Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: aIzVGAwzrXvTi/8ld6srKzJqbkr0vsratssWXtQ/Cc0=
Subject key identifier: D4:BD:38:37:83:3B:CD:01:D3:79:F9:6E:EB:DB:61:A3:E7:26:6D:19
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 019A4E1878922E6CED1696480C5F8B0C95D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: ipzsTNA9P0sJ1BLy7fV2t+nonc7GVkd1l7dynGlioZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:78:92:2e:6c:ed:16:96:48:0c:5f:8b:0c:95:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=d4bd3837833bcd01d379f96eebdb61a3e7266d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:cd:46:4f:d1:cd:33:f4:c3:dd:1a:18:1f:
8d:14:94:c2:35:16:3d:d5:17:f6:bb:0b:e1:7c:5e:
dc:82:cd:ef:0a:5d:20:9d:1e:d4:49:12:20:53:b9:
a2:02:6e:6a:eb:d6:d2:e7:30:20:81:43:62:f4:43:
ac:17:a6:a1:48:0b:7b:bb:24:ec:7d:fe:46:81:8d:
54:44:6a:a9:06:ae:31:15:f5:33:2f:de:96:3e:df:
77:45:d3:b7:31:fb:79:11:4b:90:d1:34:30:f8:71:
f4:c6:52:d4:95:fe:37:4d:0b:d8:be:d2:3a:60:a8:
2a:25:27:eb:0e:7d:eb:2b:2e:36:14:94:dc:c0:cd:
29:a8:73:45:55:8c:38:d2:24:37:27:d8:b8:39:9d:
4d:d0:c7:f7:46:f2:c2:e4:97:bb:68:cc:92:48:85:
d1:7d:fa:da:bf:6a:b1:5e:da:59:89:cb:a8:4c:b6:
39:b0:97:29:6d:61:99:cb:91:b9:0d:5c:0f:d5:28:
4f:5d:15:f9:3d:fe:31:15:1d:eb:09:00:a3:46:ec:
6f:87:52:b0:e2:30:84:15:83:ac:66:ba:ab:6e:73:
dc:52:f5:f5:0f:aa:18:93:44:45:45:a6:a2:c1:ab:
af:75:3a:70:5b:59:66:03:32:e8:b5:ea:cb:c5:fd:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:38:37:83:3B:CD:01:D3:79:F9:6E:EB:DB:61:A3:E7:26:6D:19
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6c:31:49:4a:63:d6:cf:fc:5c:04:9c:84:44:ca:b8:5e:f5:
43:0e:40:1f:71:61:2c:3c:18:fe:11:dc:e7:18:00:ad:00:c9:
6b:41:de:8f:56:4f:f1:51:ba:11:1a:63:75:19:86:13:51:db:
87:d4:8a:80:4c:52:e0:46:2b:02:17:4c:aa:f1:a5:98:68:fe:
1b:a8:62:85:5a:9c:4f:85:8c:ad:49:b5:7a:36:53:3d:6c:48:
e8:87:5f:7e:b8:7e:c3:2c:5f:0b:da:4f:45:c1:ce:dc:17:78:
e3:fa:f3:b0:5c:7e:86:0e:64:d3:52:57:00:7c:cc:6f:f8:9c:
2f:82:f5:eb:0f:83:6a:af:48:8f:fe:9a:53:e6:70:dc:5a:c1:
30:83:74:30:61:0d:88:00:6e:be:f0:6b:9c:d6:c2:96:0d:ff:
89:57:a5:08:51:0f:55:e7:c8:af:1e:f0:a6:df:c6:68:57:f2:
e0:8d:96:c8:22:a6:34:d7:5e:00:05:f5:a7:79:73:95:75:c4:
58:04:ce:44:da:3c:c7:c9:d7:b8:36:a8:b2:b5:d6:7f:91:22:
fd:d1:fc:3d:a8:5e:6d:61:31:fe:47:e8:44:fe:53:cd:15:67:
31:a5:b0:e4:85:5c:2a:89:84:c3:c0:47:6a:73:ae:2c:34:19:
c0:bb:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:21 2025 by rpki-client