Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: B/pA+yyb8gFhTM/HiSAKFlv8EZReBqlPRCOrOc86RUc=
Subject key identifier: BF:56:79:12:BF:22:EB:FB:E3:25:9C:10:B9:7B:94:C7:F0:C4:FF:8E
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 019A51BE2657BEC89C9D75A8444005C37751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:00:07 +0000
Manifest this update: Wed 05 Nov 2025 02:00:07 +0000
Manifest next update: Thu 06 Nov 2025 02:00:07 +0000
Files and hashes: 1: 26TbrymsKsZjBkQHIbbRRWaFR8Y.roa (hash: SWIdCtaxTysSBJj/hZn1IHZ7qzsZ9zOqjJPPtoUQNGw=)
2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: EYD0LHDxoeUjX3WCpLQ6un+1BdumbgbkQAhnCuNb7FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:26:57:be:c8:9c:9d:75:a8:44:40:05:c3:77:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Nov 5 02:00:07 2025 GMT
Not After : Nov 6 02:00:07 2025 GMT
Subject: CN=bf567912bf22ebfbe3259c10b97b94c7f0c4ff8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:4e:6c:6b:f9:e3:aa:f6:ff:dc:99:73:e3:
7e:96:47:58:ea:fe:a7:a8:a3:f4:c0:4f:6a:e9:10:
d7:5c:4e:9c:3c:3b:e8:a1:d1:e6:09:cd:7f:b2:9d:
aa:57:94:29:a0:3e:49:f2:ce:31:df:7e:cc:2d:97:
22:d0:94:83:fd:3a:15:7f:1f:a2:a0:e8:e2:cd:66:
1a:3a:77:cb:e2:0a:cf:eb:cc:3b:0c:5f:4d:bd:bf:
5b:13:f4:3c:35:21:64:9e:c5:95:b1:4c:3b:ed:f6:
f2:e1:62:f8:cf:2c:25:9b:e4:98:62:e3:d2:6b:2a:
f8:10:33:da:76:5f:38:e1:b2:1c:46:79:76:23:b2:
30:6a:c4:a9:b0:5b:bf:83:3c:71:e4:38:35:4d:b4:
5e:fc:81:47:87:1f:61:69:26:66:63:56:25:72:33:
84:95:56:5f:41:78:7f:26:c7:9d:b8:21:f4:75:b9:
66:bb:d0:65:56:00:1a:e0:c9:0c:cb:b8:85:75:44:
37:ed:8a:0f:6f:25:e8:57:62:c9:37:f0:93:4e:f9:
28:b9:9e:db:78:a7:f8:0c:37:94:c5:e0:79:0f:a6:
59:3f:9a:ac:c9:5a:b6:06:28:11:c6:b4:68:45:e9:
d8:21:03:f3:62:8a:f4:cd:bb:ea:17:47:d2:8d:a9:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:79:12:BF:22:EB:FB:E3:25:9C:10:B9:7B:94:C7:F0:C4:FF:8E
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:25:e9:72:bb:18:43:bc:e8:32:23:82:f4:c1:7d:cd:ad:
9e:15:89:83:fc:62:be:ea:7d:bf:2d:19:0b:1c:d3:a2:95:0e:
91:be:c5:8a:ea:64:9e:a5:40:70:26:4b:58:7e:8b:25:f6:27:
93:c9:13:eb:7f:0c:87:f6:85:6f:a5:0b:b8:1d:27:10:26:f2:
52:3b:79:f7:5a:a8:82:82:a5:77:c8:8e:46:5d:5a:70:11:41:
f7:12:a2:4b:14:12:6f:7f:c7:0d:78:eb:6e:fd:44:ce:f0:68:
70:ab:39:05:93:79:3d:bb:2c:c8:74:d3:4e:95:f0:a1:6e:35:
04:95:24:b1:e2:37:1e:d7:38:4e:08:1c:1a:18:0a:c6:95:c6:
0e:37:de:ab:4f:29:5e:8c:a8:45:dc:d7:9f:2e:e1:31:9b:d4:
ca:92:b2:7f:0b:06:65:08:b2:64:86:9f:2b:09:09:07:75:06:
e7:61:db:38:80:34:06:cd:dc:e8:98:c6:4c:5d:2f:77:a9:f7:
10:65:c2:1a:2b:85:58:3d:87:73:68:12:bb:86:fc:99:74:80:
90:84:ec:9d:4a:97:35:de:bc:3c:71:c2:d8:6d:d4:a5:52:13:
f9:5d:25:40:05:45:8a:91:3c:89:53:04:65:1c:23:7b:c0:2c:
aa:44:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:26 2025 by rpki-client