Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: 5Sur3d2zZ9lQfGuOWCSvPEAjDXcP/t5weMSR9bQZMME=
Subject key identifier: 1D:EC:3B:BE:5F:48:DE:BD:C3:90:E5:C5:FE:5B:73:73:B2:A1:7C:8C
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 019A4F2B03BC06ED55F5661942E657BADEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 1127
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: Xl+fhE38sNVuOOVgmp/35qRz7hAoP3vqSRP7Q3GqtW4=)
2: fmsKsNJsScyYZyH8RUfSLeG-UJA.roa (hash: XWgPxzT1eqv4he1A7biAZG6QqWis59ng7mldQueWS0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:03:bc:06:ed:55:f5:66:19:42:e6:57:ba:de:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=1dec3bbe5f48debdc390e5c5fe5b7373b2a17c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:ea:1b:f0:6c:f8:9b:cc:1b:ae:8e:6c:ac:
51:19:f7:e4:21:28:d5:33:d2:be:49:e9:63:dc:b7:
80:0d:88:ef:9f:01:2a:51:8c:12:92:ce:e0:5c:64:
d0:01:60:30:b1:9b:52:9d:f8:3e:c0:9a:da:32:b8:
38:df:93:72:a8:f9:77:8c:ea:91:38:a3:b7:fd:e7:
f0:51:5e:65:a6:0d:ea:d8:f5:f6:63:ae:f4:1d:69:
86:5a:f5:95:3c:36:40:e5:9f:60:21:51:1a:98:c2:
90:c8:b5:03:67:88:08:1d:67:e8:97:6a:be:46:7c:
17:bf:87:df:58:9a:2c:ea:92:da:10:53:2e:22:76:
ef:a1:79:1d:99:29:12:5f:23:82:eb:03:df:ae:09:
50:ad:4d:c2:e2:4b:bd:b6:16:2e:34:46:3e:c4:1f:
4d:9f:f2:f4:ce:16:f2:90:3f:bf:ff:67:77:72:df:
c4:10:9a:32:69:6b:c2:06:23:52:ce:6a:f0:8b:67:
a7:64:92:b1:21:d8:4f:4d:17:29:64:54:bd:12:be:
1e:02:98:81:ca:c7:a0:0e:c4:4f:f7:48:19:b0:cb:
1c:d5:b8:a2:e8:3e:43:99:1c:ce:76:ac:32:2e:78:
89:5c:39:04:c1:33:42:56:db:42:5e:38:41:fd:12:
02:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:3B:BE:5F:48:DE:BD:C3:90:E5:C5:FE:5B:73:73:B2:A1:7C:8C
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:df:2f:43:fd:ee:b8:9c:71:7e:58:71:91:c3:ba:cc:45:be:
d5:2e:d6:de:8a:f1:10:5c:bb:e1:0f:18:0d:a0:d8:08:66:c3:
fc:86:92:38:60:2c:36:a4:36:16:bc:5c:64:1b:09:c5:47:f8:
42:fd:d1:83:c0:f9:61:bf:0f:c3:5a:af:11:17:e4:52:01:1f:
e5:97:47:d5:cd:6a:a4:29:f9:35:4f:9d:da:32:c7:5a:99:56:
65:c1:61:1a:f5:b5:4c:af:ed:05:ca:4d:1c:e1:a1:87:88:a5:
9b:5d:bb:a9:71:64:f2:b3:36:82:09:45:8d:e2:c4:29:8c:3e:
52:8b:94:6e:67:ad:d4:ba:79:b7:f6:bf:6d:a2:f8:ae:f2:e1:
ed:7f:46:64:a4:47:42:fa:6d:e6:ef:c5:c4:72:ee:27:2a:78:
73:97:5f:88:35:f4:b5:55:a4:5f:04:e3:5b:f4:a9:63:88:40:
e6:6a:89:79:e5:90:3d:e4:3b:85:71:40:0c:05:85:48:c5:5e:
29:4e:f1:63:4b:94:a4:fe:49:75:8e:fc:f5:f2:0c:34:4f:03:
76:a1:9f:3a:9a:05:e7:b9:8a:ee:b2:bf:84:07:51:52:16:44:
5d:01:40:3f:1a:15:e8:bc:26:fe:44:da:ea:e8:f9:35:91:25:
7f:62:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:56 2025 by rpki-client