Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: a4qL/fafkiPAkNzNYmEKSGWTK80GtyWfdRcj6FebBuE=
Subject key identifier: C8:8B:93:D6:D8:38:7F:11:7E:14:4B:76:1A:40:E2:6C:21:DF:B7:12
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 019A71B78D8120A9FBA1A6680E65B23B1940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: r4Z8bGZZ4VvHVBD5CI+RX+S+n9LWyHjVXGdCzYy1hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8d:81:20:a9:fb:a1:a6:68:0e:65:b2:3b:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=c88b93d6d8387f117e144b761a40e26c21dfb712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:ba:d6:28:2f:7b:ab:80:46:24:c6:65:6c:
ab:02:58:fc:7b:a1:a5:22:ed:71:68:01:03:8c:a3:
a0:35:6e:71:6a:66:dd:61:c6:c7:7d:60:cf:85:2b:
17:a6:a3:bb:9f:da:3a:25:25:ff:f6:93:34:cb:e9:
2b:ec:e8:b2:05:a9:20:5d:d8:98:7e:b4:32:e5:d2:
bb:52:7c:05:0e:7b:14:b9:e3:9a:4c:ae:7e:5a:34:
cf:03:7c:5b:cc:c3:25:c9:55:cc:89:6c:91:fd:1f:
4b:ab:54:c6:5d:82:aa:d3:c5:fe:0e:aa:73:c2:47:
3b:17:55:ce:22:e6:a3:29:0a:00:32:58:c4:e3:a8:
8d:9e:3a:cd:57:d8:97:0c:43:84:5c:c0:df:21:39:
a4:f3:59:e5:92:dc:f4:33:49:ef:ea:df:4a:47:55:
28:5d:b4:a5:0d:52:fe:80:15:f4:7c:a9:eb:0b:58:
32:8b:a8:d8:f5:de:d0:77:19:df:8d:4b:1a:b8:4b:
60:29:7f:b1:9c:b0:0f:0c:95:28:23:38:84:ab:76:
fe:4d:88:88:fe:8c:d7:62:a3:64:b4:9b:14:96:8e:
a7:55:e7:3d:f1:47:55:53:da:ac:58:d8:0c:7b:f4:
e4:7a:c4:a1:1e:72:0a:89:9b:5b:12:30:23:8c:0e:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:93:D6:D8:38:7F:11:7E:14:4B:76:1A:40:E2:6C:21:DF:B7:12
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6e:42:f4:f4:2f:10:b0:c3:7b:14:a7:7b:d5:62:17:78:16:
07:97:3f:f1:09:ce:62:13:87:81:df:2d:90:9b:79:04:6d:e1:
56:d2:97:45:fa:c1:0e:b6:b0:12:29:c4:4f:30:d0:8a:20:75:
a1:ca:34:59:54:d2:4f:d0:0e:8b:bc:72:d3:70:79:90:f3:e5:
7b:39:86:d4:60:54:bc:96:6f:58:49:c2:63:5f:87:a4:87:e8:
91:88:ea:a5:f5:89:7c:d6:71:61:cc:af:c5:34:b1:65:49:23:
35:7c:65:0b:b7:b5:62:7c:15:35:0c:43:c8:eb:1b:f8:de:3f:
78:50:3f:a2:53:d3:12:db:41:10:bd:c4:82:2c:e4:64:91:1f:
56:b4:39:d8:db:45:cd:97:38:67:3c:a2:9e:00:5a:b2:dc:d7:
bd:1a:1b:6c:05:ef:0d:17:2a:32:a3:49:61:23:27:79:4c:49:
c6:aa:22:e7:9a:7c:e0:d8:7d:c0:64:8b:4f:17:33:0e:5a:06:
30:c6:c9:74:dc:f5:4c:d9:6a:17:89:22:e1:f2:32:3c:de:22:
0d:39:a9:e7:e3:e4:67:03:63:1b:3d:09:9b:a8:b8:89:3a:80:
f4:ba:ca:31:23:93:4c:a8:43:ad:12:44:84:19:20:8c:50:23:
94:bf:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client