Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: DZVXRQnudW5/HMCPvqC1XasYbNQnI6JU8OFMkC4Q11s=
Subject key identifier: 8C:16:79:43:6B:A9:15:59:36:DA:4C:EF:4B:70:57:72:66:78:E8:46
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 019A4FD034FE12DBE5C9EC463EE985010D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 17:00:36 +0000
Manifest this update: Tue 04 Nov 2025 17:00:36 +0000
Manifest next update: Wed 05 Nov 2025 17:00:36 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: HdWj39+c58lGmukSd+KvNGhmwbdJVaNbBMIbm5dqDqQ=)
2: NbSHLJ18LUFyB0iCR0rBch7bc-U.roa (hash: m4WtwA746c9+1dEjftL5KY1wr7YjjqzoZ0GnddIoHLc=)
3: OblX778QtOOevvVmLppB6okYChg.roa (hash: RcRv1xji1xsemWDqjTtvWFuENOLwcxiNbuhjUnUsVAs=)
4: nrPgzgHDDtDxynx0QD9e2VIxNS4.roa (hash: zbB58fN/lRPGxPAWWtZWRRqfZ8FZqb3qnG/xrDyogwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:34:fe:12:db:e5:c9:ec:46:3e:e9:85:01:0d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Nov 4 17:00:36 2025 GMT
Not After : Nov 5 17:00:36 2025 GMT
Subject: CN=8c1679436ba9155936da4cef4b7057726678e846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:66:60:aa:52:f7:86:5a:c6:7a:ac:ec:55:
49:14:ef:70:76:fe:59:32:37:a8:43:2d:68:97:4e:
09:d8:e4:fa:a0:c7:b1:fb:75:38:f1:56:e4:c5:88:
b0:7e:f3:8e:36:a7:3d:d3:08:55:74:6e:13:9d:61:
9c:b7:3d:23:ec:9b:d8:9b:c9:21:11:df:0e:66:49:
82:ab:5e:2a:c1:ef:da:85:24:54:10:90:59:ae:c4:
1e:e8:88:33:87:88:be:a3:4c:5e:12:ac:18:dc:a8:
22:3b:6d:99:30:2c:1e:2d:13:6c:01:ae:0a:7b:62:
e4:a9:1f:29:1a:c7:2d:20:47:d9:0e:15:99:28:32:
9b:d7:ab:9a:f6:e6:59:57:92:f0:ec:3f:b4:88:fd:
86:1a:9f:44:e0:e5:44:46:f2:08:3a:44:a9:fb:3d:
40:a2:bd:d7:d1:d9:a7:05:7d:3f:9e:75:6c:16:06:
19:fd:60:9f:ee:7f:02:fb:aa:df:bd:fb:e6:b1:b7:
cc:a7:8e:8a:bc:42:80:98:73:04:c5:dd:db:ef:c5:
59:08:d4:56:d2:0c:27:f6:65:ab:03:76:ba:97:1a:
66:2e:ea:1a:a0:cb:83:e4:3e:5a:5a:55:78:41:7f:
5c:95:2f:73:44:1d:a5:6d:a6:e2:da:5c:2e:89:5a:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:16:79:43:6B:A9:15:59:36:DA:4C:EF:4B:70:57:72:66:78:E8:46
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:26:02:eb:c9:96:e2:68:63:85:dd:13:16:b4:d2:15:6e:d3:
e3:62:47:90:e1:b6:02:df:cf:3b:00:75:48:fd:64:49:60:5c:
34:d5:34:8c:68:df:be:49:42:06:68:cb:8f:f2:a5:bb:13:c4:
8f:aa:f4:4f:b6:26:31:51:18:4e:cd:f3:b2:67:8a:2b:c9:8b:
0d:7e:a0:17:81:9e:d8:64:a3:85:da:c0:c3:be:d7:85:ba:f4:
b4:84:07:fc:24:21:a4:8f:94:b6:bf:96:e0:f9:7c:da:79:6b:
a2:19:6f:01:18:23:d8:ea:57:42:39:8e:96:0c:34:f9:1b:d9:
79:60:19:27:aa:9f:0f:15:e1:fd:1c:20:7f:63:76:62:f7:2d:
3b:a8:17:cc:01:75:dc:84:b7:38:64:74:9d:7e:22:1e:07:03:
2d:29:1b:df:8f:c3:99:97:3a:c5:68:9f:28:14:60:76:80:0f:
05:9b:57:a6:13:a3:bd:ac:79:ef:72:2b:8a:c9:d8:2b:69:16:
ef:4b:08:e0:d4:09:4d:8a:58:d6:99:82:d3:0e:5b:03:58:7a:
3d:a0:69:84:56:03:0c:41:e5:cc:38:06:be:73:22:16:b4:51:
42:77:70:1f:48:46:4b:62:b4:77:e0:3d:d4:1c:2e:14:3e:81:
c1:e9:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:03 2025 by rpki-client