Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: R1X8PEDmduxGVVhrsCv3PHGl0x9/+NR1/KvavfJCh8U=
Subject key identifier: CC:67:13:F5:EE:15:E5:E3:C9:9F:C6:D3:E6:DC:6E:D4:A6:C1:11:C9
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 019A4F61FAFD9638BA16B7DF14096E0B0AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 0BCD
Signing time: Tue 04 Nov 2025 15:00:12 +0000
Manifest this update: Tue 04 Nov 2025 15:00:12 +0000
Manifest next update: Wed 05 Nov 2025 15:00:12 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: YCY0BsXVCzC6aM73mU725SyvXcO9JvtQirpX1x+UjR4=)
2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:fa:fd:96:38:ba:16:b7:df:14:09:6e:0b:0a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Nov 4 15:00:12 2025 GMT
Not After : Nov 5 15:00:12 2025 GMT
Subject: CN=cc6713f5ee15e5e3c99fc6d3e6dc6ed4a6c111c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:29:6c:38:96:05:f9:94:b5:80:ff:0f:d3:
bd:c6:15:6f:e0:3b:7a:c4:c9:61:91:29:e1:d0:11:
4b:01:96:57:77:0f:72:40:26:f6:62:31:6d:c0:1d:
8e:9b:d3:5a:d0:f7:5e:d9:f7:5c:be:f4:86:9c:e3:
f1:23:aa:62:ba:63:9f:f7:24:71:34:7a:2f:ef:c7:
31:ad:2d:9b:7b:f1:2c:d2:79:bf:ad:bc:07:37:49:
8c:d5:4a:82:90:44:33:3b:ba:e3:98:f1:fb:27:60:
d2:dd:53:1a:85:4f:db:99:45:4e:70:24:d7:db:41:
9a:73:a9:51:6e:3c:52:9e:5b:0f:e0:13:c0:41:dd:
3b:df:44:ad:71:db:e3:cf:15:aa:4c:0b:14:ee:60:
fc:b0:6c:1d:42:c9:a2:2a:e3:42:89:d8:6a:ef:73:
aa:63:99:e9:e3:e6:5f:4d:27:57:be:5b:97:57:06:
85:d5:80:5e:e2:ea:71:4a:5a:c4:6b:06:f6:65:dc:
5f:2a:c9:0f:34:b8:42:0e:23:ab:6d:79:70:05:fc:
0f:1a:6a:60:ea:ce:6e:5e:0e:8b:e8:05:e2:85:ba:
56:46:99:f5:9a:c7:7f:9c:d5:70:7a:eb:8b:15:55:
3e:9f:a3:2c:c0:99:89:a0:31:3c:65:7f:66:97:53:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:67:13:F5:EE:15:E5:E3:C9:9F:C6:D3:E6:DC:6E:D4:A6:C1:11:C9
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:73:6c:28:63:08:b9:64:0b:6e:0a:ea:91:88:4a:99:19:ca:
3b:aa:e9:52:02:81:5a:c7:57:6d:11:58:33:e5:e9:83:79:08:
6d:38:07:46:7e:99:a7:e1:07:8f:51:ff:05:a8:6d:36:73:08:
7a:bc:9c:54:14:c1:3e:6e:bf:2d:b3:12:45:d2:bb:19:d9:2d:
81:c2:c9:50:d4:d6:4c:0a:d2:24:04:59:1f:85:ca:e7:b7:1b:
8f:f8:b4:9f:39:e5:83:c5:95:bf:14:2e:d5:79:70:c2:67:ee:
8c:27:23:c7:6a:0c:33:2f:43:1b:ad:39:1a:18:48:6e:da:83:
a9:3d:81:6c:82:55:aa:55:01:67:1c:41:ef:2b:26:10:07:52:
05:e4:b3:f9:31:11:48:2c:36:d3:08:3e:70:b8:a3:23:0a:56:
7f:8e:26:2b:b2:f6:bc:4a:10:48:39:b2:ce:25:36:07:3c:19:
54:4e:f5:c5:a4:e6:21:c9:98:ff:d3:25:2e:a9:19:37:24:86:
8d:5b:28:75:a5:0e:25:2a:e4:2f:32:f6:34:5f:de:e0:05:7e:
8b:cc:54:cb:ae:43:a8:92:97:af:3f:8e:cf:f1:70:ba:3b:a6:
b7:cd:96:88:30:7d:d3:69:9c:d3:7d:44:c4:84:63:ee:b4:db:
06:cf:1d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:40 2025 by rpki-client