Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: Mb8PaxEbpUG3UxhH4m2FwzCPyEeWTBNLCfNIWxJUWh4=
Subject key identifier: 28:19:47:B8:E6:E0:15:E3:BA:19:FE:3D:7D:E5:33:BE:0F:6A:AB:24
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 019A4A730DD95F2B3627FED309D82330B9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 12DD
Signing time: Mon 03 Nov 2025 16:00:45 +0000
Manifest this update: Mon 03 Nov 2025 16:00:45 +0000
Manifest next update: Tue 04 Nov 2025 16:00:45 +0000
Files and hashes: 1: 1-rpUgw0W3sKSFdW3yshaE1HCCc0.roa (hash: c/Tt5N/pZWiN2mpptC/U9LHYusWW/dCE4lcNMT3U+WE=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: 6Z45e/wRCVUaDZY61R96HDyy1b3o/l9Hy3nzJ0rdijU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:73:0d:d9:5f:2b:36:27:fe:d3:09:d8:23:30:b9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Nov 3 16:00:45 2025 GMT
Not After : Nov 4 16:00:45 2025 GMT
Subject: CN=281947b8e6e015e3ba19fe3d7de533be0f6aab24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:6d:5a:a8:54:b9:dd:af:a5:b6:d1:d6:4a:
1d:2d:7b:aa:2d:d1:1a:f7:c4:d7:19:8f:54:49:70:
0d:bf:68:91:d4:7b:f5:e1:2a:7e:b4:14:0a:98:9c:
16:e3:fb:8f:e5:05:38:8b:be:da:86:67:cf:d8:0f:
e8:53:83:96:cb:ce:57:9e:c1:30:e2:41:b8:1b:78:
52:a8:23:80:90:f4:2b:d7:34:a9:ae:a5:04:1e:21:
5d:ed:54:8f:68:20:91:2d:35:2a:4a:40:37:c9:84:
36:94:ca:3d:e8:aa:ac:52:f2:a9:64:aa:0c:77:64:
8e:fd:a3:4f:0a:75:76:f7:af:95:9e:e5:e7:56:25:
91:88:d4:b1:da:44:00:d6:8d:2c:34:7d:95:d5:65:
b2:25:39:4e:0b:e2:ae:3b:bb:19:8d:01:d2:1e:81:
3d:cb:56:17:1a:98:6a:ad:e3:b8:41:3f:4b:49:a9:
ae:91:73:fd:f4:c3:d6:71:ef:77:2d:80:0c:f0:f5:
46:80:75:bb:41:58:0b:c8:63:09:95:c6:f4:9c:2a:
fe:31:e3:17:60:85:91:58:5f:2c:f2:db:8b:50:a7:
e7:db:28:59:7b:df:1f:3a:0d:6d:be:e2:47:75:84:
0a:d2:3e:77:d9:78:b4:90:be:82:84:7b:ec:0d:73:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:19:47:B8:E6:E0:15:E3:BA:19:FE:3D:7D:E5:33:BE:0F:6A:AB:24
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:db:12:35:0c:80:10:c3:55:83:43:4c:ea:63:eb:56:ed:
9f:0b:29:b4:39:7b:0d:93:18:57:09:f9:e3:a1:f5:fc:60:f2:
2a:7a:2e:20:6a:e4:4f:1f:8d:66:97:f0:d6:70:ba:29:39:fa:
0c:e7:82:cc:3b:6f:55:b4:d6:eb:d7:86:cc:29:bc:47:8a:64:
14:7c:a8:7f:2d:a6:59:86:72:60:a8:f0:66:36:74:ce:a4:fb:
23:1c:f7:98:11:53:e2:c8:66:73:78:9c:27:12:1f:5a:25:8a:
a6:a9:50:6d:b5:ad:1b:f7:74:01:8b:79:a8:9a:b9:c8:a3:cd:
16:2a:72:2e:71:01:d3:bb:1d:32:3b:aa:d4:89:5e:c8:da:9b:
af:bf:ad:51:b7:3b:41:aa:63:8e:1e:9b:c0:4b:18:78:86:79:
85:f6:5d:99:e9:cf:c9:92:cc:2c:26:5f:b8:43:85:2f:7f:91:
11:9c:32:50:a6:c3:de:96:60:cb:e5:87:84:3b:b3:58:a9:b5:
78:03:43:1e:10:61:d8:6a:eb:c5:a5:e0:79:e3:c2:89:e5:6f:
f5:6c:ef:e6:92:63:9f:52:9c:8f:b9:46:44:bd:16:71:bb:b7:
09:00:c7:07:82:44:4e:90:88:9a:4c:58:5b:74:d7:83:62:94:
cb:0a:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:06:54 2025 by rpki-client