Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: TAjHAB6bCrTRtcmWVPwTyRb9rY+vLOgA9EPNu937FbI=
Subject key identifier: 11:E1:FF:36:0F:F5:45:6C:30:C6:57:C7:67:6E:F2:B9:E7:2A:68:BC
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019A515118D513D46A56BAE2717E5987E7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0C54
Signing time: Wed 05 Nov 2025 00:01:00 +0000
Manifest this update: Wed 05 Nov 2025 00:01:00 +0000
Manifest next update: Thu 06 Nov 2025 00:01:00 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: VLUY82Qf/oHBJSFEkcS+6igCn7GRA29FmLQsBY7ifCo=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:18:d5:13:d4:6a:56:ba:e2:71:7e:59:87:e7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Nov 5 00:01:00 2025 GMT
Not After : Nov 6 00:01:00 2025 GMT
Subject: CN=11e1ff360ff5456c30c657c7676ef2b9e72a68bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e3:16:75:e6:7b:8d:4c:81:e0:3d:85:85:ad:
e5:33:42:0f:8c:22:43:2f:e7:c8:f3:ff:ee:8a:c5:
9f:fa:c3:d2:61:88:f1:c1:09:4b:50:e2:a1:da:7e:
33:f3:16:2e:52:0b:92:a1:fb:47:57:cd:d6:ee:b6:
f8:3b:03:5c:80:c4:f2:a9:aa:27:7e:48:7d:30:0d:
b3:9a:e5:6d:19:ac:cc:a2:c2:9a:59:e1:50:1d:c8:
f0:ae:53:35:4a:88:bf:75:c7:29:a4:18:74:08:e8:
2d:0d:b0:c8:26:ec:f2:14:3c:75:12:88:c5:b9:b2:
9a:2d:8c:fe:97:9c:ab:65:1b:92:18:18:74:22:e7:
06:43:ce:30:96:ef:d5:f6:cc:ba:60:99:a1:91:17:
b1:1a:77:51:f6:2d:57:41:9b:1b:07:a2:60:b4:7d:
85:80:d2:de:4f:de:5d:6d:e2:09:dc:4b:8f:e9:f8:
c8:46:6a:64:53:5b:28:f3:75:2c:8f:56:b4:d5:a7:
6b:f1:28:94:95:77:e3:66:74:63:11:8b:58:3b:b7:
71:c8:e2:86:81:27:e8:e6:b1:7c:85:b4:61:3b:6a:
f6:ab:5c:4c:03:8c:d9:e6:fe:ca:f9:34:05:92:01:
8a:23:da:c9:44:31:a5:13:da:68:c9:a9:80:ca:5b:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:FF:36:0F:F5:45:6C:30:C6:57:C7:67:6E:F2:B9:E7:2A:68:BC
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6f:95:42:59:a6:1e:2d:f1:8b:0a:2e:e9:ae:e5:41:5e:bd:
9b:e2:75:5d:d3:63:6b:86:00:6d:c4:e3:66:ee:b7:3e:be:81:
db:ec:32:19:5d:87:7e:b8:91:ae:d7:3a:a8:10:26:58:78:63:
c0:40:cc:b6:4f:4c:2c:99:2f:fe:58:79:af:5c:49:3b:8e:54:
df:14:fd:f6:b5:74:00:b8:5b:d0:60:5d:a7:14:d7:4e:0c:1e:
f2:72:c0:31:bd:be:4e:08:79:fd:20:cc:3c:a1:ae:77:49:62:
4a:d0:fe:35:2e:4d:67:6a:86:ec:d2:21:5a:11:02:39:2e:dc:
79:88:e8:41:65:6a:ff:3b:4f:ef:17:28:5d:94:b3:ae:a1:05:
54:00:c3:2c:e4:7a:d2:9d:6f:ab:8e:0d:88:45:ea:e0:e4:61:
9e:48:8b:ea:dd:b3:40:02:8b:85:49:60:bc:9e:3b:fa:f9:98:
c5:9d:ff:69:25:b7:bb:33:f1:74:50:df:73:e2:87:c9:94:11:
4d:59:25:2a:03:21:42:41:9f:d9:06:a4:03:32:b4:ab:9c:ba:
4d:40:78:31:69:ef:9a:79:e8:4f:23:6d:58:a2:ea:b9:98:ca:
53:ed:1a:27:eb:97:dd:21:a1:fd:16:6a:de:6a:b8:88:ce:e1:
93:b0:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:32:04 2025 by rpki-client