Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
File: O5pBDtUm-GwybZG2KApEGhbAxnY.mft (raw, json)
Hash identifier: rDBAILRIQXrbYTgUebXSu9/1Ic+D1LBCjz7V/XvlMmA=
Subject key identifier: 94:F7:77:3E:70:8E:F5:AA:0B:01:81:B3:E5:1B:B8:F1:DE:39:98:25
Authority key identifier: 3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
Certificate issuer: /CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Certificate serial: 019A4F626A41957B5E5C031231CC29ED2DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
Manifest number: 0877
Signing time: Tue 04 Nov 2025 15:00:41 +0000
Manifest this update: Tue 04 Nov 2025 15:00:41 +0000
Manifest next update: Wed 05 Nov 2025 15:00:41 +0000
Files and hashes: 1: O5pBDtUm-GwybZG2KApEGhbAxnY.crl (hash: 8aOhmkVl4sFyV68hEu36FiCEwOomZDXmCK+WUvxLzaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6a:41:95:7b:5e:5c:03:12:31:cc:29:ed:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Validity
Not Before: Nov 4 15:00:41 2025 GMT
Not After : Nov 5 15:00:41 2025 GMT
Subject: CN=94f7773e708ef5aa0b0181b3e51bb8f1de399825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:36:8f:23:42:50:25:2b:a4:39:0d:6c:fb:
5a:99:9e:70:9f:87:96:d2:2d:7f:6f:06:ac:cc:81:
1f:3c:32:dc:6b:f8:9c:37:9c:b4:be:8d:22:cb:f1:
5d:67:6e:17:9a:cf:fd:71:df:57:0e:cb:f8:10:9f:
db:2a:4e:d4:05:3c:8d:a7:2a:04:b8:5d:92:e1:0d:
ae:2a:3f:ed:0f:09:55:93:bd:53:7a:27:df:1a:24:
bf:17:90:12:00:3f:19:ad:93:0d:12:72:b4:c1:91:
ce:0c:e2:48:c3:40:82:58:cd:90:bb:5f:d6:f7:b4:
21:69:3b:65:b4:d9:69:97:a0:4e:cb:55:3d:66:a2:
21:67:34:61:ad:4d:91:d3:69:20:a4:4c:ae:00:e8:
e3:59:ea:71:ee:21:00:68:7a:b8:0a:a0:12:14:98:
07:9e:7e:29:45:9f:ef:11:49:0a:1f:a8:7f:d1:40:
4b:20:58:7f:cf:1b:7d:18:bf:55:1f:8d:af:c9:6d:
c4:91:cb:d1:cc:70:c8:f6:df:65:1a:d5:43:be:fe:
6d:95:77:53:49:48:da:9a:10:b3:87:39:48:fc:eb:
fb:a6:9f:19:7e:4f:d3:40:89:09:73:ae:37:22:e1:
67:35:3c:29:60:5b:4b:60:fa:ac:97:1a:83:e8:ba:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:77:3E:70:8E:F5:AA:0B:01:81:B3:E5:1B:B8:F1:DE:39:98:25
X509v3 Authority Key Identifier:
keyid:3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:54:93:c2:5e:a0:f2:35:84:44:b3:41:cc:6e:57:11:c8:14:
f7:58:b2:e0:c8:d9:c8:1b:be:bb:a2:00:28:d6:8f:91:3d:6a:
a3:86:63:82:9f:4c:06:5f:76:49:a5:37:8c:0b:b9:93:f3:11:
58:c7:0c:b8:76:5f:72:f8:37:a4:c9:d8:16:19:b9:c7:e8:d1:
2f:fe:67:c0:7f:8e:4f:ba:54:97:73:11:c5:6b:e8:26:0f:df:
5e:7f:9b:5a:2e:f0:dc:ad:98:a0:04:38:98:7b:e1:d9:16:e1:
2b:22:38:9b:bb:3c:77:42:a6:c3:f5:b1:38:e1:46:dd:53:5b:
83:f9:e1:03:36:76:43:f4:21:fb:1a:be:71:d9:b4:c5:88:a6:
65:4b:98:2f:a6:48:4f:65:e7:76:1c:f4:b3:f5:2c:7f:49:e1:
1d:ec:f6:35:9d:84:91:ce:32:b0:4c:5a:47:22:c7:d8:75:6a:
da:b0:ed:c8:4d:4f:18:bd:b8:c6:8a:02:3b:92:87:f5:95:42:
fa:52:7d:e1:d1:73:d0:a2:8d:c5:1b:54:e4:57:53:b6:c8:9e:
ef:11:52:c6:f3:c0:f6:7a:96:b6:1b:05:d9:f1:91:29:2b:94:
2a:d8:31:e1:01:fb:20:9f:1c:e9:4d:88:f0:75:c9:90:b0:ca:
ab:d8:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:31 2025 by rpki-client