Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: JH5mQ6eZ6NdAF78dPxeavaIf6n46Hvru3LRF5sEcFGo=
Subject key identifier: 28:67:6E:2B:27:0C:4C:82:AA:CB:FA:6C:A0:89:77:12:DF:CF:84:BF
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 019A4EF51924D78B18C22DDB8926A8264D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0FA7
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: 5B+2T9z5fmOSij8upTXlaGhHwHJbTgAksieY7LJwBII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:19:24:d7:8b:18:c2:2d:db:89:26:a8:26:4d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=28676e2b270c4c82aacbfa6ca0897712dfcf84bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:4f:5d:01:d7:eb:17:9c:22:e8:08:4f:11:
78:db:67:28:13:13:3e:ba:af:86:7b:2c:06:0f:9c:
e6:bb:1b:56:45:40:7e:ac:25:75:7e:47:31:a5:12:
80:65:8d:48:b3:75:80:f5:10:28:1e:5a:62:35:66:
85:72:ce:14:b3:6b:95:f8:08:21:7f:e1:61:ed:65:
6f:d4:09:4c:2d:dd:36:fc:e2:17:c1:94:53:2a:c2:
ea:3d:f1:04:36:a8:fa:80:f3:30:f4:26:30:28:40:
7e:b4:7b:71:00:30:b9:be:f1:5b:31:59:92:f7:5a:
2e:39:ce:cf:01:e7:82:93:94:79:2e:26:8c:7d:ca:
1f:7c:d9:56:76:35:d2:fe:aa:83:60:81:22:d8:ed:
3e:84:9a:07:83:3c:81:a6:76:9e:d4:5e:34:77:74:
11:a9:1d:0e:88:d2:50:6a:2b:dd:40:22:9e:b4:7f:
c7:90:f1:51:f3:5b:bb:80:4a:d0:97:be:9a:7f:92:
84:64:83:cd:89:07:a4:e3:97:13:2b:2e:45:52:b5:
fc:95:6e:da:8c:b9:d6:de:c6:d5:bd:0d:d8:d9:77:
c9:2c:8f:12:25:5e:ed:f1:4c:54:be:80:84:51:45:
8d:b3:2e:b3:53:d8:d9:a8:3e:65:18:95:d7:2b:17:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:6E:2B:27:0C:4C:82:AA:CB:FA:6C:A0:89:77:12:DF:CF:84:BF
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1e:7a:a8:f3:3f:37:7c:0d:20:ed:ee:7a:d5:01:06:73:bb:
23:5d:f4:67:07:56:52:33:58:73:7c:ca:20:f2:2b:e6:16:19:
b7:fe:31:03:b2:c3:0c:fc:4c:7d:55:ce:90:7e:0f:39:e2:cb:
83:a5:98:df:ef:b5:c5:c7:18:f2:48:0a:36:28:84:3e:f5:83:
3a:01:e1:11:b5:31:82:d5:38:1a:01:1f:0d:da:a5:a6:a9:4b:
2a:7d:69:a3:01:34:04:e6:2a:1f:4d:d5:09:72:43:61:36:97:
eb:6d:c8:9b:e8:2f:85:eb:f0:11:f5:69:80:d7:b2:fb:7d:c5:
ee:40:d0:ce:33:85:89:a3:25:49:87:53:f7:7f:da:28:d4:92:
4f:a5:ca:fe:36:ed:e6:d8:05:56:3e:0f:dc:57:f6:8c:0f:79:
a5:25:59:16:f6:ec:58:66:cd:9b:31:77:fb:c6:f2:78:86:9f:
e3:7a:a5:6e:08:5d:da:f8:23:bc:e8:d9:50:7c:6d:92:cd:e8:
af:90:de:c7:3a:eb:19:b5:a0:27:23:73:81:87:4f:5f:63:41:
36:5e:0e:b9:25:9b:d3:e7:36:b1:65:cf:74:c3:6f:7b:24:69:
b9:7c:6f:6f:09:28:b5:1c:d2:cf:2f:73:ac:8d:bb:20:58:cf:
82:75:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:25 2025 by rpki-client