Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
File: OXbmqwhMnu7ehuKva95yFSdLlac.mft (raw, json)
Hash identifier: de4lKNuDxIkQusSDNjUKizUBSObyGPcgTtICSGexmW4=
Subject key identifier: C7:B8:C4:04:54:AE:73:88:9E:C1:83:0C:CC:4C:F1:C1:97:5A:8E:78
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 019A50E415092CBDA194E796755B8C882E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:01:56 +0000
Manifest this update: Tue 04 Nov 2025 22:01:56 +0000
Manifest next update: Wed 05 Nov 2025 22:01:56 +0000
Files and hashes: 1: OXbmqwhMnu7ehuKva95yFSdLlac.crl (hash: UAM6DhosYLpnVZQE+e8nj2U9qXbyiYublbihCqaVR5Q=)
2: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (hash: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:15:09:2c:bd:a1:94:e7:96:75:5b:8c:88:2e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Nov 4 22:01:56 2025 GMT
Not After : Nov 5 22:01:56 2025 GMT
Subject: CN=c7b8c40454ae73889ec1830ccc4cf1c1975a8e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:0a:90:ec:3a:b2:39:25:72:ec:d7:f6:c5:
b5:5d:64:86:94:3e:3b:53:17:98:50:33:1e:4d:09:
1a:38:a5:0f:83:c2:57:94:a2:18:8c:cf:2e:97:61:
e5:3d:fc:af:53:3a:50:88:4b:65:f9:71:0e:7d:ab:
05:25:98:c5:96:31:a5:db:49:9a:55:fd:bd:72:d1:
8c:29:95:60:7f:bf:bf:a3:19:b4:35:48:2c:d8:54:
4d:bf:0e:fb:c1:05:21:70:a9:40:f2:03:0e:79:f0:
2a:94:4c:14:24:0d:71:ac:2b:63:bf:37:3a:41:d0:
a6:0d:22:9e:72:d6:84:03:0b:81:24:6d:83:7f:61:
26:85:d5:cd:a4:c8:d6:b0:c6:26:3e:b2:49:59:51:
4a:da:0a:c7:f0:ec:3a:af:3b:83:88:93:c7:55:eb:
ef:dd:7f:4f:55:4e:c4:d3:16:34:79:ea:fa:eb:5c:
65:f6:3e:68:de:b2:8c:e9:c2:bf:48:0b:3e:f5:9b:
58:50:02:0d:06:94:d7:2f:8f:0d:29:d0:da:7a:36:
15:d9:87:b1:c4:c7:a9:f9:fa:b5:23:98:d7:ca:d3:
c5:db:49:ab:c9:79:e5:93:13:04:bd:8c:0f:2d:ae:
f0:bb:5c:1a:2a:d7:5b:b2:43:7c:16:87:cf:4b:7a:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B8:C4:04:54:AE:73:88:9E:C1:83:0C:CC:4C:F1:C1:97:5A:8E:78
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:87:ed:10:2a:a1:51:0f:38:e4:07:e1:9b:5d:26:17:b9:05:
ab:1d:f8:ec:14:e9:50:56:f9:8d:9a:c5:56:d3:2e:20:76:43:
1d:df:6f:f7:3f:ee:f0:12:35:cc:1b:b2:b5:06:e3:15:38:87:
95:c0:d4:83:e0:e6:3c:a6:3b:7c:80:bc:22:af:3e:c9:42:20:
4d:4c:d5:d9:92:e4:1c:2a:20:ed:15:81:c3:5d:c8:c2:29:68:
a0:a3:88:14:20:97:28:ef:7b:28:5a:e4:0c:ff:98:12:87:4e:
23:39:e9:5c:8f:58:b8:46:18:14:f3:3b:8b:7c:92:eb:32:bc:
1c:df:8b:32:2f:d3:ba:8b:a5:f0:e9:d5:53:4c:58:e3:ed:26:
9d:55:38:8d:d0:4e:db:39:55:7f:3c:84:96:05:60:77:6a:a0:
fa:97:39:8a:86:eb:65:91:b2:46:da:f5:12:8f:87:65:d6:68:
7d:0a:9f:98:24:49:82:00:cf:1d:54:36:61:b1:39:ae:42:1c:
40:ea:64:c6:35:7a:2a:32:da:23:d3:25:02:e7:30:67:2a:de:
ce:4c:80:e3:b7:64:b4:ff:0b:ae:68:25:c7:07:a6:59:67:fe:
78:32:b3:49:5e:ba:f1:24:df:04:94:11:ed:de:9e:26:8c:ae:
35:2d:f5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:40 2025 by rpki-client