:ec:33:8c:30:
3c:5a:7a:20:b8:54:3e:bd:05:ac:aa:0a:59:cc:c3:
3d:34:62:90:4a:d2:40:85:7e:7a:d5:b5:09:ea:aa:
16:b3:02:ec:cc:82:45:df:8b:fe:5a:ad:df:00:c0:
1d:26:b2:4d:08:64:10:e4:f4:8b:35:d1:e9:6f:0b:
07:64:37:68:c9:c9:3f:05:7c:a4:4c:74:6e:e1:ab:
c8:b9:f7:2f:56:75:e9:3c:90:c8:09:78:b9:3e:17:
91:66:8b:44:8d:61:5f:c5:3a:3f:8c:be:15:8b:fa:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3F:02:1A:99:DC:45:D6:9D:FC:94:85:9D:5B:95:78:CB:00:82:74
X509v3 Authority Key Identifier:
keyid:A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:03:c0:b6:94:3d:4c:f2:54:d6:5d:16:67:f6:c1:89:6e:15:
49:2b:f9:a9:36:9e:bb:72:f0:ed:aa:90:32:30:d3:f8:32:5d:
68:77:e7:5c:9d:d9:9b:20:fd:1b:62:c0:86:ca:c5:97:34:34:
49:13:53:ff:ee:c7:cb:30:94:d5:4f:2b:1f:bb:b3:13:50:32:
10:84:8c:f6:2c:98:e8:b1:e5:40:d1:35:09:af:a1:33:4d:04:
69:8a:4f:c0:72:f6:57:84:dd:9b:2a:ca:f3:f2:ea:04:67:2f:
6d:e2:5e:13:8f:ae:bb:2c:d3:bf:3f:8d:1e:08:75:24:6e:1b:
47:5f:53:15:64:ba:5d:af:8a:08:a7:f6:a7:31:8e:3d:36:ea:
78:f5:e3:4b:c1:13:ac:c2:74:f2:26:cd:6f:b8:cd:72:45:84:
0a:0f:bb:68:ab:5a:5f:a7:b5:b9:7a:30:58:16:9f:fb:16:7a:
ef:1e:5a:01:fb:64:51:81:72:54:b4:eb:1d:bd:7c:d0:e9:79:
05:be:ec:9b:f2:a8:e8:cd:2e:5a:83:f2:8c:98:68:e2:79:ef:
4e:e0:4a:ef:b9:34:8d:d1:63:5d:8d:6b:e9:85:dc:e3:cb:dc:
3f:f1:f8:c9:c2:6a:6f:17:59:34:44:89:b8:7f:db:1d:e5:8e:
1f:c9:86:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:11 2025 by rpki-client