Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: Fb7oAOW+cNyiPJ60sPG1xMsqk5J1S3i7Ys2F5ztTbFs=
Subject key identifier: 65:CD:DC:E2:A0:F2:D7:AB:A3:B9:E0:71:DD:08:59:8C:AF:50:9D:B9
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019A4DE1A6039818E9A9E2C1DCCF0D2970DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 08DF
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: VyykyJp9J20YQW9+16ExvYgnyGp06TLuwqEeIm7vaWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a6:03:98:18:e9:a9:e2:c1:dc:cf:0d:29:70:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=65cddce2a0f2d7aba3b9e071dd08598caf509db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:4c:3a:aa:a5:a8:2b:9f:73:a4:f1:8e:b8:
16:ae:6b:57:86:29:b5:b1:c1:b5:2f:58:12:77:2f:
cd:2e:ef:54:f3:9b:87:f1:b1:3f:53:21:a9:e8:ed:
35:46:3e:06:dd:1b:28:03:01:64:25:8e:45:26:cc:
0c:df:ec:2d:29:80:3e:73:8d:75:b2:ae:28:d9:32:
cb:71:30:0e:41:c4:00:ec:a4:7d:89:fd:cd:db:c6:
2f:ab:67:50:76:bf:a9:bf:38:cf:77:8c:6a:1c:1d:
73:1c:ff:3f:9b:7f:cd:e1:5e:86:5d:ad:bc:62:b6:
50:14:3d:ff:b1:45:31:03:08:52:52:e0:64:6a:5f:
81:27:ea:14:4e:24:72:cf:db:2d:9e:d3:07:29:43:
31:fe:38:90:c4:82:08:47:b7:f3:e3:38:87:ea:9f:
56:e8:70:f6:fa:01:a1:f8:ea:8b:0e:69:c3:f5:15:
a6:6f:13:3c:b1:2e:72:8c:3a:04:3d:ed:95:0b:11:
b3:b7:ad:62:be:93:c9:a5:5a:72:17:14:9f:be:50:
bc:10:1a:f8:cb:e3:95:90:71:ca:b7:bb:ef:9a:c1:
19:11:19:94:df:ee:37:7e:fc:3b:17:e2:a4:e5:83:
3b:af:29:29:8b:86:77:95:54:25:0c:98:66:3d:b5:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:DC:E2:A0:F2:D7:AB:A3:B9:E0:71:DD:08:59:8C:AF:50:9D:B9
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1d:10:46:72:84:30:ca:1c:ab:9a:27:1d:70:40:88:1c:17:
5c:78:94:e3:4a:b2:7d:d3:2d:10:bf:c7:9c:37:64:73:e6:c3:
a6:31:b5:06:f8:21:cb:81:20:91:fd:43:9b:7e:8f:ec:67:c2:
f7:7c:94:bf:06:23:c8:3b:b9:b3:56:5e:1e:3b:78:24:df:94:
1a:ce:a7:d6:ca:13:02:1f:79:0f:da:16:4e:75:59:b9:05:32:
33:b5:74:4b:98:77:09:e1:cd:24:ab:00:37:00:2d:64:74:a1:
12:90:8b:88:54:41:63:82:cc:79:ef:fc:71:67:2d:be:5f:dd:
82:70:50:49:c0:c7:a6:52:e5:1d:6b:0e:30:40:2b:47:2b:12:
4f:38:20:3f:12:16:0a:12:e7:9b:d8:25:2d:83:cd:ee:f3:2a:
89:15:24:12:c4:36:6c:e7:bc:ac:5b:2a:07:9f:c7:ea:63:44:
67:f8:2b:41:e7:df:38:a0:bc:74:96:e0:80:bb:40:ac:b3:50:
7a:81:26:dc:10:f1:a8:f1:0e:ae:5f:8c:b8:60:a7:a1:e1:2d:
13:85:6b:e9:4f:24:92:60:7f:c1:f9:0f:4e:8d:b5:f7:aa:76:
1f:74:c1:dc:4a:ac:de:f7:44:ff:a8:ae:5d:92:b6:b3:6b:7f:
2b:6f:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:42 2025 by rpki-client