Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: KZZuGochXO4qcVjmkmOn2+lllZOHKZI99qyrBAWvmwo=
Subject key identifier: 54:B5:5A:2D:DE:6C:86:D6:97:1E:B5:27:9B:21:62:96:9D:8C:6E:AF
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 019A2A444D0915FF822ED62C367A4CC24AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 1701
Signing time: Tue 28 Oct 2025 10:01:50 +0000
Manifest this update: Tue 28 Oct 2025 10:01:50 +0000
Manifest next update: Wed 29 Oct 2025 10:01:50 +0000
Files and hashes: 1: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
2: GelQ-wpEtVaOdgayfz6S6TVZ0zQ.roa (hash: /97Q6YMRjpTXM1yiFxK+BKHm6SI3QfLA+ZDxZJQchX4=)
3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: l3Ni3LG4G3hURf1x9/SQk03cQQ6cMhzLc8BQSenSTS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:4d:09:15:ff:82:2e:d6:2c:36:7a:4c:c2:4a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Oct 28 10:01:50 2025 GMT
Not After : Oct 29 10:01:50 2025 GMT
Subject: CN=54b55a2dde6c86d6971eb5279b2162969d8c6eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:c4:4f:82:83:39:d7:cd:c5:31:be:45:3a:
ba:f8:df:92:73:49:7f:96:85:f5:9a:4b:0e:cd:cc:
0e:49:65:c5:2c:37:4d:ff:43:ba:34:78:40:49:39:
3f:61:a3:71:8b:d4:d8:4e:b3:06:00:3b:9e:b6:37:
32:29:3b:00:15:4b:b2:25:da:f6:9e:85:e6:c9:06:
dd:d9:71:de:10:30:3b:7b:12:37:53:9c:fc:f3:b9:
3d:ef:bb:b8:97:67:84:32:3e:87:8d:a7:a9:ee:2e:
4e:61:19:74:6c:39:0a:61:7a:18:11:d9:f5:28:31:
19:20:da:e9:9e:b2:1a:0e:b6:15:79:ee:31:ee:50:
90:83:95:74:0e:ca:ff:8b:49:a5:4a:28:89:e4:e0:
cf:47:b2:fe:a1:97:9c:ec:62:69:1a:b0:f2:b1:2d:
46:56:8d:8d:57:48:50:3a:33:17:35:60:9e:d4:1c:
dd:4e:7b:3c:eb:7e:30:2d:9b:25:b3:dc:aa:25:b1:
50:81:2e:00:9f:b4:ed:6d:dd:e7:d2:05:c2:ff:19:
1a:c1:c3:38:ea:29:22:59:62:35:be:a2:f2:a1:54:
0e:c5:c8:f4:40:c6:80:d9:c9:6b:28:46:ff:13:ac:
46:55:72:f6:a1:7f:2c:93:49:54:e4:bc:90:cb:82:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:5A:2D:DE:6C:86:D6:97:1E:B5:27:9B:21:62:96:9D:8C:6E:AF
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c5:58:5b:24:7e:e4:34:f2:83:49:b9:8e:33:c1:f3:95:e1:
61:18:cb:2e:4b:27:e7:dd:bc:61:98:03:62:76:ec:b6:c7:24:
53:65:9c:3d:25:16:27:d3:81:6f:20:37:1b:a4:2f:38:bc:01:
da:6e:90:b1:f4:9f:2b:be:b7:44:42:b7:a4:d0:6b:ea:df:f7:
f9:3a:75:a5:3f:56:c0:f8:e7:85:5a:12:dc:ff:13:66:27:c0:
c5:1d:aa:16:43:62:d4:31:a5:c4:28:c9:b1:88:d1:b8:11:6b:
7e:4d:0e:18:74:4a:db:a2:c8:f2:f2:25:00:51:b9:3a:b7:71:
7e:0d:82:6e:24:a4:5b:57:16:61:f9:7a:48:26:04:b5:a8:9a:
e3:bb:fa:73:44:7b:97:bd:d6:6a:c6:40:88:5d:06:8e:68:ac:
8a:db:1e:c7:21:a8:bc:a1:54:9c:80:c5:2d:80:e9:31:8a:17:
86:d8:1b:53:04:8e:6c:5b:ff:24:b3:75:8b:5d:f9:0d:bb:58:
23:8c:d5:a7:f8:60:8f:4a:b6:44:d7:2e:55:4f:d5:df:15:02:
a9:e9:bd:cc:2d:66:33:11:73:e1:55:f6:e7:6e:98:04:4f:2a:
ec:6e:76:ea:be:8e:e4:d6:7c:a4:cc:0e:63:a6:09:2d:32:88:
a8:e9:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:10 2025 by rpki-client