Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: dnQH9B80SJpyL5dxGKStDsiZhmtvlQLoptONJJOk5/4=
Subject key identifier: FF:83:D3:B6:DE:6D:71:81:0C:E8:50:49:B8:00:AC:EA:83:13:77:16
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 019A5451BEE76DDEE63E6402065232B85312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 04A1
Signing time: Wed 05 Nov 2025 14:00:34 +0000
Manifest this update: Wed 05 Nov 2025 14:00:34 +0000
Manifest next update: Thu 06 Nov 2025 14:00:34 +0000
Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: 8DtPd3dfFXWrAwkm5w+Ea0DDSsfu4gB510NFC4d0chA=)
3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:be:e7:6d:de:e6:3e:64:02:06:52:32:b8:53:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Nov 5 14:00:34 2025 GMT
Not After : Nov 6 14:00:34 2025 GMT
Subject: CN=ff83d3b6de6d71810ce85049b800acea83137716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:02:00:e1:b4:ad:a7:8d:46:53:ca:f5:39:
b8:f0:e8:80:bc:3c:14:db:44:3b:79:4b:6e:a4:f7:
72:2a:21:eb:19:f4:8b:5c:cc:b5:3b:c5:1e:12:a3:
57:ed:3a:61:a2:3f:cc:7e:c0:a9:31:f6:e2:f4:29:
fa:97:e2:1b:a2:05:96:7b:08:cf:fc:1a:62:5d:9e:
26:53:a9:b1:89:36:71:85:b8:c6:fd:df:a6:6e:f8:
56:c6:46:10:82:b0:62:a5:20:02:e4:f8:76:57:e1:
f6:21:b0:53:b6:e8:e9:0f:11:82:d2:d2:6b:b3:97:
b7:94:2d:21:00:03:89:df:81:87:29:ab:a4:2b:2e:
04:87:c7:2a:91:0e:02:7c:b0:82:8d:a2:5a:06:42:
f7:63:6d:ed:b3:8a:87:a3:72:da:99:de:d8:e2:25:
e0:81:ea:6b:b4:85:bb:c0:54:1f:59:f9:f0:1c:19:
57:19:ae:92:be:5c:ba:70:e1:21:34:eb:c1:7e:6c:
72:32:14:b5:43:cc:3b:5f:90:ed:3f:62:05:66:b1:
3c:08:a6:a8:a8:be:1b:b4:15:f2:ef:5e:9e:ab:26:
85:b1:f3:9b:fe:d2:6e:7c:96:37:12:97:5d:e1:2a:
5c:7b:ba:c2:11:9c:15:c1:f2:ac:aa:c4:c2:88:c8:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:D3:B6:DE:6D:71:81:0C:E8:50:49:B8:00:AC:EA:83:13:77:16
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e4:bd:91:7b:cc:8b:f8:b2:2b:46:9d:d8:67:90:5e:79:5c:
ba:64:bb:89:f0:64:df:6c:57:75:58:e7:49:81:c0:e4:19:9d:
8c:07:7f:78:b3:e7:d6:b1:9b:ab:47:a8:fc:20:13:ef:8f:ea:
7e:10:ff:81:f7:a0:67:b4:77:5b:37:4a:b7:dd:9d:ce:5e:3f:
fa:6a:5f:c6:0d:24:f8:bd:65:83:ee:19:c4:ff:be:a3:0d:09:
13:92:9c:d7:95:99:f7:da:50:37:87:f1:5f:1d:38:b8:ff:33:
a3:e1:33:f5:c9:cf:b4:32:4b:50:6f:e5:20:bd:e7:78:cd:14:
02:e2:a4:41:5c:dc:26:7a:e2:9d:57:05:05:36:8e:78:aa:e8:
69:3f:1b:b7:4d:2a:87:99:40:40:99:f7:b6:4a:a8:15:2d:16:
21:5c:41:c9:f9:63:d6:7e:30:3b:65:7d:46:b7:8e:76:77:2b:
a8:03:c9:40:06:e8:1a:a2:40:21:9f:a6:54:26:81:d4:0c:a4:
b8:af:2c:39:76:b7:78:78:bb:43:13:75:a1:cd:09:5f:8a:be:
9d:6f:05:a3:ea:c6:37:fa:e5:16:91:0e:fd:39:46:f5:51:63:
ce:21:ac:f3:a0:d4:96:21:0a:cc:32:b2:0e:84:8d:a2:4d:49:
39:78:a0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:03 2025 by rpki-client