Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: wSGqCNN0PRIZhkLxgAyoK0D8GOA8Dsen4cOZMrXWJlo=
Subject key identifier: 07:4E:1F:49:36:19:7E:FE:35:63:DF:CA:92:1E:3D:FB:70:C1:E4:9C
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019A4F995508A4E73C49DF9725BFF8D87BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 1444
Signing time: Tue 04 Nov 2025 16:00:40 +0000
Manifest this update: Tue 04 Nov 2025 16:00:40 +0000
Manifest next update: Wed 05 Nov 2025 16:00:40 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: bmuVMYpEdBV3AzKjm4brDXxdhko3Tfi0FmNdhDs0vX4=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:55:08:a4:e7:3c:49:df:97:25:bf:f8:d8:7b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Nov 4 16:00:40 2025 GMT
Not After : Nov 5 16:00:40 2025 GMT
Subject: CN=074e1f4936197efe3563dfca921e3dfb70c1e49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:37:8c:65:0b:39:d8:41:7e:ec:91:d6:ad:
07:36:10:df:a9:99:93:03:d6:61:a3:ec:96:b4:38:
8f:a0:a5:65:c1:d1:b7:af:e3:7c:f1:3c:20:ae:49:
ee:b7:a6:69:98:3d:36:d5:41:45:09:74:97:ac:80:
27:a0:97:d6:84:26:7a:4b:0e:23:d4:71:ea:94:1d:
37:75:f9:23:1e:55:95:94:08:cf:ef:22:06:d8:70:
63:5e:77:2f:d2:57:81:06:b6:ec:e9:d1:50:c0:02:
56:5b:3a:ba:33:ce:ff:49:c6:45:e5:cc:07:c0:cc:
dd:20:93:f4:76:00:4a:c2:28:24:c5:be:ac:10:a8:
a7:34:23:ed:3f:49:ff:f6:1e:50:50:df:96:41:24:
3f:3a:cb:d7:6c:e2:01:e0:d6:eb:21:b3:73:f0:62:
9b:2c:3d:f6:eb:13:dc:22:3c:7f:8b:e9:62:eb:fd:
34:7d:47:2a:55:c7:d9:2b:ad:70:f7:88:45:e1:c2:
1a:03:c8:41:29:af:73:da:fa:9d:2b:b9:c8:ac:5d:
4c:af:5b:c5:d1:f1:3a:66:1c:fd:3b:40:14:81:b5:
3e:5e:da:b0:7b:1d:7e:b4:cc:a0:7a:b3:08:38:7c:
60:33:61:8d:50:44:43:54:4d:03:eb:ca:55:62:b2:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4E:1F:49:36:19:7E:FE:35:63:DF:CA:92:1E:3D:FB:70:C1:E4:9C
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c4:8d:76:0c:f1:87:97:4c:74:b9:e8:0a:c0:df:43:ff:76:
a9:22:bd:9d:dd:6e:79:da:f3:17:b0:54:a6:01:3e:c8:c9:b0:
63:f8:b7:44:3a:6e:38:b2:0c:0a:eb:d8:8f:aa:4e:8a:61:c5:
b2:0e:18:70:1b:36:9e:20:e4:5b:1b:4c:1b:88:0a:d8:1b:fe:
b3:7c:b1:5d:ff:c9:a5:0c:59:83:ff:e6:98:d4:05:5a:21:3a:
e4:4e:27:6e:4c:8d:b7:9e:ce:a2:bf:39:ea:37:6e:95:0f:78:
47:1f:28:6b:23:9a:e3:aa:8f:23:11:1b:4a:31:84:f6:bf:33:
d5:6c:3c:d6:be:72:e7:e4:c2:77:1d:40:d7:db:90:21:15:e8:
05:ea:92:70:16:8b:02:5b:94:cb:12:be:43:78:3c:30:d2:55:
2d:6b:41:d8:4d:83:4f:37:c8:76:19:99:93:2e:84:0e:a7:df:
64:60:89:30:a3:8b:84:b5:91:c3:be:b7:0a:84:ed:e7:9d:7a:
10:e6:05:29:9a:e9:25:49:f8:f8:47:e4:e7:4d:e7:de:78:81:
dc:86:79:84:a1:a2:b7:c7:e6:e4:f6:a4:3f:36:22:26:fc:eb:
cc:6c:6b:37:a9:3f:93:da:b9:31:0e:8e:15:1c:3e:3b:e3:e1:
2f:b6:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:34 2025 by rpki-client