Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: 7fUyoXmwzXJDefwUWSqmUA6B2nsL9VDSwLjQDn8dYZU=
Subject key identifier: B9:CE:19:93:08:FD:BB:D4:7F:4F:B2:91:1C:5E:2F:63:55:12:28:CC
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 019A4F623C6D9D90DB5890145734157ACFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 093A
Signing time: Tue 04 Nov 2025 15:00:29 +0000
Manifest this update: Tue 04 Nov 2025 15:00:29 +0000
Manifest next update: Wed 05 Nov 2025 15:00:29 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: s5nzUcWzXfAahiXRasPDVqzAtswaAgu8nKah5P31sOU=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:3c:6d:9d:90:db:58:90:14:57:34:15:7a:cf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Nov 4 15:00:29 2025 GMT
Not After : Nov 5 15:00:29 2025 GMT
Subject: CN=b9ce199308fdbbd47f4fb2911c5e2f63551228cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:ea:9c:0c:67:a5:cd:18:40:16:80:3a:ab:
36:a6:42:2d:99:ae:6d:e2:02:b6:d3:89:50:fa:2b:
bc:2e:06:e7:0d:75:dc:0f:9f:35:23:c9:6b:0d:00:
34:d2:b4:7e:a9:62:6f:fb:86:0e:2c:46:cc:49:fd:
28:9c:ac:6a:04:06:71:32:2b:4f:2d:d8:69:bd:37:
5b:ee:ef:27:d3:cb:75:03:23:dc:64:16:c1:b3:ad:
3d:0f:87:d0:03:7b:4b:d3:84:f8:2c:a3:27:14:17:
8c:a6:0f:0d:13:c4:15:14:3b:5d:b7:b4:63:2f:22:
76:d8:ff:e9:ed:12:15:36:6a:6f:fe:73:25:0a:89:
22:97:45:89:45:ad:d1:f7:ed:a1:6b:f9:00:12:59:
53:21:60:94:15:8e:4e:59:7a:43:6c:68:7e:f3:50:
2a:9e:2a:46:fd:06:29:6c:77:e9:a1:8e:18:02:9b:
87:0a:70:3f:02:af:ae:af:e7:27:4c:8f:9f:c2:a3:
1c:7d:51:34:ec:b0:fa:f1:2c:dd:c2:42:75:30:fb:
32:d6:d5:24:c5:15:8d:15:46:b7:ab:f9:3b:d0:4d:
13:91:79:66:59:ba:bd:0e:06:ca:e6:a1:13:04:ff:
7e:0a:ea:2c:59:ae:ef:67:b7:99:93:55:1a:f8:e2:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:19:93:08:FD:BB:D4:7F:4F:B2:91:1C:5E:2F:63:55:12:28:CC
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6f:47:15:87:b2:75:26:52:f4:55:7e:80:d5:e3:18:c2:ec:
a1:c5:ac:85:1d:f6:17:c9:88:62:93:3f:b6:05:e1:44:f3:14:
09:80:68:2b:84:a9:22:c1:52:40:04:de:9e:09:c1:0a:ad:2a:
ae:13:fd:98:b9:31:44:13:18:00:68:b8:d3:b3:0e:72:f4:ff:
77:d1:01:63:77:cc:ce:10:54:45:d5:cc:7c:17:40:92:45:5f:
96:d5:02:30:bd:a8:07:df:65:cf:d0:49:44:d6:93:fe:8f:d9:
d8:5b:33:18:36:27:8d:b9:db:a6:c9:5c:37:87:20:44:c6:20:
94:c0:d0:18:0a:19:87:ad:4a:fb:8b:b1:3d:ce:e0:e5:5b:e0:
c7:c3:7f:6e:72:cd:b8:1b:08:b0:c2:bf:2a:c4:9f:72:7e:3d:
a6:c0:4f:08:b4:42:fe:ee:7c:7d:96:00:91:65:7d:bf:f8:97:
d0:6a:4d:d6:09:95:2e:0f:1a:be:cd:03:1c:af:82:a7:97:e2:
ed:c6:f6:19:74:d4:be:f8:25:d3:cd:3a:28:38:c7:46:18:87:
52:3e:41:d0:fe:cc:77:e9:5d:6b:e0:91:26:f2:ca:9b:4d:72:
21:a9:23:da:b3:f6:fc:0e:86:fd:99:28:39:59:72:e4:7a:72:
23:dc:b6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:40 2025 by rpki-client