Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: iNt79/jG8kE7LTZvUqtwiOCQjBZ/yWUUhSpKrbzEbZk=
Subject key identifier: 07:47:33:C0:61:79:68:28:48:4F:83:D9:83:68:8F:76:DE:F3:00:37
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 0199FC58A9D60139B8286497C60350FB2163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 11D1
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: WXWpHhh81SGfDRO3gh09ulZvNEJhUFVw87zVw7l1tWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a9:d6:01:39:b8:28:64:97:c6:03:50:fb:21:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=074733c061796828484f83d983688f76def30037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:7a:44:27:ef:17:88:8a:a8:85:7f:36:28:
09:c4:f3:9a:75:16:59:f3:8e:f5:87:40:f3:49:1a:
56:40:3e:fd:13:fd:c8:9a:2a:e3:98:72:35:d0:df:
51:16:7e:b8:d1:a5:f9:35:1b:08:ab:f4:d3:0e:2b:
01:e3:a8:73:99:c2:8b:5b:0f:9e:60:ba:25:10:5b:
cf:86:3c:6c:dd:9c:bb:6f:e3:d8:a4:47:10:1d:8a:
f5:df:c2:d4:f3:da:82:de:d7:a1:c9:e2:8f:79:42:
70:5d:e6:45:36:47:f3:d5:6c:fb:e7:b9:37:a3:9b:
8d:bb:00:3c:78:30:7b:b4:d3:02:2d:de:de:cf:3f:
0a:7a:9a:37:50:00:09:28:c0:73:f8:a7:7c:12:cd:
25:a0:1b:1e:88:0f:cd:a0:75:f7:65:40:20:48:28:
20:0a:6a:ec:74:6f:2d:c8:fe:ff:40:72:f5:f2:94:
af:0e:e9:41:9b:a7:90:83:93:eb:09:54:f0:69:55:
b2:72:dd:06:da:d8:ed:dd:8c:a8:55:d1:93:60:12:
82:0f:d2:94:ed:21:41:9a:fe:13:19:06:ad:f2:b0:
03:c7:c5:be:be:bf:58:0a:3b:53:64:0e:a8:91:19:
01:41:15:c2:a8:b2:2e:66:de:2c:db:eb:a9:fc:5f:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:33:C0:61:79:68:28:48:4F:83:D9:83:68:8F:76:DE:F3:00:37
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5c:2c:4f:0a:88:7f:e8:28:c4:d2:4f:9a:8a:8e:0f:21:17:
31:a5:58:94:26:7d:28:c6:8d:71:3b:a0:2f:9c:5b:79:0f:c1:
5d:53:a6:74:c2:16:bd:c3:cf:46:f7:f8:a9:eb:af:6f:70:69:
30:ee:8e:d0:95:f4:a8:fd:25:9a:87:c1:d9:0b:63:ea:93:e9:
09:7a:9c:a5:28:3e:02:de:79:17:82:ba:23:28:b6:a1:37:62:
70:12:3f:e9:cf:22:f9:15:87:c2:e4:9a:e0:6c:43:39:04:80:
1a:07:9a:98:7a:47:0b:c0:84:ff:a0:0d:f9:e0:f8:55:ff:2d:
9e:dc:a8:f4:37:5a:26:39:b6:ce:31:ba:db:88:b4:ff:17:dc:
28:fb:20:15:80:43:6f:b1:0d:80:f7:49:4d:10:a1:fd:32:fc:
6a:a0:4d:88:78:25:82:60:df:e3:6f:6a:21:e6:88:c7:56:04:
27:09:ef:8f:11:07:cc:4b:75:2c:d9:19:30:47:b4:d6:ee:2a:
e7:0b:cf:78:80:34:92:d7:b9:06:d1:ce:14:72:ef:99:45:00:
55:e2:91:a1:47:e6:26:9e:61:fe:26:f9:06:2c:40:78:12:e9:
23:cf:4d:2f:ac:0a:ff:c4:68:f5:18:ba:cb:f8:39:54:ec:14:
59:75:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:40 2025 by rpki-client