Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: K8QdDzZMooEAmCWe0DSzihJQ/Jw3Pb//6Sd0a6+njog=
Subject key identifier: 04:FA:C5:58:9C:6A:E9:08:38:A4:D4:85:E2:8C:55:AD:F7:2E:41:70
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 019A706E48F25AEF9EEFFABE6C6FAECD2E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 01:01:07 +0000
Manifest this update: Tue 11 Nov 2025 01:01:07 +0000
Manifest next update: Wed 12 Nov 2025 01:01:07 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: v3pMVyI0nC5CkCmwktRtaZRcSs7k6qR3nFuo6QRpNv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:48:f2:5a:ef:9e:ef:fa:be:6c:6f:ae:cd:2e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: Nov 11 01:01:07 2025 GMT
Not After : Nov 12 01:01:07 2025 GMT
Subject: CN=04fac5589c6ae90838a4d485e28c55adf72e4170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:d2:81:14:c0:c1:3d:18:bc:a7:22:b8:26:
2e:12:3d:47:da:2f:af:5c:6b:de:22:83:e8:06:68:
3c:c8:37:8e:ea:67:93:80:d8:eb:b6:23:c5:e4:e1:
0e:01:42:b7:fa:40:81:69:8c:42:8f:be:d8:8b:2d:
d0:db:58:12:ec:6a:e2:85:d3:74:01:d3:05:21:5c:
27:f3:0a:02:e0:f3:98:22:30:d1:ec:de:4a:86:57:
b9:73:56:c8:ec:15:42:84:20:2d:cb:cd:e8:c1:00:
f7:b9:64:55:df:29:13:9f:ec:fe:ae:c5:90:07:84:
f2:ca:f9:32:d1:54:ed:6c:9d:e4:c9:ef:b3:d4:fc:
a9:83:49:1d:20:d1:4b:04:bf:44:97:4c:3f:2c:0b:
5f:62:6f:0a:5d:22:1b:55:2c:c4:84:69:6b:c4:a8:
7b:32:ad:09:1c:42:97:81:62:11:66:c4:8c:58:bb:
0a:af:29:8a:85:d1:df:3a:d0:e0:f8:a8:f8:7d:95:
84:c4:54:99:87:b5:a6:f7:4c:50:7d:bb:d3:68:51:
fe:9f:d7:15:05:d1:46:d7:31:7e:4e:03:af:35:d9:
0d:36:b3:ff:22:a5:6e:30:5d:c4:f6:6c:9f:86:d9:
61:1b:a7:19:d0:03:13:62:0e:e1:b8:21:c7:13:89:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:C5:58:9C:6A:E9:08:38:A4:D4:85:E2:8C:55:AD:F7:2E:41:70
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e3:54:98:b4:50:70:c0:27:c5:55:df:5b:d3:3f:22:65:a2:
92:7f:c2:e6:80:6a:58:1a:64:60:83:76:05:5d:1b:ae:7d:ba:
fd:4a:2b:6b:95:45:7d:99:49:c4:8b:6c:ed:0e:0f:81:db:63:
ea:1d:25:0a:d3:41:79:74:20:12:76:64:e0:3e:83:ff:ba:a1:
a1:d8:71:97:e4:8b:e6:76:98:93:00:a2:27:ff:33:d7:d4:26:
aa:7a:cd:58:a6:e9:f9:ae:7f:f9:0c:ad:46:0d:67:79:4f:bb:
e3:2a:16:c4:9c:aa:78:58:85:22:d3:cc:b4:62:04:db:f7:fa:
03:68:08:7b:ba:bf:7f:9e:c6:1e:97:2b:34:67:55:6a:53:68:
f3:53:8a:dc:f9:6a:d1:ef:92:65:5c:c7:c0:a9:e8:cc:a5:a1:
56:a0:93:f5:28:23:ed:76:14:e8:99:4b:84:c4:1f:8d:a1:24:
6f:77:17:07:26:4d:10:8f:87:51:35:b9:32:45:b0:84:ef:40:
19:94:b0:81:4f:18:89:c3:50:bb:d2:88:2c:9c:7c:0d:50:c7:
57:74:bc:97:b2:7e:63:a8:ff:5b:54:e0:7b:24:05:10:05:d0:
19:ec:c0:64:5a:e0:9f:1f:6b:8f:9f:7f:3a:b6:8d:60:20:56:
6b:92:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:54 2025 by rpki-client