Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: L6SwPkoCXXf3ZA1U9HPxrVOo11rxGo6z0AdEh4PhzbE=
Subject key identifier: 86:03:77:11:69:34:AF:DF:D3:2A:C1:6B:9B:3B:B7:E8:A1:33:3C:21
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019A71B862C41456E037D2F74C1809AC5D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 049D
Signing time: Tue 11 Nov 2025 07:01:40 +0000
Manifest this update: Tue 11 Nov 2025 07:01:40 +0000
Manifest next update: Wed 12 Nov 2025 07:01:40 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: rSLt28jMMdqsUI5+N0186cFb3o5Zqk8Jlgd7faPxFGc=)
2: oVHqW7Znx3iXeIApvzhLphsAfTQ.roa (hash: yQWVz29tvYoHHrEUjXDJ9Ko8ioxivLXZFSUPJ/+r9ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:62:c4:14:56:e0:37:d2:f7:4c:18:09:ac:5d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Nov 11 07:01:40 2025 GMT
Not After : Nov 12 07:01:40 2025 GMT
Subject: CN=860377116934afdfd32ac16b9b3bb7e8a1333c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:54:e2:2a:07:27:4f:32:75:c3:13:4f:1e:
12:77:9a:be:75:79:63:1c:f4:dd:0e:7f:7f:be:01:
5e:35:41:de:2c:4a:9b:c1:57:f4:f8:db:71:57:3f:
58:ad:60:d2:ff:1f:ed:91:ca:1d:73:8e:ec:95:a4:
76:a6:b9:b8:6d:c0:14:93:15:c1:5d:38:74:15:39:
7f:17:ad:f7:83:cf:57:e2:72:98:27:4c:8c:20:78:
4a:e3:7f:cb:fe:c3:f8:5e:9c:51:83:4c:c9:ee:65:
8f:70:7a:bc:60:cd:29:a7:0b:9b:eb:fe:77:f0:eb:
ae:ea:bb:f6:8f:f8:5c:a2:ee:8f:34:c5:31:c5:d7:
d0:4f:15:0e:b8:48:14:40:a6:a2:d9:dd:20:fa:c8:
1b:08:fd:a4:6f:7a:3d:e2:83:a3:4c:f4:56:49:5c:
a4:bb:ba:0e:d5:89:ba:9a:72:42:64:e9:71:e7:7b:
a2:9e:77:bd:6c:ad:73:2a:67:07:37:3c:70:c4:1c:
df:0f:3e:65:1a:8a:45:0f:47:5d:55:41:69:42:76:
1c:c7:bc:a5:e1:1f:ea:29:6d:56:f8:f7:be:f4:df:
94:98:76:7a:11:a5:6e:87:27:b6:0f:82:10:54:ba:
d8:01:16:39:0c:c2:41:d8:af:b8:22:79:b1:a7:56:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:77:11:69:34:AF:DF:D3:2A:C1:6B:9B:3B:B7:E8:A1:33:3C:21
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d0:f2:6c:9c:c4:cd:90:10:15:1c:39:92:40:34:cf:0f:18:
20:df:ee:e6:b3:3a:3d:e8:50:32:e8:2f:13:db:49:d1:43:66:
5b:f4:3d:5a:6e:80:e6:41:94:1b:f9:8d:88:06:53:24:1b:86:
b2:68:f8:39:d9:4c:0c:41:8d:29:35:3a:46:51:db:f6:4b:ac:
de:26:d9:e0:b0:47:94:aa:bc:43:6a:88:74:20:c3:44:90:49:
48:1f:86:3a:41:d9:6c:15:28:68:6e:93:fc:11:19:1f:c2:14:
9d:0e:a0:18:1e:8c:d2:fc:8b:22:24:af:ff:4e:bc:c6:0b:d5:
09:23:95:bb:42:49:e3:ba:75:1f:ff:df:a8:98:64:35:55:4d:
6e:41:98:a3:cd:43:21:a6:81:e9:2e:7f:dd:53:3c:29:06:5a:
e5:5d:57:e2:e0:c1:94:f1:86:cf:57:6c:f5:b0:b2:0f:e2:66:
d7:eb:38:1c:22:2b:4d:af:fa:43:ca:a9:50:84:d2:d8:b1:ad:
7f:0f:7a:fd:cb:ef:94:19:bc:7c:b1:c8:e3:61:3b:29:53:34:
41:fc:aa:1c:40:ff:b2:ec:bf:f5:6f:26:75:08:55:cb:8c:ec:
ee:8b:15:92:3f:72:d8:fe:c6:21:43:d9:1f:00:d2:69:f5:cc:
00:df:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:51 2025 by rpki-client