Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: 6tbH71XW5i8h27iGmYpXjdbBHbVLw7iCWvPHwt7Yass=
Subject key identifier: 00:C9:6B:35:CF:0D:99:FE:AA:2B:B6:EA:E4:55:F3:85:3A:51:9E:53
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019A4DE18CC27837ACB4A01D19CE7D90C3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: ny2PBkU8LStwwrUbte0YE/MjOf8su5K4BD0xPYSRm5Q=)
2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8c:c2:78:37:ac:b4:a0:1d:19:ce:7d:90:c3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=00c96b35cf0d99feaa2bb6eae455f3853a519e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:f1:3a:27:77:34:dd:d1:86:c1:6c:7a:23:
68:38:b2:cb:09:9e:71:a0:c8:04:99:c6:1c:51:74:
20:e6:e4:4b:13:e2:08:e2:db:59:37:17:f4:1c:71:
d3:67:2c:ac:85:44:a7:2d:fe:1e:1e:81:94:1c:55:
db:22:17:c0:2b:a7:b7:e5:19:3a:b9:47:15:cc:be:
2f:d2:78:3a:30:3b:59:dd:6a:79:1e:86:51:12:5e:
5a:55:52:a5:2a:f5:53:99:f2:86:50:6c:48:df:d0:
de:75:91:c7:fd:0d:a8:5d:a5:ab:d9:6d:5f:4c:3b:
eb:1e:dc:b9:8d:15:5e:e4:85:11:21:1e:c4:22:87:
ca:5e:8b:42:5a:4d:c4:c3:d9:5a:17:c2:51:d3:e4:
3c:e7:db:2c:92:2d:e4:31:18:bf:e7:23:85:ac:9a:
4d:1e:e5:2f:43:e9:1f:22:26:1f:da:57:c0:a9:12:
b7:dd:07:00:94:85:20:95:3b:92:4c:e7:b2:e9:23:
7e:6e:aa:0e:2e:b7:45:b2:40:0a:44:9d:52:d8:61:
07:7c:51:30:b5:a1:ba:2e:98:6c:23:7b:3f:4f:6a:
80:c4:21:6c:86:77:70:76:69:02:9a:da:09:4c:1f:
0e:3f:e7:ba:2e:40:dd:33:ca:4f:4d:e2:00:e0:6b:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C9:6B:35:CF:0D:99:FE:AA:2B:B6:EA:E4:55:F3:85:3A:51:9E:53
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:21:24:e7:ae:19:29:ea:78:b6:9b:c5:44:e5:3f:47:65:76:
be:a7:7b:8e:b5:63:12:30:b3:57:01:8d:70:50:ce:3e:7c:f9:
1f:18:3b:39:d8:d0:6d:c8:6a:e3:70:aa:c1:df:7d:fd:93:29:
27:27:c5:13:0b:33:08:42:2b:f3:54:bb:85:1e:93:cb:60:06:
df:84:d8:90:66:d8:19:51:d8:c2:a0:89:20:b2:4c:c8:8f:c6:
7f:da:1d:3d:22:98:02:8c:03:fa:78:eb:b7:dc:bb:e6:e2:16:
b4:7e:57:11:bb:f2:80:53:44:2a:cf:48:9e:6e:fd:33:c7:d2:
f4:97:89:e1:9e:86:db:e7:ce:c3:46:f6:4d:73:ce:4b:61:f8:
6e:c0:69:0c:bf:4b:52:f3:37:47:8a:22:76:7d:31:30:73:a9:
4c:7b:02:0a:a4:02:7a:b6:e1:e2:36:97:5a:47:d8:60:71:58:
58:58:61:b7:2f:4c:a7:73:52:1c:17:f6:b7:20:b1:34:f5:cb:
f3:25:2e:3d:6f:ac:1d:e5:b6:c7:bc:93:0b:be:53:dd:a7:a4:
97:24:0e:a0:2f:df:b4:23:4e:10:e6:0e:98:24:e4:e6:a5:45:
2a:02:c3:52:0f:70:e6:0c:f1:4e:2d:98:a3:5a:61:bc:fb:bc:
86:1a:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:28 2025 by rpki-client