Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier: s++5maXwNS68C/KOA6CFldJeWUDUCupgr2Ci8qPDttw=
Subject key identifier: 83:38:84:69:5A:FC:AB:60:A8:C4:C0:CF:DE:FD:51:4C:A6:2A:DB:BD
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 019A4E86C3D6F426754F74F08F0F6474C0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 11:00:45 +0000
Manifest this update: Tue 04 Nov 2025 11:00:45 +0000
Manifest next update: Wed 05 Nov 2025 11:00:45 +0000
Files and hashes: 1: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=)
2: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: pn+l2K0+Y5S5kbfoPj0PnBhPZhlWfQVPybmlMXD/s0s=)
3: pmRYb1uVb4ACjy76RWEWI3ry0Yw.roa (hash: dUoaaQCiFIf8aY35CNwZdXTFszULbhBjgaUl5xXn72M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c3:d6:f4:26:75:4f:74:f0:8f:0f:64:74:c0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Nov 4 11:00:45 2025 GMT
Not After : Nov 5 11:00:45 2025 GMT
Subject: CN=833884695afcab60a8c4c0cfdefd514ca62adbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:f6:55:9e:cb:d2:06:07:03:b1:5b:da:8e:
21:43:78:57:1c:62:8f:6e:42:30:ae:5d:ae:b4:0e:
81:49:a1:0e:9a:23:dd:97:ee:76:8c:ed:70:b3:89:
ba:40:21:93:f7:99:f2:38:b5:8e:a8:ff:e3:36:79:
dc:d8:bf:2f:6f:15:51:af:00:51:76:e0:1b:5a:af:
08:61:de:b3:05:7e:b0:c2:05:1b:fd:49:ed:8c:0b:
c4:bb:2c:d4:9a:ad:b2:77:05:68:49:04:49:67:a1:
17:25:af:e7:c9:b4:16:49:28:76:ff:28:d3:6a:d3:
de:8d:41:89:86:5c:a3:dc:2d:ec:a1:a0:71:f6:c9:
3b:8e:ef:b7:ac:c4:79:e5:6a:96:17:ed:4c:7a:3e:
fe:05:f1:12:8a:11:13:cd:07:9b:0f:03:8a:19:d7:
69:85:f1:58:88:eb:f1:92:90:eb:e2:b6:43:d5:c0:
d5:97:3f:1f:f8:2b:0c:01:24:62:48:92:0e:e5:c3:
73:5f:02:b6:4f:a4:3f:db:c5:10:e9:dc:21:a1:b2:
d5:81:d6:dc:a2:e1:9d:45:f3:42:7f:26:a0:11:79:
ca:39:e3:cc:7e:bb:09:7c:1c:86:de:b8:d6:1d:08:
b6:16:17:fb:b2:0c:71:c5:f1:f0:bb:c5:53:01:07:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:38:84:69:5A:FC:AB:60:A8:C4:C0:CF:DE:FD:51:4C:A6:2A:DB:BD
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1d:8e:34:b0:5e:c1:7e:83:b4:38:d7:92:bc:3d:66:2d:ea:
41:34:10:af:d0:b2:ed:bc:a4:4c:dc:a5:03:75:4c:ed:68:48:
38:2d:c8:e0:ff:96:6f:86:6e:5c:da:95:37:ee:6d:55:19:04:
70:6f:4d:12:4c:1f:48:9a:ef:22:d6:e0:32:4b:2a:62:a3:42:
22:9d:36:07:f6:7f:ff:57:83:0e:79:e1:bd:57:d6:ea:cd:01:
71:32:aa:93:09:1c:1d:71:bd:59:cb:ee:5b:70:74:f3:08:f1:
69:c5:27:72:1b:78:6a:33:04:f2:f5:99:c3:1c:29:fa:54:cf:
da:85:0f:a6:a5:ac:65:fa:fb:b7:a0:a0:7f:47:64:5d:09:e9:
b1:1c:b0:48:db:9c:82:ab:63:ad:8f:0e:8f:fd:c3:a5:de:51:
27:76:e8:1c:e4:b6:70:9a:d4:7f:ff:19:b6:2a:90:40:6e:de:
4e:6b:55:0c:9b:be:25:9a:f8:0f:15:03:10:2d:d5:1e:26:65:
4c:47:5c:61:4f:3b:56:5b:df:42:84:b0:df:c3:07:96:63:ea:
d5:72:d6:05:17:ac:ce:7b:e6:cc:fd:85:25:f2:89:1b:44:b7:
fc:ba:94:56:4a:e1:12:d6:e1:4d:e3:28:1d:91:a9:5e:86:3f:
74:69:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:45 2025 by rpki-client