Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: pDiGn2dX6zksapBJV8xCpzcwTxUlRpt2hF/ev9Ify2k=
Subject key identifier: 28:4F:2A:B7:D5:24:3A:BE:3B:6D:4F:94:22:8C:5C:95:27:54:EF:C4
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019A70DC46BEAE9C70C3057AD2837862002E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 04E2
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: ZfvOrwItu+hXII50S/qa4OA/sNhAQJb72Q63+9K9Pys=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:46:be:ae:9c:70:c3:05:7a:d2:83:78:62:00:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=284f2ab7d5243abe3b6d4f94228c5c952754efc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:fe:60:1d:e0:83:e7:3e:d7:fb:bf:b2:f3:
b4:74:9e:f5:e3:3d:97:bc:8b:3f:97:e6:9a:1b:fb:
be:b7:60:e0:be:d6:90:01:2d:d9:80:38:45:19:c4:
c0:fd:48:8b:f2:95:76:d6:bb:1c:e1:ea:96:b6:25:
b3:06:82:b2:34:ef:50:cf:07:69:a3:d0:c5:4e:18:
ee:20:cb:55:7d:20:d2:4e:73:c2:14:29:61:9d:8a:
34:c4:a9:c5:27:b5:74:6e:3e:eb:5f:54:4a:e9:3b:
48:45:65:59:ef:b5:ff:98:8c:ef:81:6b:85:d7:12:
47:f3:58:fc:43:9b:84:4f:6c:54:f3:2c:f2:8e:e8:
ee:3a:45:21:e6:36:97:5b:a7:51:83:a4:7f:66:47:
86:66:c3:a6:19:10:0f:50:b8:49:33:b4:d3:bf:70:
df:c4:f9:68:50:a9:87:f7:2f:23:dc:63:7b:98:5a:
2f:e2:ff:a7:7f:99:29:e4:a1:d3:c6:20:5b:40:c0:
62:73:17:52:f8:90:38:7a:52:fc:05:e1:b0:fb:97:
f6:f8:b6:71:1b:c8:df:17:da:d7:d6:a2:bf:59:7c:
fb:c1:ae:18:a8:42:3a:1d:26:bd:20:cc:46:c3:a7:
6c:c8:fa:b0:02:29:d7:0e:9a:55:9a:e8:b6:fb:5c:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4F:2A:B7:D5:24:3A:BE:3B:6D:4F:94:22:8C:5C:95:27:54:EF:C4
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fe:e0:63:0f:e6:a7:13:12:bb:aa:7c:aa:97:6a:a8:40:d7:
85:c3:cd:e4:db:ab:9d:0f:56:1e:26:91:7d:e2:40:51:4a:18:
5c:ec:c0:e0:14:f9:cc:5d:2a:4b:03:df:d4:e0:f9:4e:09:75:
ab:da:9e:f5:e7:b6:85:68:d9:5e:65:aa:b6:4a:68:35:46:9c:
45:70:01:0a:cf:2e:ef:5a:aa:9e:29:10:cb:ae:5e:41:7f:8c:
17:0a:91:4c:29:45:6c:72:68:a2:28:91:14:c1:9c:ab:60:db:
1a:14:04:23:73:48:6d:a0:14:b5:15:09:78:22:ba:4e:17:95:
cf:e1:59:d8:10:9a:65:48:f4:37:f7:c6:5d:d4:7c:84:f5:a6:
78:6a:ae:34:f3:15:9f:13:3a:a5:10:03:b4:41:92:2d:dd:af:
31:84:8f:e7:2a:46:da:93:45:c4:ba:e8:ef:a7:d4:13:13:5a:
13:6b:a1:fd:7d:c0:23:93:74:ff:62:a6:63:58:36:c8:cb:b2:
5b:df:18:58:c5:93:95:2e:1f:f4:10:4a:9a:cf:cc:d9:75:55:
21:4b:b3:63:48:c7:d2:1e:e1:11:27:1c:96:35:25:23:36:2d:
84:80:b3:23:56:e1:1e:6a:f7:dc:78:51:4b:1e:08:9d:ab:54:
43:4a:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:59 2025 by rpki-client