Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: ylmLtezm2WU1EILl2a3XG96z5PX7PtmMe9FDo9SMmcY=
Subject key identifier: CE:66:BA:9B:35:0E:FD:9A:27:63:EE:E0:94:60:B4:CD:67:BA:A4:8A
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 019A02FE4FE24F034B55F1A7E867FEAF885E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 04B6
Signing time: Mon 20 Oct 2025 19:00:12 +0000
Manifest this update: Mon 20 Oct 2025 19:00:12 +0000
Manifest next update: Tue 21 Oct 2025 19:00:12 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: PUEouJqCMEdHp7on+g577WZeR8FuUWs4DVQ2SUDIutk=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:4f:e2:4f:03:4b:55:f1:a7:e8:67:fe:af:88:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Oct 20 19:00:12 2025 GMT
Not After : Oct 21 19:00:12 2025 GMT
Subject: CN=ce66ba9b350efd9a2763eee09460b4cd67baa48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:c8:34:5a:0c:27:3d:72:1f:75:55:15:2b:
92:2d:5c:86:e2:88:39:97:91:a2:f1:bf:34:07:c4:
24:22:7d:68:29:ca:a9:d6:4f:a2:ee:67:a1:94:79:
3f:7d:32:88:f6:78:97:e5:c7:36:16:0e:06:5c:c3:
74:ef:fd:e4:f7:40:ee:84:ee:dd:32:4a:55:dd:ce:
94:8a:fa:09:13:23:2e:b2:c9:cb:d0:46:42:27:71:
30:1d:00:5e:5e:b7:92:68:30:1d:f8:53:cf:9e:6a:
a2:47:4d:d3:9d:c3:f5:1c:03:c4:19:cc:95:17:49:
20:18:03:54:f5:6a:b4:ff:1f:6e:55:d2:d5:a5:cc:
e8:10:b1:ba:06:f0:66:b5:4c:9b:54:86:5b:e6:39:
18:4f:06:0f:19:85:6d:ba:fa:5a:2f:4a:7f:08:f9:
70:4c:7c:d6:2b:38:f4:de:e4:23:12:2d:54:d9:2a:
6c:a7:52:38:55:3c:9e:5a:c7:90:96:c9:4f:5b:5b:
d9:bf:f5:71:15:e7:98:bb:12:74:ff:5b:a5:b0:4b:
1c:09:03:0f:46:d6:cb:f1:69:07:af:62:17:38:2f:
c8:0d:b3:21:60:bb:ce:b2:84:ef:05:ff:0d:2d:69:
f2:82:b9:62:20:b1:ba:c4:5d:29:a2:84:38:66:50:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:BA:9B:35:0E:FD:9A:27:63:EE:E0:94:60:B4:CD:67:BA:A4:8A
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b5:d0:ee:8b:bf:d8:aa:66:9b:1e:62:f1:e0:40:79:72:74:
29:f7:09:cb:47:39:79:a0:b4:b6:91:1e:28:53:6b:91:83:21:
3a:4b:f7:c6:55:f9:95:bc:9c:ac:00:35:31:87:53:2b:7f:c6:
b3:d7:20:f3:5d:a8:4e:6b:d9:c5:64:24:9e:45:2e:f7:30:28:
d8:63:13:96:0d:dc:dd:79:8c:38:25:f1:cc:e9:dd:28:74:44:
c6:02:d9:3c:fa:9d:af:b7:01:50:92:8f:b8:f5:bc:d6:9b:1e:
d3:fb:cb:93:37:cc:0f:a5:d6:93:69:2f:59:cc:70:34:18:c2:
ee:18:75:a9:3b:c5:07:d0:c2:7a:bd:85:8e:a2:c6:c2:28:2e:
a0:ed:19:cb:e8:b4:12:8c:58:1d:43:2d:79:f0:f7:44:52:4d:
e5:93:58:21:29:a9:3e:27:e7:42:1f:d4:65:04:14:58:fd:e2:
07:ed:8d:64:6f:27:ca:c0:88:32:78:6b:1b:87:18:11:a6:b4:
bd:da:75:65:b0:aa:2d:8b:9c:35:cc:e1:13:1f:4e:b5:17:80:
92:8b:db:f4:f9:c6:51:44:ce:3b:12:58:8a:b9:9d:25:79:a4:
4b:84:88:2d:79:67:74:a9:b9:e4:55:0f:fb:5f:8a:cd:ba:ac:
35:44:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:17 2025 by rpki-client