Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: lhi/43j7Tmpd+rpAVcJ9IpI3NvDfGk2S2R/c8NxtQSc=
Subject key identifier: 36:B8:B2:BD:61:EF:D7:C2:2F:AE:60:65:84:1F:BD:FB:D0:84:67:AE
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 019A71B94AB521D248FD4DF3170676849DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 0EFC
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: MKMxfWvmz2LhPfN0AO6kIjx4_i4.roa (hash: RBO8o15DgznSyTBOVtLWyg+YfWl1Xfsv3AO7LGd0yBE=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: d3mxhEgtDQqp8nIVCRtyp3K7HCdDiAQtRyqzgA9KeR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:4a:b5:21:d2:48:fd:4d:f3:17:06:76:84:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=36b8b2bd61efd7c22fae6065841fbdfbd08467ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:97:36:c7:4f:45:77:0d:05:4a:cf:dc:47:
06:bc:84:ac:40:9d:02:87:f2:39:2b:03:19:3f:34:
5e:be:20:a2:27:3f:5b:23:6b:f0:9d:d3:e5:1c:d9:
d9:6a:e9:88:c5:16:00:cb:c8:d0:19:de:83:5a:e3:
d6:40:56:02:93:c2:48:b6:8d:4b:59:c6:9e:d9:df:
a1:21:00:2b:07:30:db:57:e7:8c:5e:39:21:11:b8:
20:c0:d0:67:42:e7:d7:79:fe:6b:fa:7d:5d:ac:87:
93:fd:f7:c7:a3:85:da:f7:1b:ff:ed:b1:11:64:02:
36:80:6c:f3:4c:6c:fb:64:01:5c:d0:94:78:48:2f:
16:49:70:96:2b:8f:94:07:f3:a8:45:69:47:5e:bb:
e0:25:43:d9:2c:d3:c6:eb:ce:f8:01:0b:be:f9:54:
1f:b6:4f:1c:7e:5e:30:ec:22:b2:92:5b:8e:47:ae:
82:9c:03:81:45:ec:82:3b:2f:08:08:da:7f:02:6e:
82:44:0e:95:b9:d8:1d:18:8b:ea:eb:9e:aa:76:df:
3a:41:c8:c2:98:27:4d:0d:d9:c3:ff:27:89:09:4e:
5f:09:33:d6:37:25:22:6d:cf:7a:13:91:39:48:7f:
ab:d8:2c:f8:21:4f:c7:3b:3b:e3:f5:5a:52:32:ff:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B8:B2:BD:61:EF:D7:C2:2F:AE:60:65:84:1F:BD:FB:D0:84:67:AE
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:90:80:6e:e0:57:8f:75:e1:82:67:15:c9:d6:3d:28:65:59:
8e:12:a7:6b:eb:17:7b:66:5a:0a:ad:a6:9d:f5:80:1c:3b:4d:
ed:4d:26:a8:4f:2b:0a:b1:01:a5:34:09:bd:82:54:67:c8:55:
af:bb:2c:a8:4a:ac:6c:c6:06:95:ab:79:62:e7:08:a1:5e:05:
96:b1:e0:ec:85:2c:d4:2b:b8:23:7b:1c:c5:13:32:68:b7:d2:
77:44:c2:d1:a2:ee:75:4e:fc:b3:0e:d4:06:9e:15:38:1e:96:
92:a7:4d:9f:f8:4c:fb:9a:be:e1:93:1f:01:12:e3:78:d2:f2:
42:25:05:ca:f8:ed:4c:54:22:0d:36:d6:27:0a:ea:70:83:78:
e7:6b:0a:ce:74:f1:fd:4a:b4:88:32:6f:27:c6:93:8a:f6:2b:
91:de:ec:e8:4f:29:b9:20:d1:73:1f:93:09:55:fe:6e:2d:99:
d0:23:6a:66:09:73:8d:4d:16:e6:ba:90:4a:37:69:5e:21:ed:
11:7f:d5:bc:6e:84:fa:70:d7:36:7e:9c:d9:f0:3f:61:9c:33:
6c:a7:a0:41:92:e6:9c:4e:7c:1c:4a:90:d0:05:b4:c6:d7:5a:
01:93:47:fd:72:20:92:3c:1b:b8:70:3e:21:00:9e:89:ee:6d:
dd:4a:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:26 2025 by rpki-client