Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: t1FpQ9czzpz4J7LM4Mq52NzFTXeoLMhNaFu4uf73Ayk=
Subject key identifier: 50:3B:1A:78:C0:FF:FD:EF:38:05:45:BC:B4:A8:35:22:84:AC:92:57
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 019A4DAA6CA412726BA6E937F6906B4EA8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 1390
Signing time: Tue 04 Nov 2025 07:00:05 +0000
Manifest this update: Tue 04 Nov 2025 07:00:05 +0000
Manifest next update: Wed 05 Nov 2025 07:00:05 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: 8Hwiot+UiA/vEwyoy6apsTL7r7EglWNUQGaN4t5Bi5c=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:6c:a4:12:72:6b:a6:e9:37:f6:90:6b:4e:a8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Nov 4 07:00:05 2025 GMT
Not After : Nov 5 07:00:05 2025 GMT
Subject: CN=503b1a78c0fffdef380545bcb4a8352284ac9257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:14:e8:9e:06:71:c5:09:76:3e:ae:60:25:d5:
7b:ac:58:5e:e5:f7:e8:24:ce:62:76:1d:27:5f:2d:
37:30:76:96:55:8c:c0:80:b5:13:8b:9b:27:3e:1b:
bf:a0:80:99:b9:48:98:b5:1c:f7:23:15:dd:05:da:
21:48:bb:5b:37:ca:1a:e3:35:46:c4:3a:3f:26:10:
54:aa:d6:3d:38:28:94:52:e9:1e:0a:dd:f7:2c:f4:
dc:72:47:bf:aa:5c:a2:f6:99:cb:4a:2b:c0:9d:83:
f4:2d:d6:39:10:8b:89:f9:1f:e2:05:f2:4e:56:6b:
11:d9:e0:99:53:85:f9:c9:0b:4f:22:a2:07:8a:1f:
79:f8:14:5e:91:c6:37:78:8b:91:c9:e7:e6:1b:14:
d7:23:7f:a9:4b:7b:78:5f:ff:3a:78:ac:52:9c:94:
64:64:bd:54:94:81:89:b6:c8:dd:51:b7:08:fd:c6:
31:16:0f:c1:0a:e1:20:5f:f3:1a:01:b5:25:8c:86:
c8:9d:63:07:3e:e8:83:f3:d9:82:74:c9:5b:c7:56:
08:54:ed:21:20:d9:60:11:b9:70:6a:f9:15:4e:b2:
5c:ae:60:16:14:33:2d:7a:33:6f:47:9d:42:a2:51:
46:6f:21:34:55:c8:99:0c:77:62:fe:34:6d:65:74:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:1A:78:C0:FF:FD:EF:38:05:45:BC:B4:A8:35:22:84:AC:92:57
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:72:b5:6e:b4:59:a5:9c:39:d7:e5:85:19:4b:65:db:99:8d:
87:e5:40:04:bb:cd:4d:ec:2b:c3:f4:c7:8c:94:a1:ae:63:ec:
5a:8a:50:28:f5:a2:09:3b:3b:fc:68:8d:cf:30:88:cd:17:19:
ea:26:d8:b1:5a:d1:e2:e8:05:78:e8:13:f1:d6:78:d4:8d:c3:
ff:dc:4a:94:42:e4:69:e9:d8:72:bf:ae:03:2d:83:2b:b3:d9:
1e:6e:ea:52:39:5b:b4:2d:8f:12:a2:f1:f9:df:53:74:98:ca:
06:42:97:d6:63:d0:17:75:f6:6a:70:87:6e:1c:2e:04:c4:4d:
e1:cd:d2:5b:36:6c:c8:0e:2e:17:fe:4a:bf:68:2d:cd:50:d1:
7a:7b:e0:46:cc:84:55:c0:95:e2:cf:9a:df:d2:75:be:4a:0a:
fc:57:7d:ec:cb:20:2f:9a:94:94:da:d3:25:45:e1:56:62:31:
40:ef:69:68:df:39:4e:8b:87:b9:38:83:0a:67:4b:c6:e8:75:
ae:d6:67:3a:cc:70:bb:e4:df:a0:ea:ca:82:94:7a:a6:5a:52:
6f:81:d4:91:30:ae:c1:48:76:0f:46:d8:6e:4f:6a:f5:66:70:
bb:7d:89:fc:51:0d:75:40:1c:e2:4e:6d:59:cd:bb:38:1a:c5:
a2:67:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:30 2025 by rpki-client