Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: fw8elI40xBcrOmJjfheaMesAz03FX1ycjU248zyNzHs=
Subject key identifier: 9A:59:AC:CB:A0:21:FD:AA:34:61:AA:AC:54:E1:DA:97:05:B2:A3:60
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 019A4DE1D8E2C6B41AEB3C633FAB71114069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 04F9
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: X0-Djm0vHdUiJwsWds74O566gnw.roa (hash: wptFaY0ZwFbGnw/VuRN3robTidxbKoo/tyvxKrOBB/E=)
2: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: 0IfKAU/xPfxP9EVRzSwFnkRPK+zUM8vgjDqc0FoSojs=)
3: wfeH5shQb9p8-APifaQwZCuXjuw.roa (hash: i3m8mYv5PGE+aCaz85jAgzkj3ipmT/iJy2vmh07ZehU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d8:e2:c6:b4:1a:eb:3c:63:3f:ab:71:11:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=9a59accba021fdaa3461aaac54e1da9705b2a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:de:c9:50:e7:10:e3:a9:de:90:87:9f:f2:
82:9e:e9:4a:fe:b2:9c:99:c7:5c:ae:70:27:2d:98:
8f:38:e4:e3:7d:ef:f8:fb:e1:9f:e7:a1:ce:27:93:
51:7a:e5:af:8d:da:86:82:de:8a:94:a0:a1:63:78:
30:2e:89:0c:18:38:c2:10:ac:f3:52:ac:02:86:72:
52:cd:3b:f3:6a:58:e0:e7:15:ad:61:97:52:98:d5:
b0:08:8b:f1:bd:85:81:73:14:bc:ac:8b:5b:bb:e5:
af:71:74:1c:32:1d:c9:ac:b5:6d:f8:23:09:60:4f:
1b:b4:06:b0:a2:c8:e4:25:3d:e0:ee:74:7b:bd:12:
aa:3e:20:ba:4e:ac:dd:10:3c:7c:4f:b0:78:e8:87:
01:d8:b9:3a:6a:63:9e:c9:54:a0:41:1a:9e:2a:a6:
80:02:54:da:e8:21:4a:23:22:8d:33:1c:66:ff:31:
a0:78:d9:f2:a0:c8:06:29:cc:0c:c4:a2:29:40:8d:
6f:37:2b:c4:da:90:1b:1b:9d:ac:c7:73:86:47:0c:
41:02:76:ae:e5:bf:20:db:7b:b0:ab:7d:f1:43:d7:
9a:28:04:ba:62:f7:eb:62:79:92:8a:02:ed:a2:77:
c0:e0:6c:9b:23:f8:f0:70:f0:3e:f0:c6:d7:8c:aa:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:AC:CB:A0:21:FD:AA:34:61:AA:AC:54:E1:DA:97:05:B2:A3:60
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f2:c3:40:59:6a:8f:87:56:60:08:90:37:e6:3f:0c:ef:cb:
15:c5:c4:83:29:06:31:74:a6:f0:b1:7b:77:0e:cb:7e:b2:70:
4e:ce:d8:8c:04:10:48:ac:bd:0c:58:5f:d5:f4:c2:1b:08:55:
47:2d:f7:31:3d:ec:c9:c5:c6:67:16:b0:bc:bd:11:2c:b6:b2:
eb:eb:d3:09:cf:b8:d3:38:a0:c1:4d:b1:5d:7a:4c:f5:2d:c4:
8b:e7:6d:d9:c9:3e:e7:49:0f:62:b4:d6:7f:7a:fa:cf:73:5e:
28:cc:36:83:8c:e8:80:ef:ff:36:7e:8a:ce:07:6b:6a:1a:29:
a0:c1:27:b2:b4:9e:a0:ba:7f:f8:88:03:8f:1c:79:3a:97:87:
3e:54:57:ad:12:ad:3d:8b:95:de:fa:e6:2c:c0:e3:1a:68:0e:
e4:39:b2:e8:48:cf:d2:7b:15:18:65:67:80:74:c9:c9:e4:d5:
5c:de:8c:f1:ff:1e:42:29:e9:3a:67:99:e6:47:75:40:ce:ef:
fb:08:8a:c5:8a:a2:47:45:65:1d:10:97:0c:3b:13:b9:a6:ba:
d9:db:56:71:b9:73:7a:1e:ba:1d:9f:45:a2:36:e9:93:83:c0:
b4:5f:bf:43:9e:e0:91:2b:9b:ad:89:08:f9:0a:0c:2c:94:bd:
a4:64:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:06 2025 by rpki-client