Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: dtU2lZ/QW97tSIKtgwG6Ri3c4DO0WOxxQ2/jWqEqcQ8=
Subject key identifier: FC:7E:B3:DF:44:C9:9F:D4:57:8F:DD:C2:7A:5B:06:BF:2E:F9:10:25
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 019A706E4D57025B93B1C0A0E3ADA4C69C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 01:01:08 +0000
Manifest this update: Tue 11 Nov 2025 01:01:08 +0000
Manifest next update: Wed 12 Nov 2025 01:01:08 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: VUfIKaJhVnVvbCUGQJ/iQslYs4Wl8pS2K+FfMNTenq0=)
2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:4d:57:02:5b:93:b1:c0:a0:e3:ad:a4:c6:9c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Nov 11 01:01:08 2025 GMT
Not After : Nov 12 01:01:08 2025 GMT
Subject: CN=fc7eb3df44c99fd4578fddc27a5b06bf2ef91025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:ee:84:18:5f:70:8c:20:7e:4d:e5:55:c5:
c5:d6:a4:9f:f8:00:c3:9f:9c:ce:8b:67:10:0b:cd:
5d:cc:c4:22:16:90:74:2c:01:a4:c0:b0:fe:be:76:
48:a5:45:11:df:a6:9b:e4:e4:79:9d:e5:b7:64:52:
1b:e4:e7:d0:03:ee:c6:62:d0:c9:f6:5c:49:8b:40:
e5:88:6b:f8:85:e4:3f:09:d5:ba:11:ac:d1:fd:8c:
20:0b:36:c2:d7:04:f6:f9:97:7b:a8:57:7a:51:d4:
37:cd:4f:03:5d:95:a8:6e:5e:b3:c9:60:d4:a0:b2:
e7:cd:b0:bb:fe:5e:04:fd:b2:d5:6c:23:ce:13:f7:
28:b6:0d:fb:72:5a:2a:e2:d9:48:eb:ea:f8:01:77:
03:b0:61:d4:6d:0a:1b:ee:de:e4:db:2c:32:c7:a2:
58:17:ca:a2:0a:25:6a:3a:78:2c:09:6e:ae:7d:7e:
f0:9a:76:39:a9:3e:6a:2f:b2:db:9f:cf:2d:78:c1:
8a:10:81:38:62:97:fe:88:66:64:de:dc:f9:61:de:
f8:c0:b4:8a:bb:c1:a2:09:08:e4:30:28:43:00:3a:
f4:3a:46:20:f0:ab:f6:4b:54:ed:fa:fb:54:59:06:
16:20:d0:93:9b:f2:62:d6:1b:28:94:a4:af:c8:3c:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7E:B3:DF:44:C9:9F:D4:57:8F:DD:C2:7A:5B:06:BF:2E:F9:10:25
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5b:a7:60:f7:79:8d:9f:27:df:ae:c1:f5:a1:3b:b6:67:f6:
1a:a2:12:f6:e6:77:ee:25:3e:2f:21:c8:82:84:81:16:56:47:
e2:e4:fb:62:35:a0:8c:00:e3:88:6a:d8:39:47:83:f9:4e:e0:
7a:f0:ed:f5:12:b4:3c:e6:be:61:91:c0:60:ce:ae:7e:c6:8c:
22:2e:db:10:40:89:f7:77:c5:3b:59:ba:7e:fe:0e:d9:5d:19:
36:50:a4:68:e9:a8:b8:48:c8:b0:9b:23:fd:f0:6f:6c:b2:68:
3a:ab:68:bf:ab:51:bd:4b:9a:39:b8:cc:b0:5b:8c:53:c2:c0:
6d:aa:d6:cc:16:8d:61:1d:da:de:51:50:5d:4a:9b:1c:d4:8b:
62:0b:92:1d:e4:51:4e:b9:b1:be:7a:12:ca:0a:57:6b:78:ac:
df:c4:04:2e:9b:35:5b:1c:10:13:35:d0:28:9c:e6:38:d3:8b:
50:90:8b:69:90:83:4d:e2:ff:d3:fe:2d:24:a9:69:b1:87:c0:
6c:9b:1f:c4:53:b6:c5:d5:89:a7:1c:d8:dc:ef:b7:23:af:cb:
89:64:0a:e3:9c:30:81:05:40:e8:c4:f1:31:bd:38:60:5a:5c:
88:8b:5a:66:b0:5c:b0:cd:c8:27:fb:cf:01:b8:6c:51:3f:bf:
07:68:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:40 2025 by rpki-client