Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: 3t+sqxjuMB94HUsD8Y5fpj6xAMeGJUNdH5oHC/nhGuw=
Subject key identifier: 47:B0:1B:FC:3E:28:62:BB:D4:5D:7E:B8:14:38:84:0A:56:C1:55:11
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019A4F994C56352612C64F168DE7B0E346EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1456
Signing time: Tue 04 Nov 2025 16:00:37 +0000
Manifest this update: Tue 04 Nov 2025 16:00:37 +0000
Manifest next update: Wed 05 Nov 2025 16:00:37 +0000
Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: oIyH2WepFcWdZ9cLmwy6YVGMYSQ0k9X8iraNnhmonwg=)
3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4c:56:35:26:12:c6:4f:16:8d:e7:b0:e3:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Nov 4 16:00:37 2025 GMT
Not After : Nov 5 16:00:37 2025 GMT
Subject: CN=47b01bfc3e2862bbd45d7eb81438840a56c15511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:27:f9:d3:b6:0b:e0:c7:b7:a4:6f:5e:86:
2a:80:02:5a:59:61:b9:01:30:e3:fc:8a:39:0e:11:
33:4c:29:f0:3c:d5:bb:33:1f:15:f8:8a:a2:1d:61:
bc:54:db:f9:58:e2:69:da:9f:bf:84:b5:02:21:42:
a7:e2:b5:52:a3:37:70:6a:a8:c9:ed:21:c0:55:a4:
a9:58:8f:f7:5b:38:d0:54:7c:14:f4:ba:21:91:43:
3a:b7:85:82:a5:f5:86:c9:b2:db:7e:58:7b:4f:5c:
5f:e3:6a:8c:74:9f:49:83:ae:2f:26:e8:95:92:b0:
a8:ab:e2:5d:56:76:dd:58:43:28:24:dd:d8:d1:a5:
26:0c:7e:cf:1c:66:92:e0:b7:10:84:3c:08:e1:f3:
0e:ff:88:eb:c2:95:24:73:3b:cc:6b:4a:11:71:9d:
84:32:77:03:1a:49:c3:0b:1d:3e:0a:11:e4:06:d1:
94:e1:08:73:00:9b:64:e2:b3:92:ce:95:a0:f3:54:
29:54:be:1f:6f:f7:ce:f8:97:f1:3f:98:f8:86:e2:
66:6b:9b:49:92:2c:9e:56:63:16:00:8d:f2:41:de:
38:00:a7:9b:35:f8:9a:3e:d6:f6:22:92:c0:0c:ae:
e6:6e:6f:3a:24:37:7e:bd:63:e4:9a:48:fa:ba:b5:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:1B:FC:3E:28:62:BB:D4:5D:7E:B8:14:38:84:0A:56:C1:55:11
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a5:06:0c:7f:35:9d:41:ba:5e:81:b8:4b:66:51:4d:08:b8:
2d:25:f0:98:06:a1:1e:0a:98:20:90:4d:8d:e0:a6:9e:28:c1:
6c:22:b4:cf:7d:24:67:61:1a:a2:ad:89:cd:6c:65:59:90:b7:
9f:2a:bd:f7:b6:70:a2:21:67:61:5c:88:3f:d8:04:31:01:18:
54:0e:8f:b8:50:b4:1a:96:b3:50:49:76:7a:d8:36:11:0b:64:
a0:aa:6a:b0:ed:66:1a:2b:61:e3:61:36:05:ab:d7:ac:0a:61:
29:d2:58:63:84:b2:bf:1b:46:fc:b9:bb:7c:dd:37:28:61:df:
d7:78:92:14:71:ca:72:9e:c2:af:26:c0:a0:e1:5a:52:45:da:
59:34:74:35:9c:79:2b:67:99:1d:30:2a:16:1f:d8:06:63:9f:
3e:6c:b0:28:39:6f:21:20:c9:bb:ff:64:7a:d0:d7:ff:db:10:
f4:e1:cd:dc:22:df:cc:de:d8:69:f4:f0:7d:dd:09:77:01:e5:
d0:de:19:d1:68:69:b1:26:ea:ca:11:31:44:2c:b1:40:1d:66:
e6:7d:20:dd:ac:5f:c8:1b:d0:cb:a4:08:94:7b:f3:7d:82:4c:
9c:b2:ab:3c:5e:0f:a0:f8:72:d8:d2:e5:f9:b9:5a:bc:49:75:
a9:61:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:54 2025 by rpki-client