Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: Z2bFs5kx1mYa+/xPE/ZaA18sFhdj8S8HWop5Cqi/3l8=
Subject key identifier: 3D:86:9F:C0:A1:A9:B4:93:07:DA:E8:A4:92:AB:94:36:9E:BE:D9:2D
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019A5B9D7D026171A5B467F81923BB97D81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 171B
Signing time: Fri 07 Nov 2025 00:00:39 +0000
Manifest this update: Fri 07 Nov 2025 00:00:39 +0000
Manifest next update: Sat 08 Nov 2025 00:00:39 +0000
Files and hashes: 1: NFVItNq2OuycBZAKwujdNRPdjR4.roa (hash: kFLAiEsjdkmomPuGBpZgEpCt6qeMdIVgeardYp2BucY=)
2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: zqKzjhr9h3alEp2TGsUcqZZFI10WePOwYwvfQKxfkh4=)
3: QheNcxsOMuaxLgjUMz8IKhAE4zI.roa (hash: 1qU8I97VIdY7GQVn2XafsvIYaI5J0RtyUS8ikCjbw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 20:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5b:9d:7d:02:61:71:a5:b4:67:f8:19:23:bb:97:d8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Nov 7 00:00:39 2025 GMT
Not After : Nov 8 00:00:39 2025 GMT
Subject: CN=3d869fc0a1a9b49307dae8a492ab94369ebed92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:14:ec:f7:81:5a:cd:62:07:73:ef:fb:58:
f0:36:72:e9:55:a9:ce:3f:31:c0:01:5f:20:8b:94:
e3:63:e4:c1:83:34:a4:cc:e4:23:d0:e2:e0:b8:21:
81:0b:2b:93:04:4f:4f:e1:54:5c:c2:18:b8:46:45:
04:65:f6:a9:d9:b9:fd:9b:e1:4c:a3:4f:5a:d1:94:
00:38:96:c9:d6:92:37:d9:af:ab:a6:3e:e8:69:5c:
78:a0:2c:a4:a1:5b:7c:15:3a:2a:80:2a:02:61:c7:
8c:d6:b2:cc:b4:76:39:bb:7e:4b:ee:a2:df:48:95:
b2:45:96:0d:90:31:3f:22:4b:32:d0:44:d3:4f:ad:
b4:b2:c7:5d:81:2b:9b:8d:c3:32:2e:43:66:83:49:
6c:91:8a:d4:b4:50:65:6f:a5:36:03:23:80:34:e3:
12:fc:75:55:85:17:62:3b:2d:f4:f7:b9:d0:9f:06:
d0:a8:b8:3d:4f:79:5c:2b:fc:50:85:62:d8:75:9f:
cb:8b:91:b0:70:7d:b3:12:a0:a5:39:ca:dc:29:53:
45:7d:48:00:80:12:cd:80:c4:7e:b5:9d:e6:03:6a:
11:57:92:7f:e8:0c:fb:78:aa:cb:6e:92:25:92:bb:
5e:e9:30:ae:2c:40:ce:d0:6d:f3:95:5e:29:a3:87:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:86:9F:C0:A1:A9:B4:93:07:DA:E8:A4:92:AB:94:36:9E:BE:D9:2D
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a2:05:d6:f0:d3:fa:74:d1:81:a3:72:75:7f:30:d5:43:99:
e9:b3:23:a3:77:e5:95:16:8a:59:7a:64:cf:bc:fb:60:cd:9b:
5f:da:47:7e:51:e0:95:76:d4:e0:2c:49:42:0d:e4:45:ae:d7:
d9:df:a7:bc:36:53:8d:4e:b6:ef:85:6b:60:69:e8:33:76:4e:
81:d0:98:6b:1c:6c:ff:c8:9a:02:4d:cb:ca:f1:9c:36:8c:73:
c9:31:9b:54:46:6f:07:45:f6:19:61:e6:24:6a:f3:a9:5a:4d:
e8:ab:56:f5:e7:90:47:b4:2a:53:76:d5:f8:95:f2:45:7f:41:
73:11:c2:87:cb:f7:ac:e8:aa:f0:68:29:1c:a0:3d:bc:dd:37:
e1:31:51:83:3c:db:0c:8d:c9:d3:29:4e:23:45:1f:6a:d6:77:
33:88:c3:52:49:95:14:b2:20:df:60:d2:65:b3:43:c4:08:e8:
c1:6d:ac:c8:8e:21:19:34:4b:51:12:77:bd:56:77:30:df:1a:
6d:20:95:54:80:0d:fb:16:0c:67:3c:ed:91:b1:98:78:40:60:
4f:36:f2:75:1d:e1:b9:06:a8:42:77:0f:c6:6d:d2:37:dc:92:
bc:3e:25:fa:70:e2:46:67:cd:1e:9f:80:cf:0a:82:50:24:bc:
23:ee:ef:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 04:37:10 2025 by rpki-client