Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: VOWiz0B9C2n9R8raKrFx7S6gj5koN7MuruSJN+8f3Ao=
Subject key identifier: 8F:09:1E:46:3E:05:C2:BA:4C:37:FC:CE:1C:81:22:95:F6:01:3E:EB
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019A4DE176E2DFEAEB028E16C633FD023B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 14CB
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: tziIxRojLuqWdN3dvPyJRtNYytjzcCjSs9iFMhnKisI=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:76:e2:df:ea:eb:02:8e:16:c6:33:fd:02:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=8f091e463e05c2ba4c37fcce1c812295f6013eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:62:ca:73:1e:fe:dd:a1:cc:3a:29:77:0d:
f3:ed:ee:ee:ae:a9:fd:7e:44:c6:e3:df:57:7c:09:
bb:13:c6:91:fc:21:58:9b:d0:45:10:fa:0b:fe:50:
45:27:1d:85:4f:c1:a9:de:e8:45:e8:ea:2c:ac:3a:
40:53:c5:18:36:98:da:ff:ba:da:28:e9:9c:97:f6:
e4:d4:71:9f:84:9e:bd:7e:6f:27:21:ab:dc:a8:c2:
8b:ee:a7:68:51:5b:ff:e5:2e:75:d4:3a:c5:b6:15:
d6:bf:53:72:6c:4e:f3:68:b2:1c:06:20:4d:7f:0b:
c4:9f:c4:c1:30:bf:30:f6:c2:a2:39:ee:67:9a:65:
b6:2c:d2:5f:9b:ac:60:23:c5:e8:9b:6b:37:c1:91:
a0:87:64:4c:e2:48:7b:96:1c:42:03:70:4e:39:c9:
f3:86:a7:66:05:85:7a:69:e0:91:76:58:f1:18:6a:
18:64:83:92:3b:aa:00:71:b7:33:6c:9e:30:7a:ee:
f4:70:91:e6:dc:b5:6f:be:f0:1f:90:59:07:ea:0f:
e6:ec:46:d2:43:5b:be:b1:a1:39:02:bc:8d:70:78:
ec:f2:d1:50:90:63:c4:02:91:5b:3a:6a:7b:00:43:
ec:c4:76:d3:9e:ac:4b:8a:4e:33:b5:e3:00:59:4b:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:1E:46:3E:05:C2:BA:4C:37:FC:CE:1C:81:22:95:F6:01:3E:EB
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:92:44:5c:17:5a:49:0e:bc:ed:2b:f7:32:46:c7:9a:ec:81:
8c:8b:70:69:1d:5c:45:6d:c4:8c:b7:3e:4a:f2:ed:26:a1:98:
d6:d4:ba:49:a2:eb:68:59:f2:b9:62:0e:82:75:97:b8:68:41:
0a:fc:bb:87:da:a5:51:71:f8:40:5d:b2:56:1d:5d:14:2f:b6:
a0:43:e0:17:db:5f:cf:b7:a5:2c:79:89:1d:e4:4f:62:6d:55:
67:8a:26:a5:d7:76:2a:e7:42:35:92:75:4a:3b:25:27:20:bc:
51:8e:b1:74:66:3f:76:10:c3:28:9d:4b:d2:8f:02:e3:e4:cd:
e7:a0:18:ae:63:ed:17:7a:80:75:1e:56:ed:f7:bf:35:16:6f:
10:16:b0:e0:53:f3:18:f6:d1:2e:a4:9e:d0:84:a1:67:ce:1c:
3e:73:ce:4f:06:62:08:98:c5:db:dd:2b:2e:61:d7:9b:47:60:
9e:e3:8b:aa:f9:9e:7b:85:9e:f2:6d:5f:31:41:e4:69:4a:ac:
df:75:47:d6:ea:91:46:29:b6:ed:91:69:5b:62:32:9c:af:75:
69:30:68:ef:28:ad:72:dc:a3:17:b1:9d:77:da:c9:61:06:64:
ca:cf:3c:ee:62:8e:2f:37:63:ef:3f:7c:b3:b9:27:ed:2e:77:
d4:16:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:48 2025 by rpki-client