Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: j54fM4GCPkgnH5HeEkt3QpB/wYcpHcxUJIbTesrQVZI=
Subject key identifier: 5F:4A:BD:28:19:EC:32:66:10:B2:36:F6:11:25:25:E8:64:DE:EA:C2
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019A50AB7840B3C66EF6F335928556DC9570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 21:00:05 +0000
Manifest this update: Tue 04 Nov 2025 21:00:05 +0000
Manifest next update: Wed 05 Nov 2025 21:00:05 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: DkV3Ei1DjVhUWUcnN8GalImNp7RNTU8sgh25O+ZvwtQ=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 21:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:78:40:b3:c6:6e:f6:f3:35:92:85:56:dc:95:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Nov 4 21:00:05 2025 GMT
Not After : Nov 5 21:00:05 2025 GMT
Subject: CN=5f4abd2819ec326610b236f6112525e864deeac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:7e:f2:83:f3:29:28:57:6c:b6:8d:a4:35:
3c:cd:64:0a:13:92:7e:20:70:4e:38:0a:c6:67:c5:
7c:ed:33:39:61:ed:e9:24:b6:2a:bc:b9:6c:56:13:
2c:01:c8:2e:90:e1:95:1b:e2:d1:8e:53:66:ca:12:
cb:d3:93:63:ec:c6:12:9a:90:c5:ef:58:7d:7e:a6:
90:b1:df:a7:62:8a:7f:e9:99:65:6a:c7:1a:5f:2b:
0e:1b:ce:09:7f:b2:95:60:01:76:60:21:f8:16:41:
24:e6:41:58:7a:05:d1:87:1f:b5:a7:21:8c:4c:78:
be:9b:42:c3:20:58:59:dd:8f:05:83:ff:60:9d:d7:
8e:90:cd:ea:64:6d:46:92:67:e7:65:bf:d8:d0:c5:
89:ea:a2:73:9d:9d:40:d1:45:68:37:b9:ec:88:d4:
ac:76:8c:6b:c6:38:18:97:17:12:df:2e:c1:77:4a:
c8:e9:31:58:78:5e:25:71:48:5d:22:b5:f7:85:20:
74:e8:05:1f:1b:dc:d5:89:05:da:61:b3:60:65:34:
db:6d:16:dd:f3:5c:35:08:4a:82:f5:ce:c7:98:72:
b2:ff:cb:9d:24:3f:9d:c1:9e:a0:d3:f8:e4:77:45:
93:a3:d7:b3:aa:f6:d6:d8:26:94:9a:fc:1b:db:42:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:BD:28:19:EC:32:66:10:B2:36:F6:11:25:25:E8:64:DE:EA:C2
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:46:ca:63:7e:a0:df:de:bf:e0:97:fc:28:45:33:7e:12:
e9:69:9c:b0:9c:5f:3e:95:7e:2a:b0:6e:5e:02:d5:ae:23:ae:
6e:f3:43:02:0a:e6:8c:d5:8a:3f:db:fa:47:86:43:fc:e8:00:
3f:77:92:b0:c9:92:c6:6a:3d:b3:17:f7:7c:7a:c1:f9:34:2c:
26:f7:8d:a0:aa:e1:e7:dd:ff:6c:2a:3d:56:f1:5c:c2:8e:3f:
5f:82:d3:dc:4e:17:c4:1e:79:e5:64:cd:f9:f1:27:35:72:3d:
c1:70:e1:b2:a9:f1:c2:3d:33:0b:e3:08:e4:8c:38:c7:9e:4a:
8a:8b:1e:bd:8f:3e:c1:0c:f6:19:a6:2a:4a:a8:9a:8e:ce:db:
cf:43:1a:a0:fc:12:4d:5e:8f:72:8b:4b:d7:b6:5f:40:64:be:
73:5a:62:90:c6:7e:17:5e:a4:72:af:6b:01:e8:ee:fd:04:41:
da:67:60:b0:15:69:3e:16:f4:7a:db:c2:45:5a:05:04:35:f8:
3b:45:88:af:2c:54:4c:e8:ad:c0:da:a7:5f:39:a0:b6:f4:cb:
e4:0c:a3:88:f1:8d:d8:e8:2b:ab:e4:99:18:9d:e6:05:e4:fa:
4b:41:d0:4e:93:5b:a3:0d:c7:7e:58:49:c4:00:f2:b3:47:b5:
27:11:4e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQq3hAs8Zu9vM1koVW3JVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj
YWY3ZWYwHhcNMjUxMTA0MjEwMDA1WhcNMjUxMTA1MjEwMDA1WjAzMTEwLwYDVQQD
Eyg1ZjRhYmQyODE5ZWMzMjY2MTBiMjM2ZjYxMTI1MjVlODY0ZGVlYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mx+8oPzKShXbLaNpDU8zWQKE5J+
IHBOOArGZ8V87TM5Ye3pJLYqvLlsVhMsAcgukOGVG+LRjlNmyhLL05Nj7MYSmpDF
71h9fqaQsd+nYop/6ZllascaXysOG84Jf7KVYAF2YCH4FkEk5kFYegXRhx+1pyGM
THi+m0LDIFhZ3Y8Fg/9gndeOkM3qZG1GkmfnZb/Y0MWJ6qJznZ1A0UVoN7nsiNSs
doxrxjgYlxcS3y7Bd0rI6TFYeF4lcUhdIrX3hSB06AUfG9zViQXaYbNgZTTbbRbd
81w1CEqC9c7HmHKy/8udJD+dwZ6g0/jkd0WTo9ezqvbW2CaUmvwb20KcrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9KvSgZ7DJmELI29hElJehk3urCMB8GA1UdIwQY
MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt
MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh
LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmFGymN+
oN/ev+CX/ChFM34S6WmcsJxfPpV+KrBuXgLVriOubvNDAgrmjNWKP9v6R4ZD/OgA
P3eSsMmSxmo9sxf3fHrB+TQsJveNoKrh593/bCo9VvFcwo4/X4LT3E4XxB555WTN
+fEnNXI9wXDhsqnxwj0zC+MI5Iw4x55KiosevY8+wQz2GaYqSqiajs7bz0MaoPwS
TV6PcotL17ZfQGS+c1pikMZ+F16kcq9rAeju/QRB2mdgsBVpPhb0etvCRVoFBDX4
O0WIryxUTOitwNqnXzmgtvTL5AyjiPGN2Ogrq+SZGJ3mBeT6S0HQTpNbow3HflhJ
xADys0e1JxFOhQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:24 2025 by rpki-client