Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: 3BCrz0sHh9QMi3psRGO7aXCIv82YcydFolYF3zSW+qg=
Subject key identifier: 47:BE:31:13:F8:E9:A4:27:62:0F:93:A9:E8:D9:D7:BE:20:48:6D:2A
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 0199FBEC328F1F9DF24EBD332FAD24F440D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 0EBF
Signing time: Sun 19 Oct 2025 10:03:04 +0000
Manifest this update: Sun 19 Oct 2025 10:03:04 +0000
Manifest next update: Mon 20 Oct 2025 10:03:04 +0000
Files and hashes: 1: MKMxfWvmz2LhPfN0AO6kIjx4_i4.roa (hash: RBO8o15DgznSyTBOVtLWyg+YfWl1Xfsv3AO7LGd0yBE=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: F1sFjd+egzDLmd7Hgz7maUJgAu4a3w9xMKiGkCRSx/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:32:8f:1f:9d:f2:4e:bd:33:2f:ad:24:f4:40:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Oct 19 10:03:04 2025 GMT
Not After : Oct 20 10:03:04 2025 GMT
Subject: CN=47be3113f8e9a427620f93a9e8d9d7be20486d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:3b:d2:73:21:18:24:e8:46:dd:29:54:ec:
2d:df:49:bd:2b:37:ea:ba:64:50:6d:05:57:25:56:
03:2e:8f:17:5b:7a:11:da:83:8b:cc:dc:a2:6f:90:
98:71:4f:22:2c:69:24:e2:16:78:b5:2a:82:0d:3f:
a1:21:2d:5d:84:57:fc:25:27:4b:4b:10:0b:1a:2d:
22:af:c3:a1:b5:08:12:14:fb:0a:17:32:d6:f5:91:
07:51:b5:83:d6:28:d6:d9:d2:34:6d:4f:69:61:e5:
b0:82:c9:3d:ed:73:b8:9b:0f:e5:9c:d1:33:c2:41:
8e:59:29:e7:9c:3a:99:62:60:9c:49:80:3d:3c:48:
6e:2f:21:71:d3:ed:65:61:ed:bb:c2:35:ac:58:dc:
b7:90:1a:59:12:bd:7b:96:7e:d2:03:95:63:c0:27:
53:6a:c8:a3:bd:c9:cc:02:f9:16:8d:a6:f2:8b:f2:
1a:6f:c9:ff:d1:65:c4:c1:b0:0e:0b:85:68:67:3b:
0b:63:f6:50:3b:39:26:08:71:26:bc:f2:12:44:0c:
e7:61:c4:0c:0e:45:d9:7d:7d:cc:65:50:99:37:ee:
d3:37:98:c8:e9:46:93:01:a0:da:f7:70:83:1f:22:
11:a5:19:ef:8b:1f:b8:af:c8:1b:b9:81:cc:9d:0c:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BE:31:13:F8:E9:A4:27:62:0F:93:A9:E8:D9:D7:BE:20:48:6D:2A
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:76:61:21:dc:ca:80:3a:ae:b9:a4:6f:e3:f2:29:5b:25:05:
ea:ec:e2:c2:b9:35:bb:f2:ea:31:19:17:0a:51:ab:2c:2b:bb:
b8:8c:80:69:23:f7:26:d2:03:bd:0e:7d:6f:96:f8:6f:4e:13:
50:46:d7:19:6e:85:d7:99:d3:1d:4a:7f:f6:c3:94:56:28:b4:
82:26:ae:c6:63:c2:78:d7:81:3b:cd:cd:e9:53:1b:dc:6b:54:
bc:d4:08:d4:07:2a:1c:18:71:ee:e6:5e:a7:72:9a:49:45:db:
2b:34:2b:c2:cb:8a:97:f3:2f:e2:e2:6c:d0:12:97:5b:08:06:
a2:26:c3:c7:5e:95:65:dc:bb:0e:db:2c:a4:10:df:d3:58:bd:
8d:ed:21:09:ae:97:06:0c:50:10:e9:88:fc:85:df:42:3a:3a:
f7:70:57:3a:7e:ca:ae:bc:0c:f6:f1:fd:fe:d9:ae:22:a7:2a:
00:df:ea:c1:14:3b:71:68:db:6a:6a:6a:1b:2c:34:f5:1a:05:
32:dd:f7:ae:42:b7:06:2a:1e:1c:fb:39:f0:f1:13:f1:b3:b0:
f6:b9:0e:5e:8a:80:78:14:b5:e2:74:1d:e7:9f:fb:ee:17:d5:
fb:3f:27:fc:a4:af:a1:4f:cb:d1:58:ff:28:ee:6b:d4:96:4b:
87:80:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:40 2025 by rpki-client