Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: 7VFxbp0ctuFzPqsopGTaDH0Vcweo4KvQoqTJjBSqnBE=
Subject key identifier: 61:9B:41:56:D0:01:B1:A4:51:40:A9:52:68:D4:B9:9C:50:A3:F1:08
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019A522C1AB989A7E38E1850261E7D8B4C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 04:00:13 +0000
Manifest this update: Wed 05 Nov 2025 04:00:13 +0000
Manifest next update: Thu 06 Nov 2025 04:00:13 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: fTdLYh32KSemXkCmh6zRIIeyW+Fc0aSGsWLT6G/DGaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:1a:b9:89:a7:e3:8e:18:50:26:1e:7d:8b:4c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Nov 5 04:00:13 2025 GMT
Not After : Nov 6 04:00:13 2025 GMT
Subject: CN=619b4156d001b1a45140a95268d4b99c50a3f108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:30:06:ed:e3:86:27:55:be:a3:8b:0a:d5:
8f:31:d6:11:2f:54:e2:a4:2b:1f:47:f2:54:98:83:
dc:d6:bd:14:84:96:d9:39:93:44:7f:d0:8f:52:a1:
63:25:c2:8e:7e:ec:a2:e2:75:09:df:f6:a4:d6:5a:
a0:38:d9:08:ad:41:ba:ef:4f:5a:43:be:21:4c:b3:
c8:21:ab:f2:3e:0e:d5:e8:d2:9d:92:9b:ff:13:82:
41:9e:10:0b:30:75:75:26:54:41:99:2a:5d:57:0f:
0f:ed:ac:1b:d4:89:09:43:9c:c5:18:c9:45:59:53:
41:fd:e6:38:e2:fc:1e:62:52:c1:41:ae:21:d1:6c:
a9:15:71:fb:89:23:19:f7:9b:f2:b7:cb:b5:18:56:
de:f3:ff:5b:0a:53:8c:92:54:af:76:f3:5e:ac:e2:
cd:60:ae:1e:65:74:9e:ae:38:ce:0b:17:57:68:69:
20:04:b8:5a:f1:2e:ce:f0:68:64:09:38:dd:74:e7:
80:96:3e:b8:cd:d6:46:3a:b4:97:6c:f0:86:e0:09:
a4:bc:f3:56:84:f2:b3:0d:a4:3f:5a:05:80:f6:a6:
57:0d:09:25:d3:bb:db:26:83:20:71:5f:ae:01:f9:
80:0a:bb:6b:dc:7a:99:67:f4:31:21:31:9f:2e:b2:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9B:41:56:D0:01:B1:A4:51:40:A9:52:68:D4:B9:9C:50:A3:F1:08
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a9:5a:9d:a8:09:22:a3:25:54:52:41:97:3c:64:aa:ec:17:
8e:03:dd:ff:9f:84:33:43:fd:4f:32:73:86:e7:9b:dd:3b:34:
f9:4b:79:27:1f:7c:ff:e7:6a:27:82:c6:72:9d:ce:03:a0:b2:
a4:58:46:99:89:49:cb:b8:0b:9c:da:66:b7:e9:88:63:eb:5a:
9a:83:1b:ff:00:0d:4e:0a:5d:bc:9f:3c:12:89:b1:d9:f9:7c:
29:05:7c:8d:7c:89:7f:83:50:31:65:33:cf:48:e0:63:1e:24:
1d:ac:7e:dc:87:53:85:7b:9d:ad:f0:e2:6a:20:4e:03:fc:8c:
42:60:f8:47:bc:93:d5:60:04:20:25:bd:97:32:29:32:15:28:
9b:69:d1:48:b0:fa:8c:c0:da:42:2e:3e:2c:6a:e1:2b:6e:b0:
90:7a:aa:12:9e:7c:4e:61:03:76:21:04:4d:92:49:80:c4:8e:
8e:7e:87:b3:46:bc:c8:92:ca:07:c2:83:eb:ea:a9:c6:ab:dd:
fe:a1:ff:52:59:e3:6c:b6:3c:65:9a:89:a3:8f:70:f3:04:91:
c7:3a:ad:1b:50:a2:ba:af:2b:bc:65:e7:6c:66:22:3a:05:d7:
3c:25:0a:09:26:f0:5b:c7:50:98:3c:bd:b5:00:ea:f4:ff:eb:
03:41:f0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:33:28 2025 by rpki-client