Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: TA6MVzYVWo3kMlo/LQAsUBT3ZJkHET6rMoyAgrPzM90=
Subject key identifier: 9E:CE:7F:6D:F9:93:E4:05:75:C7:AE:28:7E:0D:C6:57:5C:6C:48:B6
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 019A4FD05C684B6E3FFA2F9B87921579D35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 17:00:46 +0000
Manifest this update: Tue 04 Nov 2025 17:00:46 +0000
Manifest next update: Wed 05 Nov 2025 17:00:46 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: rmx4LWyJpAK9qj0sW28QZxZja8krlYTsCb3tyYPUK7A=)
2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=)
3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=)
4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:5c:68:4b:6e:3f:fa:2f:9b:87:92:15:79:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Nov 4 17:00:46 2025 GMT
Not After : Nov 5 17:00:46 2025 GMT
Subject: CN=9ece7f6df993e40575c7ae287e0dc6575c6c48b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:8a:a6:ec:a2:dd:e1:e4:51:ac:26:86:18:
63:59:10:b7:71:75:db:ee:2a:74:47:10:00:82:76:
01:b0:2e:08:5f:5b:bb:80:47:c8:2d:10:1f:db:51:
64:5d:fa:a1:6a:74:b5:b8:54:e0:70:5e:0a:88:a2:
51:95:57:5d:ce:42:4b:4b:65:e4:18:9e:5d:33:06:
48:0d:aa:f6:a2:78:bc:77:e4:13:2b:e7:68:c0:13:
ca:e8:10:c6:a7:62:03:b6:e2:05:71:da:f2:6a:5f:
ac:e5:e4:11:32:69:ac:0e:d1:dc:85:af:64:13:5c:
d2:14:c8:ca:8e:31:f0:16:50:67:db:2d:f6:e9:23:
8a:91:6a:39:f5:72:50:cc:5e:25:20:a6:00:ab:1c:
77:0a:df:7c:7c:dc:3c:36:d3:1f:47:cd:45:81:d4:
83:ba:c2:0f:c8:94:58:f0:ce:84:5d:bf:4d:d7:44:
1f:53:d9:21:38:51:67:7c:1e:97:a1:7a:d5:59:01:
17:15:3b:88:10:0f:38:e5:58:e6:f8:16:0b:86:f2:
bf:64:05:f0:74:d3:31:a9:7a:96:6a:a2:f2:5e:b6:
60:1b:5c:95:c3:c7:a9:19:5e:f0:10:f6:1e:90:51:
18:0f:26:a7:93:dd:53:37:f0:69:0e:f3:d5:67:19:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CE:7F:6D:F9:93:E4:05:75:C7:AE:28:7E:0D:C6:57:5C:6C:48:B6
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:5d:d1:bd:f6:6f:7e:c2:ff:4a:8d:3f:a9:36:12:4b:ff:
c6:65:fc:86:b8:c0:c7:81:79:a4:19:3c:ac:b2:86:79:32:c9:
cd:c2:a0:79:49:32:a8:55:9b:9b:66:5c:3f:33:ae:eb:c9:a0:
58:86:6b:67:78:18:f6:2a:c7:b1:00:2b:f0:5c:b3:6c:79:75:
ff:4a:52:4d:73:b0:24:15:5c:33:80:54:61:1a:0e:4d:1f:4f:
bc:4c:54:01:93:60:65:60:0e:9c:d6:6b:26:c4:a6:f2:05:c5:
27:25:1e:38:ec:7c:b9:3c:47:ad:75:7f:74:70:ac:db:c9:14:
85:19:68:c8:f0:ce:d8:2f:40:1f:9b:c7:0c:31:ec:ba:9c:bd:
a4:53:25:27:15:e6:d3:79:0e:45:8f:ee:73:a3:57:29:bf:a2:
12:95:4a:c9:23:15:a2:01:21:49:4f:a6:ba:71:a2:bc:ae:4e:
78:64:85:2d:52:5a:8b:27:a3:fe:24:f0:f2:f9:21:43:13:00:
76:00:66:bc:86:f4:a0:09:0e:ae:37:3f:ca:a6:d4:c1:ab:51:
62:11:24:71:dd:ef:e6:8b:d5:4a:c6:af:5f:0c:db:76:f5:1a:
7b:98:b0:46:73:98:2f:e9:72:a3:58:9b:23:dd:84:4f:d2:1e:
79:1a:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:55 2025 by rpki-client