Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: QI2yEUu4gOq1B7RFDWYyzJItxsvhZ5dXSHOnUoeRAVw=
Subject key identifier: 1D:1A:40:DB:81:3A:47:CA:6A:AA:DE:71:99:DC:EF:61:9D:19:4A:68
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 019A71B8826646039691F48D4808CD34928F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: PIvjtjk0bcL1uBI75s2x-HEScf0.roa (hash: zVKNd6h1T8gwJhJ85/3bttBRHKLXvm4f0amj7KVDyew=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: i4oK78gaUj2ewuw7tEIv8kyS8CW3b3HglntW/bxgO9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:82:66:46:03:96:91:f4:8d:48:08:cd:34:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=1d1a40db813a47ca6aaade7199dcef619d194a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:af:ae:76:ac:9b:75:67:03:77:49:6a:02:
06:9e:74:9c:b3:3c:5e:96:9a:04:c3:b4:c9:34:f2:
62:0f:ec:8e:cd:58:31:b6:37:51:fa:92:a4:9c:16:
8f:49:82:3e:cd:fa:67:1f:97:66:4a:d1:e5:c7:7f:
f0:cb:86:ad:a8:5c:86:53:c9:2e:d1:55:1c:8d:b6:
98:16:1b:fc:e0:d4:9d:e5:29:f6:66:09:b0:04:01:
a4:a7:78:d1:9c:be:32:89:22:a7:6b:0c:a6:ec:fb:
ed:84:1f:25:c3:17:d2:8a:61:a5:a0:c7:a6:b3:df:
eb:66:5a:a7:80:8e:c7:6c:7d:42:20:df:d0:42:e2:
44:2e:d8:49:b1:73:b4:bf:40:b8:ec:58:3c:f7:7e:
01:f2:34:f2:d1:47:c3:93:87:39:4f:1e:d4:eb:76:
e1:24:a9:6a:b9:22:2c:31:85:de:67:c4:c9:c7:15:
4a:09:89:e8:1b:93:96:17:2d:e7:26:c8:2d:2a:6c:
a1:36:e9:9c:09:cc:65:f9:98:56:00:9c:e1:92:43:
d0:16:5d:2e:89:65:d5:23:26:48:29:dd:33:60:45:
94:69:67:56:ec:b5:29:28:c6:07:a9:71:8f:53:15:
e3:74:88:67:45:12:bc:f3:27:14:ad:55:0c:d0:44:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1A:40:DB:81:3A:47:CA:6A:AA:DE:71:99:DC:EF:61:9D:19:4A:68
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:07:fb:44:91:5d:e1:d3:b8:33:42:55:ff:f3:29:d3:9a:
1b:b3:51:36:2e:8f:6f:e0:62:79:c2:43:b9:df:d6:5d:da:97:
7b:97:37:ce:9e:a3:ed:c4:b2:90:c3:ec:a6:b3:0b:ce:7e:db:
f4:7e:04:36:f8:fc:30:f0:7e:a5:b9:3f:c5:fe:1e:59:59:36:
f5:76:90:7a:7e:cb:c4:a1:12:00:39:60:23:f7:44:f3:d8:88:
d4:8d:c6:93:6e:3a:04:7b:bc:d6:00:29:62:27:bb:61:28:84:
ad:a9:9f:3c:81:30:21:9e:60:89:76:c5:42:4c:4b:6b:0c:98:
3a:33:c3:34:2f:6d:13:ff:d1:76:9b:3b:a9:92:b8:46:45:45:
2f:1e:ec:58:9e:72:ec:dc:a9:14:93:fb:86:bc:cd:3e:14:db:
3e:0a:06:ad:2e:5a:a8:b3:7b:ee:c6:c8:10:65:04:01:f2:51:
a0:66:88:73:66:36:6e:44:76:f0:cd:e5:7c:15:50:8f:b6:c1:
bc:7c:88:f4:d5:95:8b:ea:22:1b:4f:2f:0d:d4:82:e2:14:3d:
e8:fa:98:af:4b:c3:02:8a:a5:25:ae:c8:8a:6e:aa:56:c4:a8:
e8:76:2e:97:5f:0a:77:f7:15:b4:d6:ee:5f:43:4b:98:db:ec:
ae:7a:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:49 2025 by rpki-client