Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: mbKvA5x/Xl6Z94EndAGDV0FgRlfgXV4ACP9tAhIJtaE=
Subject key identifier: 5A:1B:C5:E3:FD:63:D0:B7:74:DE:26:26:E4:3E:BB:FE:15:7E:C0:12
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 019A7149E05022BB13B0710C472A48E71067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 07E1
Signing time: Tue 11 Nov 2025 05:00:58 +0000
Manifest this update: Tue 11 Nov 2025 05:00:58 +0000
Manifest next update: Wed 12 Nov 2025 05:00:58 +0000
Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: +O3lLb+viy7TQr4s47Rg+AJpXBhmFjRUnV6WROLqNm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e0:50:22:bb:13:b0:71:0c:47:2a:48:e7:10:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Nov 11 05:00:58 2025 GMT
Not After : Nov 12 05:00:58 2025 GMT
Subject: CN=5a1bc5e3fd63d0b774de2626e43ebbfe157ec012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:8f:6a:74:80:0f:e2:4b:d0:95:d9:79:15:
ba:c8:a0:3d:c1:f6:2e:b8:49:fc:90:f8:ae:a0:b2:
69:a5:62:c8:a6:32:3b:c3:a9:38:a6:13:2b:ff:9b:
9e:6c:ed:8f:61:d8:35:82:5d:02:28:ec:26:de:3d:
07:1d:49:00:ae:d0:02:f4:77:0f:8a:82:99:95:e3:
a4:25:59:2e:12:02:09:02:9f:f4:6a:33:5a:bc:bd:
53:e5:86:91:0c:e8:1f:53:f7:4b:ec:70:8b:3e:42:
fc:c6:ac:67:fe:1e:cb:80:35:71:71:9a:cf:27:c0:
33:1f:d7:13:6c:dd:76:98:ac:79:5b:76:04:f4:0f:
b2:6b:31:ec:07:56:e7:af:54:4b:53:3a:30:5b:c8:
2a:09:0f:d2:6d:31:b5:9d:ca:8b:3d:2d:0a:97:74:
43:e5:b8:20:dc:f1:2a:f9:f3:a7:11:97:1f:02:e4:
2e:85:d4:83:e7:66:6e:bc:5c:53:81:55:4c:40:7a:
00:aa:2d:ee:00:a3:5b:68:31:d6:ff:d0:83:c1:5b:
8a:e4:81:de:ff:5f:2b:15:7a:08:59:b1:cf:35:91:
4b:d3:e8:32:60:0b:61:ff:f8:aa:6d:cb:a2:9a:f9:
cd:2a:b5:5c:7f:fa:ea:f6:03:d2:ed:c6:f3:88:5d:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:C5:E3:FD:63:D0:B7:74:DE:26:26:E4:3E:BB:FE:15:7E:C0:12
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7c:df:2e:cd:f8:c5:68:ea:85:d9:96:8b:30:42:f3:34:55:
3a:c7:2c:ff:e4:83:24:a4:9c:2d:2d:44:82:8e:0b:c7:8b:42:
ef:65:68:99:9c:bb:8f:58:8e:a5:d8:d0:a5:d8:ef:aa:8d:7f:
0b:2e:47:12:37:16:b2:81:d9:14:3e:db:a1:f9:c6:5d:ae:b4:
99:71:3c:ba:44:2d:5e:e6:3c:50:c3:2c:ac:b3:ce:8d:bd:2e:
c4:97:b2:0b:b6:55:24:ad:9f:b6:f6:8f:8d:0b:93:d7:cf:22:
91:2f:22:d3:59:e0:52:f1:52:cf:8f:00:2d:75:6d:39:6a:40:
a5:8e:3d:0a:0e:b9:6b:49:4b:ae:6c:45:bb:7c:2b:17:20:1e:
37:56:32:0c:38:f9:14:c7:68:50:30:c3:5e:eb:3b:82:97:36:
cc:8b:0b:b4:20:44:17:31:63:f4:b1:bd:89:0f:1b:67:49:24:
a0:21:4d:53:33:58:ef:eb:21:f9:3b:08:28:6c:07:75:e4:c5:
a5:15:76:3f:74:08:3d:a3:17:df:38:db:db:03:f9:0c:8d:d2:
fa:33:ce:1b:a8:55:40:88:96:e0:6a:03:31:fc:45:94:70:96:
97:b8:6e:93:e8:25:c3:a5:d1:50:1b:ea:94:4d:2a:74:ef:9f:
63:8b:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client