Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: tLNc7ziqn4wt7bk9Q6hGQaIHZeOZSiTaq+9lg1Yg4Kg=
Subject key identifier: 6C:33:68:6B:DD:E2:38:62:60:9D:A1:94:EB:5C:B5:8E:BA:6F:B8:37
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 019A71EEB4A1F365B1B09AB5D58B67DBFD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 0932
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: 4XG6DuE-VOpXPlm1OM2r12JgRic.roa (hash: A9cZGvYN3HxFKk3EJisSEe/6Tu/3YVMhQqYAsXSqvsk=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: YFijlhg+97REmVPSAMGy2S8mfkHf2FYwRNOHxP4NW7c=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b4:a1:f3:65:b1:b0:9a:b5:d5:8b:67:db:fd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=6c33686bdde23862609da194eb5cb58eba6fb837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:58:b1:b4:d5:62:e0:99:f8:02:37:51:7d:
46:0c:2d:48:9c:84:47:5f:04:4a:1f:cc:c0:97:2d:
ef:b8:18:56:45:87:cc:87:85:27:21:b8:27:15:32:
b2:b8:43:19:02:4d:f4:fa:cc:ea:44:49:68:42:10:
d4:90:7d:2d:df:9c:1d:29:73:34:59:e1:74:d4:b4:
28:4e:b8:10:69:85:dc:10:12:cd:43:e0:b9:5f:0a:
c6:15:23:b9:50:7c:73:0a:a2:e3:9a:4b:be:62:9c:
8e:fd:ac:e8:81:eb:cd:74:41:e1:34:2c:2b:e7:75:
c9:ec:f1:f2:a3:2c:14:c3:b9:24:db:98:fa:01:0b:
d1:0d:e7:01:16:18:ee:c3:f2:08:51:ec:70:c1:59:
9e:e3:06:11:2c:7f:dc:50:f7:16:86:c3:af:b0:25:
d1:b9:1c:08:5c:94:12:6e:73:3b:a0:a7:51:43:c7:
d0:57:ac:15:01:ce:5b:3d:a7:51:bd:86:c0:74:f7:
e2:0a:c2:0d:82:b2:4a:36:db:f4:93:e9:2d:49:b8:
1c:4e:4e:7a:f7:7a:a4:16:12:71:92:05:44:aa:25:
a8:b1:88:23:71:b7:e5:66:72:7a:bb:ac:f4:ec:2d:
cf:0c:41:72:1e:8e:1b:c2:62:b0:b1:33:8b:c0:5c:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:33:68:6B:DD:E2:38:62:60:9D:A1:94:EB:5C:B5:8E:BA:6F:B8:37
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f8:c7:00:a2:63:55:c9:70:77:50:bd:9e:57:34:3f:97:2d:
09:e8:aa:e8:3b:c9:72:35:fd:0f:4b:2d:0e:19:f6:54:68:ad:
c9:e8:fe:99:41:5d:cc:3c:ec:f7:b7:d3:07:cf:9c:94:30:54:
d1:dc:b0:16:8a:ff:9b:79:fe:76:8d:c7:75:97:e0:c2:28:a5:
91:f5:43:ba:46:8f:3f:8f:d2:26:7c:93:a8:41:da:4f:8a:3e:
c9:e2:1c:3a:76:a4:9b:e4:ba:ef:e7:be:f3:66:3b:14:61:9f:
01:ae:6b:a2:60:88:cb:00:4d:48:b3:c2:1e:d3:1c:cf:d4:c1:
74:b9:9e:1d:db:58:ac:6f:47:8a:95:39:d1:3b:47:fb:b4:d7:
86:82:a6:3c:e9:94:63:de:33:cc:87:67:ba:9f:e7:2f:03:45:
51:49:66:8c:97:eb:49:ff:0c:79:4c:39:d7:e1:77:ea:be:2e:
95:6d:c1:9b:9a:27:50:65:53:c8:06:a8:7f:a5:c4:39:05:fd:
8d:f1:e6:5c:c9:ff:03:99:9f:cd:3b:e8:27:6d:11:a3:e0:90:
2c:8c:47:42:4b:a5:47:06:f1:ca:4c:7b:5a:26:c2:30:cb:43:
ae:c0:fc:be:58:7a:e0:ae:3b:ee:56:46:b8:33:aa:f0:43:c4:
07:c6:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:19 2025 by rpki-client