Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: /5x9eKLwsxyoW0/2HzRLqVxlOI0b+cP8EcqtilNIFnQ=
Subject key identifier: E5:BD:B3:DE:41:51:8E:16:EF:EC:53:18:08:7A:9A:12:E9:0B:68:DB
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 019A500717DF340022A218ED02FDF7108006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 10D5
Signing time: Tue 04 Nov 2025 18:00:33 +0000
Manifest this update: Tue 04 Nov 2025 18:00:33 +0000
Manifest next update: Wed 05 Nov 2025 18:00:33 +0000
Files and hashes: 1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: V9aWOQ15YrLqEFly5vZrsGO6YOiC67287S1ErRDamKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:17:df:34:00:22:a2:18:ed:02:fd:f7:10:80:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Nov 4 18:00:33 2025 GMT
Not After : Nov 5 18:00:33 2025 GMT
Subject: CN=e5bdb3de41518e16efec5318087a9a12e90b68db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:94:ae:f1:79:22:5f:ab:34:e8:36:c3:b1:c5:
73:4c:e0:20:98:e9:e8:ff:9d:27:6b:84:57:33:b6:
7d:ca:1f:6e:d0:6e:68:98:04:c6:0a:1c:60:ec:e8:
62:21:8f:e3:50:6b:38:4c:f6:b9:d9:fc:ec:ba:89:
92:f5:46:5c:af:8a:72:ef:38:3e:e4:e3:db:e9:7d:
8f:a1:2d:40:17:29:7c:83:b5:29:86:9a:52:ab:7f:
e5:cc:20:23:03:5f:f0:85:6d:df:8c:bc:03:d9:eb:
70:13:3e:4e:16:bf:d9:b1:8e:14:7f:34:9b:b4:79:
76:a2:7f:84:11:06:c3:89:33:32:68:28:ad:8f:a0:
2c:b7:31:52:a9:59:91:48:1e:f3:7f:ee:fa:0a:45:
7a:ad:75:7a:e9:4b:af:f5:7b:40:f6:0d:ea:76:78:
17:c5:e2:61:e6:f2:ec:11:22:40:e5:a3:3f:1f:e8:
5a:24:34:e0:90:24:5b:bd:de:b6:de:d6:36:16:59:
d1:70:79:12:01:92:bf:b9:53:ca:e4:d7:c8:44:25:
6a:41:fa:d1:0a:00:c8:e1:e4:f8:01:5c:32:eb:42:
3d:fa:c1:aa:fe:6b:ab:f8:5a:89:af:aa:da:2f:23:
54:52:bc:2f:91:14:f2:aa:91:66:ea:4a:b5:1b:8b:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:B3:DE:41:51:8E:16:EF:EC:53:18:08:7A:9A:12:E9:0B:68:DB
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c2:5c:e1:e5:a7:02:14:62:54:3e:7a:35:a7:92:82:6f:8e:
e8:48:a7:98:e4:b5:2b:bd:4a:c6:de:3a:00:51:c8:a4:93:9f:
c5:b0:52:3c:a5:55:61:6d:bc:7f:0a:e9:53:d0:09:96:31:10:
7d:99:a5:30:53:ae:0c:2d:e6:58:b6:26:bc:29:48:bd:ee:18:
de:22:84:52:c4:4e:0c:c5:b7:60:6b:55:6d:07:99:85:a2:fa:
c0:16:49:7a:75:44:92:84:2a:64:e2:ad:6c:cc:a1:15:11:9b:
28:e6:88:da:ec:92:23:a1:8d:f9:05:79:90:fd:ac:ad:99:be:
bc:e3:0c:a9:8e:11:d5:c9:b1:c8:67:c6:59:08:91:f2:d4:2a:
58:1f:ea:c4:f5:15:34:b7:a4:a6:77:24:f9:46:58:46:7b:d3:
6f:2e:61:6b:37:aa:d8:6e:4a:ad:4b:dc:b3:f8:29:27:e2:1b:
f2:8d:41:83:99:6c:f6:e5:17:aa:e7:98:cc:50:b7:ac:be:0f:
6e:81:91:5b:3e:0a:44:75:a2:12:7b:41:61:c4:11:0b:b8:00:
90:8c:0d:e7:ec:ca:ec:98:44:f0:e0:63:2a:58:21:e7:d1:25:
7e:d5:e0:36:1c:cf:93:4a:c1:29:5f:ae:8d:c1:14:48:db:d9:
da:ba:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:25 2025 by rpki-client