Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: 32VgUA9/ppYmSNcRLVNLbo2hfWDhwJXh1ih3IYWP61w=
Subject key identifier: DC:37:B4:14:C7:FD:F6:E2:DD:44:E3:C7:FE:EB:E3:0A:94:5E:0B:69
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 019A4FD04C46DCF97D670CA79515DDE5901E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0AD3
Signing time: Tue 04 Nov 2025 17:00:42 +0000
Manifest this update: Tue 04 Nov 2025 17:00:42 +0000
Manifest next update: Wed 05 Nov 2025 17:00:42 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: jyVxDvWcx5blE7pX+C16bQk4R7I2NJK+6RUKK8EcPEs=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:4c:46:dc:f9:7d:67:0c:a7:95:15:dd:e5:90:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Nov 4 17:00:42 2025 GMT
Not After : Nov 5 17:00:42 2025 GMT
Subject: CN=dc37b414c7fdf6e2dd44e3c7feebe30a945e0b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:c8:7f:06:39:07:69:f9:3a:16:8b:21:42:
46:8f:f4:01:d8:dc:af:76:cc:ab:6d:94:0b:24:32:
0a:b0:d4:e9:ec:1f:48:1c:2f:f6:69:eb:ce:3b:47:
2b:a7:30:1e:15:63:ea:fc:c1:05:28:52:3c:b9:c9:
7f:a2:62:d2:df:80:8d:3c:82:0d:da:82:f9:c8:15:
97:c7:a8:14:12:07:38:93:bc:75:1c:a4:8a:03:43:
09:53:32:a5:1e:94:ad:e5:35:bb:cc:8c:2e:c8:59:
85:cd:7c:4f:08:35:61:e8:da:00:86:f5:95:e2:17:
0c:59:6a:dd:68:64:6e:4c:f5:b2:e9:72:57:1c:da:
e8:e8:52:79:29:55:e4:bc:ef:b7:0d:cd:d0:e1:72:
b6:3d:ae:38:82:c1:c3:2c:1d:5c:19:e3:b1:f8:2f:
45:3e:64:84:20:29:02:be:f2:56:87:43:26:8b:c8:
af:10:7b:ea:c1:c3:8e:95:ea:56:c5:e3:31:a6:96:
b2:7c:d6:83:45:7c:49:88:fd:66:97:0e:36:d5:22:
b4:b8:2d:2b:c7:ec:31:a7:50:15:70:b0:d8:ba:d4:
ae:5f:f7:56:c6:6c:c9:5b:f3:00:c9:cc:ce:e9:35:
0a:52:58:74:2e:7b:fd:07:6f:2c:80:e4:1e:f6:42:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:37:B4:14:C7:FD:F6:E2:DD:44:E3:C7:FE:EB:E3:0A:94:5E:0B:69
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:15:52:bb:60:b5:c0:d7:64:a7:9e:05:ce:c1:10:42:11:d8:
f9:b7:4d:a0:a1:7b:44:55:76:4f:2c:8f:8b:03:52:3e:b5:17:
17:42:af:00:65:d5:1d:73:b0:de:62:d7:75:b0:c2:b1:66:f0:
98:f9:2a:c1:12:32:97:8f:2a:75:5c:04:c9:89:94:df:f2:20:
d7:85:a9:de:c1:75:33:1e:93:52:a3:7e:61:d5:f2:db:e2:8e:
71:0f:44:ad:07:87:28:da:d0:2b:db:6a:87:da:6c:3b:0b:27:
d7:c4:95:e0:53:13:0d:08:1a:a8:b0:a0:58:cb:2e:ba:85:11:
dc:dc:d0:25:fb:97:ee:e7:3c:0e:60:91:e6:b2:cc:56:4f:24:
e3:07:8a:da:77:e5:fe:20:5d:5b:f2:37:44:b1:95:3c:f7:35:
ff:80:a6:c9:1d:ab:2b:cb:11:0f:55:5f:06:4f:09:ce:61:f6:
fb:d8:77:fb:b0:c7:86:a9:9b:33:ba:32:8b:a9:9d:f9:9e:3c:
00:82:3a:15:67:02:bf:fc:7f:ba:7b:8d:f0:7a:af:34:9f:7e:
9c:ed:11:18:0f:82:6f:0a:17:5f:ae:10:23:68:07:cf:c3:bb:
24:45:a7:5d:b6:71:14:4b:af:dd:75:e7:68:fb:06:29:3e:0c:
18:3c:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:21 2025 by rpki-client