Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier: XFLgFGhS7g8lS9GNlVxkJXRejYvwVqYGDlRf3DfCD5E=
Subject key identifier: 4A:6D:13:39:EE:7A:BF:88:52:E9:B1:25:80:73:19:FC:A4:6D:2E:3E
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer: /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial: 019A70A56B5DEEA57078AAD774E7862CE7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number: 067D
Signing time: Tue 11 Nov 2025 02:01:20 +0000
Manifest this update: Tue 11 Nov 2025 02:01:20 +0000
Manifest next update: Wed 12 Nov 2025 02:01:20 +0000
Files and hashes: 1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: tjigOWdat8RtTlQOJPSgwHOKyFvt/hvdDKQmNLXgfpY=)
2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:6b:5d:ee:a5:70:78:aa:d7:74:e7:86:2c:e7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Validity
Not Before: Nov 11 02:01:20 2025 GMT
Not After : Nov 12 02:01:20 2025 GMT
Subject: CN=4a6d1339ee7abf8852e9b125807319fca46d2e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:5a:34:60:aa:a2:82:02:b4:82:f6:cc:c8:
83:f2:51:b4:06:d2:ed:6b:98:ba:85:44:b4:f2:66:
15:3d:58:e7:00:01:a1:e8:c9:06:75:03:a5:a2:97:
ba:cf:b9:cc:40:cd:49:39:c7:58:f1:01:50:bc:31:
55:d5:c3:ef:1f:cc:b3:b4:e4:5e:d9:7b:34:21:a9:
0c:25:f8:77:77:63:32:0e:23:ec:79:8d:cd:e2:72:
d1:e9:9d:87:b8:80:d2:ba:e9:7a:26:4a:73:b6:0c:
c3:59:13:a8:90:8d:88:74:51:8a:9a:ec:9b:cb:3d:
6b:8c:49:93:19:e3:dd:ac:02:e6:f9:cb:34:05:8e:
65:02:d5:2c:a2:d8:dc:e1:64:40:83:e1:49:72:63:
a0:71:d2:31:c7:e2:49:f0:d5:ff:b5:12:d6:77:77:
23:6a:60:c9:00:24:39:c6:b2:01:df:29:01:0d:55:
a7:c1:da:12:b2:02:27:21:2c:06:ba:c5:06:78:67:
20:74:a7:69:0c:20:af:af:c5:dc:8d:b5:b3:fd:f5:
65:ea:99:be:60:17:0b:c5:eb:97:c7:af:6e:33:63:
a0:79:5e:4e:48:d4:50:85:bb:00:68:6c:4c:31:7c:
de:d6:61:0c:88:16:d5:67:11:35:10:6a:4c:35:14:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6D:13:39:EE:7A:BF:88:52:E9:B1:25:80:73:19:FC:A4:6D:2E:3E
X509v3 Authority Key Identifier:
keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a5:e1:a7:29:6a:d4:77:df:9a:b8:8c:ff:78:3c:b5:2d:60:
4b:04:e3:53:01:72:0e:7b:fa:09:c6:5d:d6:08:4a:7d:39:ee:
75:1e:f0:17:6d:66:44:c4:8c:81:0a:72:92:7c:aa:c6:5d:3a:
df:b1:ee:61:a3:54:f5:ae:c9:69:26:63:c3:7d:40:b4:99:3a:
46:6e:44:b6:f4:a3:3b:0e:ed:94:e2:b0:f1:20:23:44:e6:58:
a7:1a:3a:ce:ca:ee:b4:fb:93:f4:0b:25:69:12:b9:fd:4c:82:
35:8e:78:f7:c5:a7:d8:9e:4b:5b:21:ee:c6:bc:03:1a:09:a6:
d2:48:e4:fd:1b:6c:9c:fb:9d:98:51:6b:f4:5d:55:b1:f0:2f:
54:40:ba:a9:bf:99:af:98:d2:67:26:09:d1:1d:c1:4e:04:c5:
4e:77:e0:7c:de:24:83:6b:69:81:f4:a5:c7:d4:46:5f:c2:da:
80:01:af:e4:91:1c:6a:95:6f:08:e5:3c:5a:19:c6:ad:0c:db:
f7:08:f7:0f:2b:2b:5e:40:f3:ec:a7:8f:49:12:e8:fa:f0:e6:
86:20:30:3f:51:24:14:d0:96:ba:0b:50:88:4d:2d:6a:ae:9d:
22:bc:c2:31:b8:0f:71:2d:b7:c3:bf:6e:00:7b:44:cb:4f:58:
76:56:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:09 2025 by rpki-client