Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: bUca7RyhBE+IXYbBt07f6m5JyVbO4pXHfLK/tgxODkU=
Subject key identifier: C3:8F:BB:D4:17:EB:4D:67:88:66:A6:2D:1C:39:EC:E8:38:92:50:C4
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 019A4EF468BF7DD0B67246BB7DF30962334D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 037F
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=)
2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=)
3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: keJIPmS0aEseWdtlWwpG4vOlOGEwFq6199kgfT8U/+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:68:bf:7d:d0:b6:72:46:bb:7d:f3:09:62:33:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=c38fbbd417eb4d678866a62d1c39ece8389250c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:09:3e:27:59:c5:4e:16:fc:58:fe:2b:2c:
11:3c:c1:25:f9:27:57:4b:06:a2:d0:33:2d:4b:15:
e9:92:f6:99:c9:cf:31:1b:4e:95:f2:45:8e:b1:e3:
40:38:6d:12:c3:48:11:71:9d:7b:19:fa:cc:6f:ce:
33:09:b1:79:b4:9e:95:a8:9a:30:db:8b:e8:a5:53:
c5:77:b5:ce:ee:65:8f:28:8b:36:32:03:13:f2:f1:
dc:2e:2a:3d:fc:6f:8e:89:3b:c9:21:0f:a7:ad:a9:
36:d4:b7:61:11:b5:df:3a:f5:03:00:20:15:1e:af:
cf:f4:aa:02:f6:60:17:d2:34:94:17:0a:ef:79:48:
c6:2f:b1:01:b3:58:4d:93:cf:03:8b:f7:57:b9:09:
55:6a:40:af:11:ad:d1:97:eb:b8:18:0b:11:ee:40:
72:68:10:5d:92:91:3e:4e:03:5c:89:59:41:bd:2a:
16:9a:45:f8:89:f9:30:89:64:f8:cd:3d:f5:2c:d9:
3a:38:c8:5e:ae:cb:3d:f9:6d:d1:0b:a5:08:28:a5:
31:06:f7:fd:08:c2:4a:32:13:bb:d6:29:27:3a:0d:
3c:ca:c5:b7:3b:ac:c3:a8:eb:e3:97:9e:c8:1b:5c:
7f:b3:ef:16:a5:ce:85:72:1a:1b:57:e8:6e:71:fd:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:BB:D4:17:EB:4D:67:88:66:A6:2D:1C:39:EC:E8:38:92:50:C4
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:99:fe:99:0d:f6:f7:96:40:f8:3e:55:8a:6c:03:f0:e1:d9:
bc:94:d9:76:3e:79:e3:3e:95:75:c2:2e:2e:1c:68:a6:78:32:
f8:4d:b9:11:30:a0:8b:69:18:8b:c1:af:98:ce:8f:c3:07:1b:
b1:23:75:17:1d:12:88:82:84:56:88:13:e8:8d:9b:d2:23:95:
c5:80:c1:97:f0:80:b2:c5:f7:e2:a6:bb:45:cf:d7:6b:d3:7f:
22:a3:3b:d0:66:46:d9:5c:3e:6e:30:84:51:94:89:48:db:93:
a6:0d:06:c2:e9:33:9e:2a:e1:e0:96:fc:37:ee:66:c0:1c:17:
c7:9c:91:63:fe:1c:40:b7:10:ed:fe:58:72:19:07:77:aa:6b:
69:f8:ae:c4:28:9a:6f:76:8b:d4:42:a4:26:d0:12:6c:13:cc:
8a:1b:f2:98:e0:9c:f9:29:8e:a2:1c:96:56:72:d8:57:d3:5a:
ab:52:e5:55:e8:8e:6b:d5:04:cc:c4:d1:81:e6:8c:2c:42:a5:
47:90:fe:72:75:ae:45:1b:0e:2b:6b:e8:b2:98:07:7b:25:e3:
50:07:62:c7:a7:e6:af:35:8f:ca:75:02:c3:7b:d7:01:4a:f4:
6c:36:fb:81:07:79:74:f7:03:00:23:32:92:98:24:d4:44:1d:
d5:af:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:50 2025 by rpki-client