Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier: wxoXj5K+qV11TXs6AGnr8IjI+BoWwTJMgf3Tu3fvAE4=
Subject key identifier: 8B:99:DE:6D:DC:AF:EE:A9:08:2C:A1:7F:B6:70:5A:CD:5D:65:8F:52
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 019A4EF522E54F8936CCE02145C0724BB08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: PIjwt9cncSl25mT3dJ9vyyH9P2g.roa (hash: AHd8tSkEey/Gb5PQrQUs/SSKNf7k6H4ql5Wspc/zuFo=)
2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: 6IhR+/qMdVVRU0fnapzgG0VtTaLRahq1Q88ZmbdkKGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:22:e5:4f:89:36:cc:e0:21:45:c0:72:4b:b0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=8b99de6ddcafeea9082ca17fb6705acd5d658f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:71:74:60:d5:fb:8d:f8:67:0a:6a:48:bc:
a3:88:bd:c6:c4:e6:e9:dd:45:3a:d1:c9:fe:4b:c2:
4e:27:1f:30:56:95:00:21:13:e9:e3:0f:bd:97:a4:
81:ae:b9:2e:7a:4e:75:7c:20:16:af:6a:80:20:da:
11:92:5e:85:06:d2:23:6b:00:e4:ed:36:ef:eb:8b:
6c:85:30:03:8d:c0:23:db:ba:17:28:b9:44:f3:cd:
57:42:da:80:3e:f1:16:60:72:4a:37:9e:e4:22:29:
5b:52:ac:32:e9:9a:02:29:2d:68:d9:51:18:9f:60:
0c:52:0e:93:18:71:d4:a1:8b:e7:d0:54:eb:4a:aa:
0f:66:b6:f0:61:d9:fa:79:48:89:ce:18:17:41:fb:
bc:bb:c5:75:74:08:6c:b8:cf:dc:e6:95:f7:1c:7e:
35:29:7a:36:7a:0e:f6:bd:63:52:12:2b:40:48:5c:
ef:36:53:78:e1:13:ea:b8:75:e1:3a:37:75:1f:50:
6a:2a:1f:e3:ab:cc:1a:e8:ef:5a:7c:92:0c:be:24:
51:61:88:64:6c:f1:df:d0:bd:67:b5:f7:11:54:af:
87:d2:76:b4:d4:ea:28:63:5b:71:4f:05:a6:d1:52:
46:d8:5c:65:8b:95:f5:e7:86:44:9f:ea:01:99:b5:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:99:DE:6D:DC:AF:EE:A9:08:2C:A1:7F:B6:70:5A:CD:5D:65:8F:52
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c6:3f:66:e1:76:fe:c3:1e:21:f3:a1:65:2b:6b:2a:9d:92:
73:91:30:63:5e:37:18:ec:d7:8b:77:31:d6:fd:67:60:ce:8e:
d0:56:c7:b2:ba:20:1a:3f:c4:05:6b:f8:1f:2e:49:1c:a9:84:
f6:83:86:b5:d9:65:15:c9:70:92:ac:e2:e0:0e:fe:28:51:71:
b0:bf:79:c7:04:9e:de:62:bd:6c:08:9c:47:42:8a:e9:13:28:
97:ef:58:4a:eb:c5:16:be:12:5f:c4:55:b8:fa:93:0e:af:1d:
9f:74:2f:15:27:00:fd:68:7a:de:36:b2:c4:6f:10:a0:16:cd:
86:54:46:8f:41:fe:f3:4a:65:b0:b6:5f:8b:7e:7d:8a:0e:f2:
57:d2:56:02:63:05:e7:d2:00:2a:11:1c:96:48:9b:fc:7d:ed:
ea:c8:4c:57:14:07:db:e4:37:cd:83:0f:65:ed:30:68:8b:dd:
55:15:b3:46:e9:4e:49:5d:4a:7f:1c:e7:d0:78:02:66:f9:50:
c3:14:d7:f9:83:2a:dc:8a:b4:cb:e7:f4:09:cb:6d:07:00:74:
09:e8:c1:3b:11:62:78:0b:76:67:3d:4b:c5:6f:a2:a4:2c:c8:
b0:21:3c:50:74:9c:11:d9:0d:cc:4b:06:04:00:d4:5f:58:d6:
60:90:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:45 2025 by rpki-client