Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: KOAtf6K8vHgF/xvjbgUOMAMMFMtpjzQWhKAabpLOr0U=
Subject key identifier: 7D:37:70:7D:B7:C4:37:F0:2D:B3:E3:EA:69:93:DB:88:BB:93:00:91
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 019A4F2B667EDEC2A46B86BC2DD14705B482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:35 +0000
Manifest this update: Tue 04 Nov 2025 14:00:35 +0000
Manifest next update: Wed 05 Nov 2025 14:00:35 +0000
Files and hashes: 1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: lOiTg3bbDRtRMNevCh9cyPDja73BmlExuXnSVWiIYxg=)
2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:66:7e:de:c2:a4:6b:86:bc:2d:d1:47:05:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Nov 4 14:00:35 2025 GMT
Not After : Nov 5 14:00:35 2025 GMT
Subject: CN=7d37707db7c437f02db3e3ea6993db88bb930091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:e8:1b:3a:ed:d0:45:ed:e9:1c:c1:bc:a9:
08:c3:06:0c:db:56:87:be:66:ba:0d:c9:51:e0:02:
56:71:62:2d:22:d6:01:7e:98:67:92:5f:69:84:6e:
87:94:46:ab:ec:e7:85:db:3e:cc:c3:c2:79:4c:77:
ee:8d:89:9c:70:9c:d1:9b:c3:6a:9e:61:98:c7:2e:
73:f2:b1:50:e1:e7:c6:a9:49:6f:3f:ed:87:56:84:
bd:9a:96:ef:43:b1:74:9f:45:95:56:b1:3c:43:92:
f9:04:18:6e:08:c3:6a:f6:17:62:8e:49:38:84:42:
a0:84:f2:73:c0:35:3f:ae:69:5c:67:54:43:97:77:
89:58:0d:5d:1f:b4:fd:67:dd:b1:68:fc:f4:81:2d:
22:5c:0d:6b:c7:c5:14:82:1d:ab:88:7a:b6:a9:54:
fe:58:f9:dc:eb:27:10:14:1d:ae:0f:7c:10:2c:a0:
0b:c5:fc:de:65:2d:0d:91:a6:83:b6:2b:a9:85:bc:
8e:4c:5e:15:18:ea:34:38:dc:b7:be:41:73:fc:87:
06:59:ab:84:45:ef:96:3b:b9:68:d5:33:ef:7b:29:
a9:f6:ac:55:94:f9:5e:a2:94:0e:2c:4c:23:07:c3:
3e:f8:f7:a0:de:8d:e1:7f:e5:2e:41:2b:41:40:fb:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:70:7D:B7:C4:37:F0:2D:B3:E3:EA:69:93:DB:88:BB:93:00:91
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:e1:98:09:7c:40:d5:61:f6:d1:ff:c1:49:aa:75:9d:e9:
2b:f1:9a:98:6e:f3:85:05:3d:72:28:cb:0b:c7:0f:20:7c:b8:
65:53:05:79:05:c1:d5:5f:50:f9:26:46:7d:34:35:5a:fa:6d:
61:f6:a2:a7:10:22:2a:b0:9c:15:c4:e7:19:ea:e3:c7:53:bf:
26:4d:39:16:a6:3b:aa:62:c5:e1:7e:69:8a:7a:84:ae:8c:2b:
3f:4a:26:49:f5:24:b8:4b:c0:46:35:99:15:5b:f7:42:fd:f0:
84:db:16:01:50:64:ae:9d:81:43:c6:7f:53:b3:ee:96:9c:7e:
ea:5a:c7:1e:ef:11:71:42:89:71:30:ac:1c:c0:40:2a:e3:cb:
95:37:dc:d1:4b:ed:dd:14:ce:9f:c1:60:e6:d1:df:5a:d2:77:
3b:a2:cd:b6:1f:35:89:7d:66:d4:79:cf:eb:2f:89:72:43:5a:
22:56:48:aa:f3:2b:9c:ed:86:e0:08:2f:85:24:2f:2d:c2:e8:
10:cf:8a:36:41:bd:09:90:48:13:ff:a4:80:56:4c:e4:af:c0:
ae:f1:ca:ac:e2:c4:b2:ae:2d:5e:87:4a:4d:2e:1f:bc:d2:ef:
b6:68:aa:11:b5:35:17:45:3b:9d:e4:ed:69:89:9c:f2:4b:9a:
6a:2b:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:22 2025 by rpki-client