Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: gPz80kBzjHa43ren4+k/QDYx4DTJQ44Z80EiClvL71M=
Subject key identifier: 43:71:38:AB:CC:67:83:69:84:34:85:79:E8:61:77:3E:5D:AD:56:7D
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 019A4E4F3047AEC2D85801CB722D2A7C317B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 0FDD
Signing time: Tue 04 Nov 2025 10:00:03 +0000
Manifest this update: Tue 04 Nov 2025 10:00:03 +0000
Manifest next update: Wed 05 Nov 2025 10:00:03 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: rJ4AE7IQlhl2OfFpPvD5A6Q/28pUuHLzkmIH3QVhlG0=)
2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:30:47:ae:c2:d8:58:01:cb:72:2d:2a:7c:31:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Nov 4 10:00:03 2025 GMT
Not After : Nov 5 10:00:03 2025 GMT
Subject: CN=437138abcc67836984348579e861773e5dad567d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:ae:39:84:1f:8c:cd:87:89:86:1d:d7:19:
0c:fb:c9:df:70:12:f4:b2:4c:72:6c:29:92:6c:fe:
bf:76:9d:6e:be:4a:00:28:12:04:eb:b8:56:01:04:
bf:cc:24:a3:dd:51:1e:31:cc:ed:36:d3:b2:5c:59:
9e:b9:d2:8e:55:39:62:83:8b:38:66:91:ac:39:ee:
23:b6:6e:8b:f2:af:b6:59:da:31:cb:de:de:19:e5:
01:39:3e:e3:96:b1:65:28:cf:d5:8e:23:f6:0f:b9:
f9:8e:77:a8:5e:79:5c:9c:8f:0b:47:82:6b:44:64:
85:7b:a4:3e:94:db:7d:87:fc:51:3b:f1:5e:13:4d:
d0:82:0e:8f:03:0b:47:1f:da:9f:b2:59:15:88:90:
b8:a6:75:2f:76:da:9c:94:1d:ff:77:1a:20:de:64:
78:4f:e9:3c:1e:d9:f9:b7:e0:7e:70:fb:ec:bf:a4:
e9:bb:16:d2:35:66:32:fd:1f:bb:2f:f8:c0:55:ae:
89:bc:ff:43:96:d8:d2:90:45:fe:3d:82:4a:ba:2e:
18:fa:79:8f:5b:11:53:37:b0:f6:0f:e0:17:bc:1d:
9e:c9:29:2a:ad:25:2c:63:aa:14:d2:e6:df:16:29:
08:73:23:f5:30:10:c9:d8:e8:03:95:51:45:2b:f3:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:71:38:AB:CC:67:83:69:84:34:85:79:E8:61:77:3E:5D:AD:56:7D
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:10:69:8e:f7:2d:e5:a7:90:20:0e:6e:d4:98:83:97:d1:af:
5a:94:1e:fd:12:b4:a5:ec:55:3c:4a:ea:4d:7c:60:6f:da:9d:
fa:68:7c:fa:60:f0:f9:e8:e5:85:84:c6:e7:0b:12:6b:b0:60:
5e:39:5e:2a:aa:6d:69:8e:47:c8:01:99:f4:5e:b2:65:c5:a0:
6e:98:98:24:db:37:d0:3e:07:7a:64:08:82:12:40:cf:27:b9:
9d:16:c1:13:44:c9:9f:92:83:02:b6:c7:26:8a:a5:7c:24:5f:
13:e2:3c:fc:14:64:c2:60:3e:9d:c8:40:a2:3e:14:af:00:74:
08:fc:29:ab:f6:83:eb:85:a4:ad:fd:5d:7a:38:19:d9:a5:eb:
92:16:f3:bf:42:a2:df:29:94:e5:f7:57:3f:f8:da:63:32:24:
dc:f2:5d:06:c7:e5:84:ef:3c:10:2f:90:74:41:72:67:4c:42:
ba:0b:7f:a7:9c:87:5b:81:9e:d6:e6:25:55:6f:be:15:c4:b1:
53:7f:60:cd:0c:02:0c:90:4a:73:69:ff:bf:c4:cb:01:4f:1d:
fd:70:86:59:29:96:6b:84:36:43:01:4a:c4:63:d1:6d:64:29:
24:08:c5:15:fb:bc:7c:50:14:4e:c7:01:65:94:99:67:81:f0:
2a:1b:d3:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOTzBHrsLYWAHLci0qfDF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYmJiMWY1ZDk4NjY2OGFiM2JkNDdjZDE4YzVmYjFlZmQy
NDliMDQwHhcNMjUxMTA0MTAwMDAzWhcNMjUxMTA1MTAwMDAzWjAzMTEwLwYDVQQD
Eyg0MzcxMzhhYmNjNjc4MzY5ODQzNDg1NzllODYxNzczZTVkYWQ1NjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x2uOYQfjM2HiYYd1xkM+8nfcBL0
skxybCmSbP6/dp1uvkoAKBIE67hWAQS/zCSj3VEeMcztNtOyXFmeudKOVTlig4s4
ZpGsOe4jtm6L8q+2Wdoxy97eGeUBOT7jlrFlKM/VjiP2D7n5jneoXnlcnI8LR4Jr
RGSFe6Q+lNt9h/xRO/FeE03Qgg6PAwtHH9qfslkViJC4pnUvdtqclB3/dxog3mR4
T+k8Htn5t+B+cPvsv6TpuxbSNWYy/R+7L/jAVa6JvP9DltjSkEX+PYJKui4Y+nmP
WxFTN7D2D+AXvB2eySkqrSUsY6oU0ubfFikIcyP1MBDJ2OgDlVFFK/Pd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENxOKvMZ4NphDSFeehhdz5drVZ9MB8GA1UdIwQY
MBaAFDu7sfXZhmaKs71HzRjF+x79JJsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAt
YzExN2YyN2JhOWMwLzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAtYzExN2YyN2JhOWMw
LzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhBpjvct
5aeQIA5u1JiDl9GvWpQe/RK0pexVPErqTXxgb9qd+mh8+mDw+ejlhYTG5wsSa7Bg
XjleKqptaY5HyAGZ9F6yZcWgbpiYJNs30D4HemQIghJAzye5nRbBE0TJn5KDArbH
JoqlfCRfE+I8/BRkwmA+nchAoj4UrwB0CPwpq/aD64Wkrf1dejgZ2aXrkhbzv0Ki
3ymU5fdXP/jaYzIk3PJdBsflhO88EC+QdEFyZ0xCugt/p5yHW4Ge1uYlVW++FcSx
U39gzQwCDJBKc2n/v8TLAU8d/XCGWSmWa4Q2QwFKxGPRbWQpJAjFFfu8fFAUTscB
ZZSZZ4HwKhvTHA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:58 2025 by rpki-client