Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
File: OYhH9wo15xCETpu4omK-3bQLfMk.mft (raw, json)
Hash identifier: LmM2vaWqOpKZBZ8KhOllAjZ2rDV7U8BTrZ/aX8V/YZw=
Subject key identifier: 9D:B3:FB:DB:CF:08:4D:A3:FA:E7:4F:78:30:CB:B9:9F:68:E6:92:1A
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 019A503E19A01C904FEDD88DAF4EB46DCCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
Manifest number: 04D1
Signing time: Tue 04 Nov 2025 19:00:38 +0000
Manifest this update: Tue 04 Nov 2025 19:00:38 +0000
Manifest next update: Wed 05 Nov 2025 19:00:38 +0000
Files and hashes: 1: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (hash: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=)
2: OYhH9wo15xCETpu4omK-3bQLfMk.crl (hash: UF2rYg4lDGdQKw+PQh6GZZhguAyGEKuUuJ2Ue4SywDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:19:a0:1c:90:4f:ed:d8:8d:af:4e:b4:6d:cc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Nov 4 19:00:38 2025 GMT
Not After : Nov 5 19:00:38 2025 GMT
Subject: CN=9db3fbdbcf084da3fae74f7830cbb99f68e6921a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:14:16:c1:27:03:97:a2:41:b3:0b:55:c3:
09:96:c2:dd:8a:b7:3e:be:f9:2a:b5:13:05:f3:bc:
3f:1e:9a:de:2c:7e:a2:bb:51:7d:58:8d:29:92:5c:
da:fa:6b:6c:07:20:29:27:b7:d1:d1:85:96:8c:56:
53:29:c5:c5:ab:93:f4:2b:28:73:6c:a2:23:a9:52:
2c:bc:10:1a:d6:93:96:0a:46:54:1a:96:5a:e8:c2:
aa:2a:f8:db:cc:eb:42:89:02:e0:bd:c6:51:7c:24:
19:f2:8d:e7:63:8e:fc:d1:58:45:c2:38:ef:9a:4e:
86:9f:70:6a:63:a7:e0:46:a7:79:2f:e5:3f:0c:3d:
94:ae:04:14:70:4b:a4:09:4b:e7:82:19:84:7e:40:
68:ba:ce:47:80:1e:e0:ce:97:89:cd:a0:7e:7b:23:
b3:1c:07:db:ac:60:f4:7d:be:9c:6f:63:2f:e1:d1:
8a:cb:88:92:83:ae:d9:f2:31:ab:dc:10:76:6e:28:
b8:ee:b2:35:a8:dc:f3:73:ad:00:98:c2:06:f2:b7:
b6:d0:be:3a:2c:d6:fc:c8:46:8a:9f:a2:f1:ad:67:
7d:45:fc:b3:c5:90:c2:b7:de:5a:6a:c1:d1:07:ac:
a8:bf:c1:ed:64:8a:59:db:a7:4c:b6:83:cf:c6:d3:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:FB:DB:CF:08:4D:A3:FA:E7:4F:78:30:CB:B9:9F:68:E6:92:1A
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:35:3b:84:9e:3d:c8:15:e6:d1:1e:e8:3e:51:88:42:65:92:
19:7a:d7:7b:92:ca:4e:a1:80:13:51:38:36:a2:cd:a0:4f:34:
e7:71:1e:03:aa:95:bf:04:52:12:3e:37:f7:2a:5b:cd:ac:16:
cd:6d:3b:f0:95:ac:b7:8f:e7:86:48:68:06:63:f3:c5:b7:74:
f7:4f:53:00:d8:53:f1:ef:08:69:77:ef:5b:7c:41:b7:57:d8:
81:98:e3:65:67:b6:ae:9d:84:db:79:a9:94:24:85:bb:d0:71:
86:d2:e4:70:3e:04:c5:97:1d:41:79:89:06:9d:8b:e1:24:77:
1d:8d:65:79:d1:51:4a:64:f9:07:57:1f:e4:da:eb:82:24:d2:
4a:cd:c4:5b:4f:d8:73:98:65:30:fb:df:26:80:4c:b4:c8:d5:
2e:c1:5f:61:f6:28:0a:1c:a4:19:58:36:32:8e:aa:ef:e6:5d:
ae:e0:ef:36:38:94:96:31:e0:57:bc:dc:fc:eb:3a:b6:b6:83:
19:d2:75:70:be:b5:af:1d:cc:2c:e8:a9:bc:b1:58:36:38:b9:
17:bb:61:26:9d:60:bf:89:1c:3e:e1:e3:b1:b0:1a:20:a5:9d:
fc:fa:fb:a4:47:c1:8e:7a:51:fe:7b:a6:30:a0:a9:8e:9e:00:
8a:30:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:26 2025 by rpki-client