Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: c/4vHCnHKBKcuFjQjfRaxM5QFSSldptlEF6SbWGC5aE=
Subject key identifier: 80:15:FC:92:9F:50:45:DC:23:96:1D:19:64:17:80:0D:38:88:B5:08
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 019A7225F75D333B008A3BEA15BD3E0D37B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 120E
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: R1Z3cK0DiMBxzzFkzyzAcUHHGAFLGxxuMd90TOVtWRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f7:5d:33:3b:00:8a:3b:ea:15:bd:3e:0d:37:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=8015fc929f5045dc23961d196417800d3888b508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:d5:df:18:d1:a7:e8:bc:c9:f8:43:a2:23:
45:ae:46:34:9d:ec:56:84:ba:ce:b2:72:b6:b7:e7:
47:c2:b7:ff:62:bf:04:03:50:7f:b4:39:9a:10:51:
cd:f0:a0:4d:98:00:50:36:de:ca:e6:f4:cd:49:2c:
eb:f3:12:55:78:f5:35:ca:a2:be:3f:95:19:9a:dc:
ff:9a:46:ea:1f:a2:a5:89:50:c7:c0:83:b0:f9:a7:
fe:16:0f:6f:80:fa:87:92:f8:ed:aa:17:5f:a7:04:
1d:7c:84:13:b5:8d:6a:dd:29:21:c8:6d:94:b8:52:
3d:84:b6:9e:a9:f7:94:a9:17:80:2b:04:8b:e5:30:
d4:ec:6d:77:14:b6:47:a4:5a:dd:bc:0b:3f:bc:6f:
39:a6:65:06:5c:ec:3c:ba:f6:b0:4a:be:e0:4a:3d:
3b:f5:d5:0e:42:dd:eb:a2:22:52:e2:23:fc:c0:f8:
80:26:ba:02:80:06:5e:d7:14:a2:68:ad:f2:4c:6e:
a8:ef:c0:45:83:6f:a7:da:59:ef:45:bf:e5:e8:37:
1c:4c:91:77:68:a4:0b:7f:14:68:ef:34:aa:a2:12:
28:a8:85:75:e8:78:dc:98:f5:95:85:45:3c:71:96:
d7:c2:cc:4e:bd:32:2e:67:95:a6:f7:0d:45:0f:18:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:FC:92:9F:50:45:DC:23:96:1D:19:64:17:80:0D:38:88:B5:08
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9f:84:6a:60:99:0b:11:9b:d4:33:b3:52:ed:52:34:9c:c1:
0b:6b:1b:fe:97:7d:5f:4b:0e:2d:4e:d8:ba:7c:bd:2b:84:4e:
88:45:4d:0b:d0:82:bd:9a:8f:f0:c9:6d:f5:5a:38:1b:93:41:
6c:8a:d9:58:21:41:54:6a:23:f1:f9:bd:1a:3a:a2:dd:7e:2f:
00:52:20:90:42:29:a3:d4:a6:23:a1:4a:57:0b:ae:ed:45:fb:
6c:3c:8b:57:62:b2:78:91:25:3a:b2:5e:89:47:55:d5:1d:cb:
6a:91:dd:c3:04:93:93:a5:7c:50:7d:11:c2:78:97:bd:d7:ba:
f7:41:92:7a:b4:db:f4:7d:18:2f:b7:34:7c:67:fd:de:c4:1d:
3b:26:91:31:9a:32:7c:0b:c3:e5:67:16:c8:de:bf:cc:6c:d2:
e1:8a:06:59:c5:cb:ae:7b:db:7e:cb:f2:31:92:6b:81:e3:51:
03:a5:9a:12:16:8a:34:ae:a5:84:84:60:7c:dd:c8:4c:65:09:
cb:9e:e1:67:99:d3:4c:da:84:e5:d3:17:1e:ca:d9:5e:48:8a:
24:b2:73:3b:97:ee:8c:b7:07:4d:a6:5d:ee:d7:95:92:ee:b4:
5d:50:d5:2e:10:34:ed:5c:94:a9:77:f5:b5:ce:96:fa:f9:71:
19:7b:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:11 2025 by rpki-client