Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: liqOk9fMJb/vPamGmA8pFHB2scudniv3C/IhJbhVyE0=
Subject key identifier: 21:42:7A:1B:6F:69:93:90:29:4A:31:91:08:66:4E:52:52:E5:C7:61
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019A4EF56B8443D2C409DB922A1A578BCBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 10E9
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: CBKIL6JNrLvMTgQ7DjH/a1um5LuCvd3fwjV+Ehke2I8=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6b:84:43:d2:c4:09:db:92:2a:1a:57:8b:cb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=21427a1b6f699390294a319108664e5252e5c761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:0f:0d:0b:aa:bf:86:0f:1f:48:a4:05:57:
3d:29:9d:61:3e:f9:85:f2:11:c3:19:60:89:57:a2:
76:32:b6:38:5c:11:64:24:6c:e9:09:b7:98:52:44:
00:69:da:5a:af:e9:c8:e9:48:5b:bb:85:cc:1c:65:
7a:07:90:0c:40:90:80:c0:41:8c:5d:00:27:5d:e0:
30:83:7b:20:d7:a9:d4:7c:0c:be:9c:76:d8:e4:51:
dc:5d:8b:4f:1c:47:b3:8e:c0:e7:d5:f5:cc:6d:4e:
01:75:15:fe:c6:3b:02:08:70:c7:66:19:d2:8b:0a:
7f:5c:8d:ab:cf:3c:1f:e3:61:88:33:4f:70:94:a0:
a3:cb:9b:15:89:80:e5:df:de:62:c1:79:56:c5:04:
b9:62:da:a7:c5:7c:72:61:9c:8f:80:4b:73:31:64:
56:a0:c6:aa:2f:76:00:72:e9:7e:2d:8e:6a:16:25:
e3:d7:8b:cb:1b:77:43:22:33:b8:1d:1a:63:cf:3b:
d1:4c:f1:ec:5d:c7:b8:aa:c2:16:e8:dd:2e:32:ff:
27:fd:81:15:42:31:a0:13:04:0f:3f:74:0a:54:88:
0e:6a:b9:16:3a:69:e0:c7:5d:96:6a:e0:b5:f1:ad:
a7:7e:95:29:cf:8c:3e:0b:01:38:9e:53:92:f3:c1:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:7A:1B:6F:69:93:90:29:4A:31:91:08:66:4E:52:52:E5:C7:61
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:65:be:69:62:cb:5c:03:4b:4f:02:eb:f1:ab:f2:2f:f0:
da:b4:e5:c9:46:1e:91:d9:a7:48:3f:2f:fd:08:2b:30:fb:c8:
ed:8f:f4:95:1d:06:eb:bc:c9:c3:34:7b:34:fe:0f:76:6f:23:
a6:41:07:f8:d7:76:14:1a:53:69:2a:51:d4:2d:20:c6:48:ad:
f2:65:14:09:15:a3:d4:c6:23:0a:ae:ea:d7:f3:51:6b:3c:73:
8b:7d:06:84:a3:a9:21:bb:7d:11:9b:0a:be:43:aa:7f:cf:c3:
78:8a:31:ce:1e:cb:05:d3:6e:22:b6:9a:73:39:9f:68:cf:c8:
5b:3a:28:df:e7:ac:38:a5:2e:e8:ea:32:a3:e6:bb:eb:68:4a:
52:71:c2:51:14:1f:b2:c3:63:5f:75:dc:34:01:f2:24:db:9e:
3e:f5:e3:54:0b:bf:61:2e:60:10:53:87:26:f7:e8:a0:6e:4f:
c0:07:e6:d6:d9:85:d6:3f:95:c1:9c:c3:ee:b7:bc:43:26:c4:
9a:32:bb:44:0d:8f:16:42:a9:5d:2e:fa:a6:73:4c:82:9c:98:
2f:10:9c:3e:50:db:d1:dd:41:42:f0:e6:5d:a1:f7:46:64:24:
a9:bb:2c:3a:08:8d:76:dc:dc:ba:4e:b9:96:53:c1:8d:2c:83:
60:df:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:51 2025 by rpki-client