Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: CEsXLaMu4sAlk6d1Gwl2h9Jjy+huN/BiMkdXqRbzFrg=
Subject key identifier: 08:DF:4B:E4:B4:3B:25:A0:7D:3B:04:63:54:58:6E:B1:6F:9E:8A:99
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019A52634334E8631F08CF352645307A5941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 0391
Signing time: Wed 05 Nov 2025 05:00:28 +0000
Manifest this update: Wed 05 Nov 2025 05:00:28 +0000
Manifest next update: Thu 06 Nov 2025 05:00:28 +0000
Files and hashes: 1: 6v_KjX_8rYwrIkEwlegUhUvqa6E.roa (hash: HbBvuAuEwaykQV/i3cAyWZbQCm+S576wJTXNwFBdFYo=)
2: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=)
3: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: wvrgfzAbN/r6DCxeq8ornTU8LUrOcoTEelXngcbppoA=)
4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:43:34:e8:63:1f:08:cf:35:26:45:30:7a:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Nov 5 05:00:28 2025 GMT
Not After : Nov 6 05:00:28 2025 GMT
Subject: CN=08df4be4b43b25a07d3b046354586eb16f9e8a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:6e:d2:0c:7a:3e:95:55:9d:39:75:8a:58:
9a:09:46:b2:85:3a:00:95:74:ad:b8:2b:a2:48:26:
31:ae:6b:76:dd:fe:26:99:fe:e6:05:f0:5b:4d:ac:
49:c3:33:44:4f:fc:3b:30:cf:61:3c:4a:c0:f8:e0:
52:82:2f:72:ff:95:64:dd:52:ab:81:67:d5:22:04:
bc:d0:f2:30:9a:3b:b9:67:d8:d9:4c:63:a9:09:98:
1c:23:ad:48:4f:37:e5:21:4d:a2:ac:f4:a0:6e:8d:
9e:b6:30:71:fd:1a:9b:af:1d:2e:f7:96:a3:41:19:
03:06:96:ff:6d:22:3f:fd:ee:71:21:c6:5a:fd:25:
77:d7:b6:16:7d:8f:23:96:83:60:d7:f0:7c:90:16:
46:d1:c7:38:e3:7c:cd:ed:e4:6c:3a:e3:87:48:f3:
62:47:13:1d:81:47:59:19:96:39:c6:7e:a7:6c:b6:
3c:04:76:fc:05:e0:cd:de:54:8c:57:5e:56:38:f0:
dd:d6:c7:e0:37:04:a0:25:36:17:62:ba:62:ba:a8:
2c:2b:82:cb:5f:c7:1c:0b:73:fe:f5:81:40:1d:59:
d2:57:15:81:72:3c:dd:02:2a:64:2c:88:92:c8:a6:
73:ab:fb:6c:24:e9:93:97:12:68:41:56:14:21:1d:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:4B:E4:B4:3B:25:A0:7D:3B:04:63:54:58:6E:B1:6F:9E:8A:99
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:6d:b1:c0:11:39:b7:45:03:b3:cf:67:f3:5e:9a:60:a4:
19:46:64:80:3a:f1:a5:08:65:ce:c4:88:d3:3e:f7:fb:0e:11:
3b:f7:d8:51:6e:24:d2:bb:46:e2:bd:53:7b:68:09:8b:48:4f:
60:01:32:b8:42:82:35:53:fd:0f:29:d4:1f:db:f1:4c:0c:c5:
3e:db:04:f6:f7:b1:7f:94:f7:d3:c1:b8:ac:d1:c2:70:83:42:
10:c9:60:30:a6:ec:be:8c:73:2c:fc:f0:d4:05:1c:a8:1d:a2:
fe:c3:47:73:d8:e1:45:b5:4b:1b:0b:0c:c2:c7:a6:1e:39:93:
7a:b7:be:29:54:9c:e1:ca:16:03:d6:75:15:28:b4:0c:99:a1:
71:f9:4a:09:68:78:cf:1f:d0:9f:df:fb:c5:53:c1:2f:6a:e1:
37:15:e0:3c:bc:58:4e:44:15:be:0e:9f:c2:9d:7a:9c:e1:97:
94:2f:14:2d:89:7d:1e:a2:f8:1b:82:78:48:06:4f:06:dd:08:
81:4a:f1:70:fa:76:03:df:13:27:1f:ac:10:41:dc:b4:0f:4f:
a7:a0:7c:44:f7:fc:3c:eb:c8:39:1d:41:dc:83:59:50:15:bb:
31:ee:86:78:d6:52:1b:04:90:fa:69:45:5c:3f:47:e1:7d:56:
1c:dc:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:47 2025 by rpki-client