Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: a1za+eQPVOKI2Jnfs7SvRnypjneye3QiUZ0pw23w6FM=
Subject key identifier: 07:7E:29:87:C1:B2:26:C2:52:F0:4D:C3:E8:B3:DB:0F:08:06:13:73
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019A4D3D0F41871491400D388D20300A84C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:38 +0000
Manifest this update: Tue 04 Nov 2025 05:00:38 +0000
Manifest next update: Wed 05 Nov 2025 05:00:38 +0000
Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: 81cpBTW5A++/HWyfV5E29CS+h8phID562FhObdfmq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:0f:41:87:14:91:40:0d:38:8d:20:30:0a:84:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Nov 4 05:00:38 2025 GMT
Not After : Nov 5 05:00:38 2025 GMT
Subject: CN=077e2987c1b226c252f04dc3e8b3db0f08061373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:b5:f1:2c:cb:e9:98:21:26:52:94:b1:40:
17:1e:8e:c3:30:8a:0a:0b:1a:92:72:26:43:6e:bd:
7d:05:3c:ac:6a:a9:ff:65:78:03:e2:8f:7a:cf:a2:
16:06:b0:f6:c5:60:19:b9:98:18:63:ca:98:d1:29:
4a:a2:56:ed:11:91:a0:9f:64:be:52:2d:a5:a4:5b:
43:df:b1:6a:38:95:8a:fa:3b:c1:c7:70:e0:66:8d:
83:cf:91:ca:8b:e4:35:e4:35:14:7c:48:d3:0d:ed:
29:6c:81:95:5d:1c:7c:14:d4:8e:45:fd:61:b2:48:
3b:f9:b0:3e:e3:08:31:53:de:51:76:e5:d9:71:a7:
b7:0c:50:79:6d:fa:53:eb:46:14:3b:69:c3:76:01:
79:d8:bf:f6:58:ae:d9:11:a6:0e:37:3b:d1:80:00:
02:d3:85:d6:11:ba:ac:fa:93:5b:ee:f2:c6:8a:09:
8d:1d:2d:60:0e:9c:39:8f:18:3b:9b:5b:a2:f3:b3:
eb:13:47:3f:59:e5:1e:20:95:9b:6b:60:f0:5b:6b:
f1:a6:28:9b:a0:df:b5:13:21:4b:7d:fa:c7:11:69:
fa:42:fa:f4:ad:21:49:d0:13:09:25:08:8a:ee:76:
c4:cb:4a:c1:e5:4b:70:f0:0c:09:aa:f0:04:3f:d4:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7E:29:87:C1:B2:26:C2:52:F0:4D:C3:E8:B3:DB:0F:08:06:13:73
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5e:65:04:36:1b:a6:1f:34:a4:87:4d:22:22:e7:f5:5a:6a:
ab:1d:24:4d:0c:82:6e:e0:5e:53:37:c4:f5:9d:ea:ca:ca:8e:
f8:24:67:20:d5:a8:6c:97:93:a7:da:9b:63:26:0f:e9:30:b2:
f5:f1:78:c0:da:82:8d:17:1d:09:7b:13:6b:bf:af:df:1a:77:
3a:8f:1e:3e:e3:1e:12:1c:7a:f2:48:a7:5c:bf:13:fd:13:a6:
22:e7:5c:13:17:14:7d:85:a4:73:43:18:dc:cd:55:0d:0f:2c:
26:22:0d:6b:2a:2f:3a:2f:6c:28:ce:c3:aa:1f:c2:67:f8:8c:
88:20:0d:84:7b:89:35:51:18:92:e2:4b:55:a1:b1:cb:d3:78:
e7:e9:5f:98:55:a8:1e:1e:bf:e2:6e:f7:a4:6a:c4:eb:80:65:
4e:f9:89:71:5d:91:01:9d:ab:ea:e0:7e:af:dc:41:e2:0f:ba:
ee:ba:c5:b5:e7:51:bc:d7:c2:12:25:83:4c:60:ab:81:c9:67:
94:31:73:1f:78:9c:67:85:d9:39:28:5c:ed:fa:e0:49:c3:f4:
b1:b6:dd:c9:bf:ef:20:2d:40:93:d2:11:db:65:00:ab:f7:db:
4b:d4:d7:5f:50:f7:e6:07:c9:db:b9:e5:9f:34:a7:f0:d7:3b:
e8:50:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:13 2025 by rpki-client