Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json)
Hash identifier: SzBPI2gGAz4VHlc+WOtAvIQ2Qq+F8AOkWJ7Txa5bdqY=
Subject key identifier: 77:26:7A:C1:56:A3:96:5C:B5:BE:CC:F9:08:46:D1:60:F7:66:15:2E
Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Certificate serial: 019A70A4FDA8E2669061F4E48ABEB1E2182E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
Manifest number: 0405
Signing time: Tue 11 Nov 2025 02:00:52 +0000
Manifest this update: Tue 11 Nov 2025 02:00:52 +0000
Manifest next update: Wed 12 Nov 2025 02:00:52 +0000
Files and hashes: 1: _Z612WlN8ZfOi7lH-p4HrmdXgXQ.roa (hash: QscoaDsHFH3nysubWrv1ADSV365kESJ9Bam6CnFtw2M=)
2: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: XlHG/HbZ+2vSd+5GvsaQx10qu/A+YrdFaCTI5K2c7H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:fd:a8:e2:66:90:61:f4:e4:8a:be:b1:e2:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Validity
Not Before: Nov 11 02:00:52 2025 GMT
Not After : Nov 12 02:00:52 2025 GMT
Subject: CN=77267ac156a3965cb5beccf90846d160f766152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:e1:da:23:79:dd:a5:01:27:20:a9:94:b4:
53:01:69:9f:28:de:b1:59:d9:c2:6d:26:78:6f:ca:
58:1a:2d:ee:ea:c6:01:bc:89:8f:4e:67:97:2b:cb:
aa:12:4a:f1:25:b2:9e:0f:e4:2d:43:74:35:f0:9c:
93:0a:7f:4a:f6:b2:6a:ea:74:47:10:20:ba:de:2f:
63:11:59:9f:7d:9a:48:e2:13:b0:74:5c:70:d3:f2:
03:26:41:28:54:56:0e:1c:51:5f:ad:00:6e:4d:07:
d5:3b:4a:72:21:56:23:ca:f9:30:53:05:2b:54:59:
4c:e6:17:e8:14:2d:77:b4:fe:44:e0:a1:aa:ef:73:
0b:84:9e:60:6e:99:14:3c:84:15:30:19:f5:61:ff:
3b:ae:a9:e4:57:24:6c:45:a2:84:bf:7f:24:b4:d3:
38:bc:e7:f5:e2:6a:af:b4:15:7a:75:b4:1f:55:27:
1b:8f:2f:50:d8:c4:8f:6e:29:5b:8a:9d:4c:65:cc:
34:00:73:fb:95:82:73:80:33:6c:3b:06:7b:37:4b:
f6:85:61:02:48:43:d9:b3:31:30:01:ce:b6:12:f7:
a2:fa:62:e0:20:24:41:75:81:8e:44:a1:e6:a1:4b:
af:a1:42:a5:6d:b0:35:02:e7:0b:42:6b:7b:17:98:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:26:7A:C1:56:A3:96:5C:B5:BE:CC:F9:08:46:D1:60:F7:66:15:2E
X509v3 Authority Key Identifier:
keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:66:49:f2:e4:7c:79:49:cb:82:b6:ec:95:f7:cb:34:13:cd:
43:fe:7b:f9:b4:62:91:11:f5:f6:6b:48:4e:4b:01:c1:2b:ae:
9f:ac:be:85:73:24:8c:5d:dd:72:e7:42:d4:8c:69:21:e2:d7:
15:34:21:2b:c3:3f:59:11:74:2f:ec:9d:00:63:4e:06:42:d9:
d7:c5:c8:e0:3e:f2:0c:b7:23:c5:f7:66:de:61:a0:a3:78:42:
98:ad:00:9b:ad:1a:a0:dc:fb:13:f2:f7:89:e0:55:d0:5c:29:
09:5b:9b:32:8f:0e:73:95:f8:48:ba:27:01:9a:84:de:4d:c6:
fa:a7:3f:6a:59:d6:62:80:04:77:58:8a:9c:28:e2:96:e8:ed:
19:f4:00:5d:63:46:e5:f2:e5:83:66:88:69:4b:ed:8e:16:b3:
05:f0:33:9e:e2:af:a3:82:f5:46:fb:fc:2f:c7:56:cb:0b:05:
4a:6e:3a:91:9f:44:39:c6:08:b0:18:12:27:88:cc:01:77:54:
29:ac:b0:7f:47:65:d0:d7:96:30:25:b3:59:41:57:29:41:93:
e5:7f:60:a1:e4:54:ee:ee:8d:b8:59:7c:8a:22:41:26:c0:b8:
f6:af:fe:45:93:c0:20:85:07:c1:82:41:2c:bd:5f:f8:31:fe:
21:c1:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client