Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: fKkr604CtY9c0AIgMYwZZmM+xKL5Wllyi5LXi25Iu9Q=
Subject key identifier: 5D:C1:B8:69:64:B0:7B:5E:6D:69:36:F8:A2:4D:78:66:60:36:88:BA
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 019A7294003864FDDF540EF9B41A27281AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0E0C
Signing time: Tue 11 Nov 2025 11:01:33 +0000
Manifest this update: Tue 11 Nov 2025 11:01:33 +0000
Manifest next update: Wed 12 Nov 2025 11:01:33 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: 5w7jVWNyS/ow1AZor9y2rEcyig4andEPR08Rth1fxA4=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:00:38:64:fd:df:54:0e:f9:b4:1a:27:28:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Nov 11 11:01:33 2025 GMT
Not After : Nov 12 11:01:33 2025 GMT
Subject: CN=5dc1b86964b07b5e6d6936f8a24d7866603688ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:b9:92:62:f0:26:57:71:9a:4a:15:11:17:
63:4c:3e:23:2d:bc:1d:21:3c:4b:74:2e:37:1c:f9:
9a:7f:ad:1c:3d:f0:02:d1:4f:c2:e8:2e:0b:bd:12:
7f:f3:23:6a:c1:94:85:c0:69:c2:23:6b:81:bc:48:
fd:a3:73:a1:19:1c:c5:53:fb:3a:8f:04:82:3f:c7:
98:72:15:f3:f3:2f:37:06:51:ba:30:dd:df:6c:31:
cc:37:0c:b7:fc:10:5e:bd:cc:1b:47:fb:8e:64:44:
0e:34:ce:6a:83:8b:2f:bd:30:30:c4:87:90:13:ed:
75:7c:de:13:55:3d:a3:f9:d3:c8:fe:fb:2b:2d:59:
1e:62:59:53:d2:0e:6f:69:5a:6b:9b:1e:45:f1:a8:
2e:26:52:c8:39:81:f9:9f:b0:cd:71:ac:e4:2b:83:
98:e4:2e:76:6a:f5:f4:81:49:8e:fa:34:de:6c:e3:
42:6a:f9:be:f3:ac:53:53:25:fd:07:41:bb:56:2e:
24:7d:e0:08:4a:55:56:85:a0:ff:8d:a0:ca:93:63:
a3:de:a4:83:24:75:69:c3:9b:a0:34:c0:67:3d:5a:
4d:ab:28:fa:21:89:4c:5c:d7:4c:60:27:c2:35:cd:
27:de:f4:9c:62:f2:99:4c:9a:94:ca:e5:d7:d9:0c:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:B8:69:64:B0:7B:5E:6D:69:36:F8:A2:4D:78:66:60:36:88:BA
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:4e:74:cf:82:d0:9e:98:7e:33:0b:66:a7:04:88:17:e9:
5b:80:33:c6:b2:93:38:bb:71:65:54:f9:f3:bf:7c:27:a1:1b:
ec:3d:55:32:d4:d0:aa:ec:ab:12:8a:48:51:8e:3c:33:d1:15:
59:87:d1:a1:b7:07:d8:fc:04:6d:a1:a9:21:bb:ae:d2:cb:88:
2b:48:81:03:4a:73:7a:5f:4e:89:c4:0d:b4:8f:99:2d:3a:60:
c5:ed:ad:74:43:4d:65:67:86:56:98:b3:4f:ba:87:c1:93:2b:
5b:16:e6:20:2c:c8:b0:44:1f:47:26:5c:18:e1:c8:2f:f8:53:
cc:1c:a4:b6:06:95:fa:71:b7:11:e8:82:5d:54:b0:56:17:47:
c6:85:43:7c:70:1f:b9:0e:02:e5:74:53:e2:ce:00:84:70:26:
5e:09:91:6c:ab:ba:40:39:a1:5e:89:3c:da:15:8d:1a:a3:2f:
1b:39:b7:8a:2f:1d:4e:b1:92:b9:70:84:1d:51:65:a3:86:23:
3e:83:ec:81:b4:7a:85:81:4b:20:ba:41:2f:88:96:41:30:e9:
bb:ef:71:57:de:e2:31:4b:4e:67:4e:36:f0:9b:15:a4:fe:e5:
7d:de:9b:6e:4f:4f:db:b9:46:92:bc:8e:92:f1:90:83:b0:73:
2e:e0:bd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:43 2025 by rpki-client