Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: klsOpAU3q1wh4ff0giZ6/xywc6jqeaI50t7h5wclbRU=
Subject key identifier: 34:A2:81:CF:26:74:A5:7B:1D:7F:57:C8:9D:AB:E5:A8:C5:79:53:F9
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019A4D3D45093569E14B7BA7668BE76BBE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 05AE
Signing time: Tue 04 Nov 2025 05:00:52 +0000
Manifest this update: Tue 04 Nov 2025 05:00:52 +0000
Manifest next update: Wed 05 Nov 2025 05:00:52 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: G5R90hrL2xqLVf3dMJmO9tgtUuhcfw4yV86Zowvio88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:45:09:35:69:e1:4b:7b:a7:66:8b:e7:6b:be:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Nov 4 05:00:52 2025 GMT
Not After : Nov 5 05:00:52 2025 GMT
Subject: CN=34a281cf2674a57b1d7f57c89dabe5a8c57953f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:48:ce:8f:76:cf:41:d6:7b:09:10:29:f8:
a0:fe:16:33:47:1a:f7:de:af:f6:32:2f:02:88:58:
71:2f:0e:da:bc:78:1b:df:2a:3c:c8:ec:f7:5e:02:
0b:21:69:20:18:4f:2c:3e:0a:c7:3e:bc:ea:3c:54:
eb:85:30:09:d4:3d:50:0c:fa:36:f9:da:a5:19:53:
e0:27:60:41:3f:f9:be:42:a9:23:31:16:c6:49:f4:
97:e6:e6:1d:fd:ad:31:a4:c3:01:a4:9a:ca:c9:40:
66:93:9f:86:97:8e:a4:1e:10:8a:86:89:b9:ae:a5:
9b:83:68:7e:93:c4:1d:10:67:b4:ca:00:5d:70:9f:
7c:ad:51:ad:3a:fe:91:07:e1:38:d0:58:64:b7:a0:
99:6f:f7:dd:60:e9:b9:24:df:30:88:34:2e:5f:17:
22:67:f7:83:d0:7b:5c:ec:32:3a:dc:35:fa:4a:74:
41:49:30:02:ed:77:52:b1:36:27:b1:3e:40:b6:54:
3d:81:88:b5:02:49:e1:90:5e:89:03:ea:70:c5:ab:
95:ce:bb:84:31:c2:0b:be:64:83:ee:4e:1e:be:ba:
da:28:3b:a3:f5:49:b1:6f:92:b4:5e:18:82:fe:f3:
10:92:74:41:f5:19:0d:70:37:fa:fd:c7:9a:2f:19:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:81:CF:26:74:A5:7B:1D:7F:57:C8:9D:AB:E5:A8:C5:79:53:F9
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:97:13:57:0a:a4:93:56:44:84:89:36:aa:24:5d:ce:53:f6:
dc:a3:66:28:02:e8:5d:af:a1:e6:b8:59:85:d5:cf:94:80:fb:
31:63:26:17:42:87:48:38:61:c7:0f:31:07:2b:49:3b:7f:99:
c8:ca:f6:bd:19:8d:d9:ba:4a:e0:36:2f:e2:a3:bf:00:fb:77:
9a:98:ac:53:12:45:fc:fb:24:99:50:20:49:e1:64:7d:59:d5:
5f:8c:41:88:18:c3:74:67:50:c8:8b:b5:26:1d:64:c0:16:e8:
dd:3a:e7:07:f4:f1:8a:86:7f:f2:7a:83:98:b5:6d:92:00:8c:
cd:74:28:b2:71:7d:04:e7:c1:44:0d:81:ef:0f:df:4f:01:f7:
a2:1e:25:29:c0:ef:bc:d3:1b:57:6c:5a:a2:27:11:f9:f1:79:
31:47:29:1d:9f:e0:a9:a5:70:4c:52:5b:7f:f8:74:b5:3f:df:
af:a1:61:d2:aa:1f:4a:0e:20:b1:1c:1e:e8:25:01:0d:97:dc:
b6:bf:cf:49:75:b1:c3:72:c4:e2:87:ba:83:d1:cf:db:90:ea:
87:1f:43:2c:45:05:b2:44:58:28:cf:b2:e3:ef:2e:d0:4f:6a:
c0:b2:aa:0b:6b:a0:42:7c:36:fc:48:4d:09:12:31:6c:ad:56:
d2:c1:1c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:15 2025 by rpki-client