Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: 48pAqJhMi6k3DdY5hOBN5/a7sa9hZOLmrQNLZkybWJ4=
Subject key identifier: B8:D7:20:D8:83:09:2E:DD:57:14:97:2C:B6:01:D3:E6:DD:2D:BF:44
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 019A53AC99FEBB9DE274B751B36E5CE23C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0DFC
Signing time: Wed 05 Nov 2025 11:00:11 +0000
Manifest this update: Wed 05 Nov 2025 11:00:11 +0000
Manifest next update: Thu 06 Nov 2025 11:00:11 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: jRxSLA3IOoqQpstNXs0hYz7NKGwuYj3Obje6WHZY0CY=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:99:fe:bb:9d:e2:74:b7:51:b3:6e:5c:e2:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Nov 5 11:00:11 2025 GMT
Not After : Nov 6 11:00:11 2025 GMT
Subject: CN=b8d720d883092edd5714972cb601d3e6dd2dbf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:7a:1a:e8:2c:ce:8f:57:3e:a4:1f:e2:76:
e8:fb:09:8b:49:1e:fa:dd:72:a5:76:ba:a1:17:b9:
6e:0a:18:8a:4a:eb:d3:ae:95:5f:8b:2d:78:95:89:
6e:54:06:ce:7d:62:36:36:a6:d0:94:e5:b7:e5:60:
1b:9c:db:d7:4d:5b:e3:01:69:da:b6:49:2c:89:03:
82:a8:50:80:ed:5f:34:8b:94:b8:09:a9:d8:cd:30:
b2:63:f7:f4:00:77:ee:66:51:f2:2c:17:51:b2:f8:
cb:4c:c1:82:b9:ee:6b:d9:a2:9f:6a:27:85:be:0f:
07:78:2a:7b:d1:c3:3a:45:c8:4c:21:0d:77:dc:36:
5d:64:a8:e6:49:5b:d2:55:9a:6f:6b:d7:dc:03:44:
b4:23:24:67:66:12:b1:93:20:bd:48:68:05:9d:d7:
eb:83:a5:22:c1:06:1f:16:dd:6a:a8:76:70:fa:a7:
ff:eb:a3:10:be:44:91:3d:4c:2d:e3:02:f0:f2:6c:
87:8c:bc:3f:12:27:7f:ba:fb:2c:7c:48:3d:43:ea:
a9:f8:01:19:33:36:d4:f9:0d:34:84:33:28:30:43:
85:60:49:2f:43:50:46:41:26:bf:23:30:b1:72:06:
ab:50:39:bb:36:08:84:b2:6d:9b:af:07:ad:4f:23:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D7:20:D8:83:09:2E:DD:57:14:97:2C:B6:01:D3:E6:DD:2D:BF:44
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bb:fe:8e:fe:e6:5a:4d:8a:0b:cf:f8:97:47:11:48:60:98:
1b:ee:59:5e:ed:50:71:15:a5:a2:0b:4a:6e:28:f0:32:db:f2:
c5:a9:5e:d2:ec:81:7a:02:73:91:d5:5f:23:d1:6c:a0:56:ea:
6b:b8:6a:d3:d2:13:33:db:11:97:16:dd:0a:2d:f6:01:31:80:
18:38:12:3e:97:55:73:2c:95:ca:e9:67:ce:0d:25:ab:a8:c9:
6b:4a:47:38:db:c8:09:07:47:fd:23:24:e9:3f:00:4b:3f:56:
45:aa:02:be:26:f1:79:93:c8:56:df:00:44:cb:70:01:e6:61:
dc:f3:01:2e:08:2a:8c:53:47:e5:a4:7d:26:e6:f8:06:b3:33:
5b:00:73:f2:57:f5:33:83:3e:03:04:c7:7a:c7:0f:fa:5f:a7:
b1:2d:01:26:55:04:c8:f2:0d:70:63:d2:c0:fc:ac:da:36:79:
8b:43:9c:c0:be:ec:74:04:8d:0a:25:14:c8:c7:be:b6:1c:8e:
e6:e1:d5:8c:b8:db:77:39:0e:c7:72:4d:c4:a7:ea:70:75:66:
cb:d4:08:0f:76:72:01:fe:f0:83:81:2a:08:f4:bd:61:b3:24:
8a:3c:f9:84:7d:f6:72:1b:47:e2:71:bd:ee:26:a7:e0:a8:7c:
db:49:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:14:28 2025 by rpki-client