Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: rNUeEx6kcfnh/9jzRQ2c8wJFgFOvDl/dXsDZU7OKo1E=
Subject key identifier: 3C:F0:01:07:87:62:02:89:AF:57:91:2B:19:14:11:63:A8:FE:51:2D
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 019A4D3CC241759D3A4405C02306C5F02DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 1446
Signing time: Tue 04 Nov 2025 05:00:18 +0000
Manifest this update: Tue 04 Nov 2025 05:00:18 +0000
Manifest next update: Wed 05 Nov 2025 05:00:18 +0000
Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: hmTp4dm50+bCwz0fcvGrlKYOTsGOT9KMl/L5DbepoA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c2:41:75:9d:3a:44:05:c0:23:06:c5:f0:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Nov 4 05:00:18 2025 GMT
Not After : Nov 5 05:00:18 2025 GMT
Subject: CN=3cf0010787620289af57912b19141163a8fe512d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:3b:52:57:ec:4f:53:50:c2:a7:54:12:6c:
e8:99:d1:c4:25:0f:86:0d:00:25:15:79:ba:5d:16:
fc:7c:d2:93:46:90:0e:70:33:8a:08:dd:17:1f:7e:
30:51:74:26:21:78:3a:34:5e:0b:0c:07:9c:3e:fc:
20:7e:f0:3d:80:32:cd:a7:62:bf:45:b8:1d:19:37:
5d:17:d8:cd:39:da:86:be:a3:9a:df:83:13:6b:be:
2d:b6:fb:42:21:8e:22:7d:7d:fa:01:1a:37:4d:c1:
14:99:30:e8:12:ed:08:ca:d9:53:b4:a4:79:0b:a1:
b1:84:6c:21:4c:f1:9b:f5:e0:4d:99:47:a8:91:6e:
05:2e:29:41:ab:f1:06:89:9b:f3:b9:f0:f8:3a:1f:
af:d7:38:45:2a:f7:f5:45:6a:98:ab:53:6b:f6:c1:
34:bb:a1:f7:8c:df:a5:ed:b1:55:bb:80:48:17:dd:
f4:32:e5:0f:2c:e6:95:5b:3d:c0:38:55:06:b0:7a:
49:67:31:c2:15:cc:7c:f2:44:1b:b7:a7:42:8c:f1:
ca:a6:d1:32:86:f6:62:22:6a:e4:1f:ff:23:67:4e:
eb:95:35:f6:d4:3f:85:6c:fa:6c:ae:c9:98:22:b4:
99:eb:52:f5:bc:0f:ae:9f:bb:1e:08:1f:3d:4f:ee:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:01:07:87:62:02:89:AF:57:91:2B:19:14:11:63:A8:FE:51:2D
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d5:1c:ee:b8:54:48:5e:58:01:9e:cf:75:9c:10:d2:4c:16:
e0:84:67:67:96:de:7a:17:a7:01:d1:34:40:e7:f2:ba:89:54:
71:77:78:4e:70:56:29:b1:54:6d:4e:02:e0:24:97:3f:b6:e6:
ef:19:28:a3:3a:95:04:8f:58:97:e9:8b:6d:5f:47:67:c0:fe:
b4:be:55:99:8f:6e:f8:52:65:83:7e:de:b7:e7:b2:fa:e6:7c:
cd:1f:a6:e9:4b:2a:e6:3b:16:b5:13:94:ae:e0:be:2f:6d:80:
66:7d:7d:cc:5c:af:10:7b:27:a7:04:d3:b9:d9:72:84:03:58:
6a:f6:88:75:cd:41:23:b1:ec:e3:cf:d3:a9:a0:08:70:9e:74:
77:ab:bc:3b:5d:4c:4d:22:e5:a1:2f:97:07:d3:ce:24:72:e9:
17:25:de:7c:ca:a4:37:12:a3:31:83:73:cf:49:55:cf:e1:95:
b7:c4:85:89:4c:16:5b:4c:be:c4:29:b9:17:a6:3f:39:0b:93:
43:3f:eb:47:89:de:15:26:21:2c:2e:01:59:e5:65:52:97:bd:
97:40:15:b9:30:f0:4a:6b:bd:f7:e6:ce:42:41:e7:a9:5f:b6:
f5:97:25:d0:9b:ae:53:fe:20:a0:da:e9:b0:b6:35:92:ff:5c:
0a:3f:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:45 2025 by rpki-client