Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: fZEvTnq5e8Qyp8xfG3q77djBwj4d7snrECzSqUyD8f0=
Subject key identifier: 04:A0:DD:BD:DF:D5:03:29:53:2A:AF:FC:C4:13:DF:6D:27:4B:C6:15
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 019A4EF59896EE0733ED8271F1561A5340BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 13A5
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: W9khGWZAakqHcphZVoxHz1lJyUbdRi1Gq1h9DL8jWDo=)
2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:98:96:ee:07:33:ed:82:71:f1:56:1a:53:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=04a0ddbddfd50329532aaffcc413df6d274bc615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:96:b1:2e:13:ac:d6:62:e8:f6:1c:ba:77:
28:25:50:43:44:81:d4:ff:57:3a:2a:5c:c1:40:2f:
b2:1d:af:fe:55:1c:6a:c2:f1:5d:c6:11:b3:f0:d0:
59:65:50:7d:7f:2c:58:57:76:91:02:2d:f7:a5:0f:
86:19:85:27:fe:55:89:0f:a9:a9:aa:a2:8f:7d:bc:
c0:a8:6c:dc:be:79:f1:05:0b:07:46:f7:91:72:99:
68:6b:2d:b7:85:92:2a:d9:01:5a:56:1b:8a:28:39:
05:b0:c3:52:55:e3:79:88:31:8e:d2:89:f1:4e:53:
d8:8a:82:f9:56:ae:ef:6a:ab:86:7e:f3:3b:95:97:
17:7a:fe:7b:f3:1a:a0:f4:44:c3:af:eb:c5:6d:99:
32:f7:52:6d:9b:bb:0c:a3:9b:2a:a6:5b:62:f8:46:
0d:ac:6c:12:ce:30:25:24:8c:06:6c:7d:8f:d0:97:
b7:f5:05:98:7a:6c:ee:e9:d8:74:60:30:1e:44:5c:
09:97:ea:af:58:28:c8:5d:83:c2:36:32:6e:da:ff:
d7:ce:be:09:bb:3f:60:b0:15:a8:b9:bd:97:a5:cc:
a6:70:fd:b9:b2:eb:02:15:9e:9c:51:88:e8:ff:ee:
33:18:21:37:0e:1a:e9:81:94:69:6c:fc:29:be:b3:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:DD:BD:DF:D5:03:29:53:2A:AF:FC:C4:13:DF:6D:27:4B:C6:15
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a3:45:d2:25:e6:68:65:44:cb:f0:9e:c1:b3:6a:d0:55:36:
8f:b8:f9:fc:86:bc:95:fd:42:2c:69:26:b7:f1:8b:1c:5c:72:
87:fe:2e:68:22:b7:96:fc:7f:ec:27:50:c6:57:42:cf:d5:47:
0e:0a:2d:4a:ff:72:92:20:c5:75:c9:03:41:c5:cd:d2:d7:3a:
2f:b2:a8:e0:c9:c2:d5:fe:09:23:d0:db:73:68:6f:ad:be:a0:
23:ec:c3:00:f5:36:ae:6c:88:fe:a9:1d:43:56:19:9a:4f:01:
0f:74:91:54:5d:c3:87:52:f2:02:f6:71:83:a6:eb:4c:6f:b9:
9e:11:a8:ea:7a:d3:bb:e2:00:71:30:44:bf:bf:1f:75:0b:bc:
17:34:9c:70:ff:15:92:bb:15:bd:34:b1:7f:78:dd:a7:8d:3c:
d4:23:d7:2c:5a:91:73:e3:2f:4c:7d:4b:22:82:d1:f6:1a:9b:
f1:3d:67:4b:31:f8:0d:f2:a4:06:b1:fa:cf:40:37:7d:e2:6d:
6b:2c:2c:a8:89:af:72:9a:01:36:ce:6e:4c:6f:50:13:11:06:
97:2f:66:94:48:6e:70:d7:02:30:83:db:2b:d7:13:84:f6:b4:
f9:b2:44:df:20:3b:9c:bc:e0:8f:8d:29:34:ae:13:cf:3a:21:
6f:f3:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:27 2025 by rpki-client