Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: AyXIT6uar2xF6/W4X16NclKz6Wb96aEi9EcFeam/xLo=
Subject key identifier: 77:55:86:FE:F9:AF:01:9F:C3:8F:46:F1:48:62:62:78:F6:AE:86:6B
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 019A4E18D24FDC81549F873EE52B50A944DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 1631
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: 4GMh7fIw13Bz3DUcceuO2FBtK6M.roa (hash: E9IDQ7QjcqjZJIn5bDeaHNVCqS2wv2WqYXLU0FEPSXU=)
2: XJGEpCzB4loh5ef0k98ZvXtkA5A.roa (hash: ln2eCgW4Lb0/Z2WnRMYRLGIC+qtaz3YxPhhlJZ12csI=)
3: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: g7M0T43L540CFNBLOCFSCnX9ckXggP+YIUVIere0XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d2:4f:dc:81:54:9f:87:3e:e5:2b:50:a9:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=775586fef9af019fc38f46f148626278f6ae866b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:cf:62:06:8b:da:77:cb:a9:4e:e9:03:a8:
1b:e2:b1:85:dc:15:c7:89:62:f3:9e:cf:17:44:1b:
82:b3:57:cf:34:95:ae:e2:d2:89:83:3c:c0:8d:60:
d8:bb:22:1c:2e:ce:cb:ae:90:80:d4:da:09:d2:81:
70:30:5d:74:87:8f:a1:67:ce:7f:e2:60:82:7e:b3:
29:9b:c9:3d:3e:37:24:42:1a:1b:57:de:0a:d9:f0:
40:47:c3:46:ce:ca:e1:e6:53:5b:2a:ba:d8:fb:c1:
c1:2c:22:2c:eb:63:19:14:6c:6e:16:48:90:12:ef:
72:29:f4:a6:89:37:3b:c2:f9:01:c5:a3:65:7f:20:
2e:ff:6a:78:89:64:ca:c5:f6:bc:c7:74:3f:27:cc:
09:8c:53:2d:36:22:47:fc:26:05:4c:5f:6e:31:2e:
91:ba:03:6e:29:bd:37:7d:49:b6:a8:94:03:7c:b0:
1e:5b:31:23:c9:7f:1d:e9:65:22:36:f5:a0:dd:58:
21:12:db:73:d5:de:d2:f1:47:09:76:12:b9:84:75:
b5:80:2d:b9:0c:6c:e6:9e:09:26:40:d1:57:83:c5:
8b:ed:c1:e0:2f:60:83:c4:cf:ce:44:51:e9:3b:cf:
a5:bd:a7:ca:d7:32:fb:aa:41:1a:c6:0f:2d:c9:f2:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:55:86:FE:F9:AF:01:9F:C3:8F:46:F1:48:62:62:78:F6:AE:86:6B
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:77:26:39:3e:9a:b6:2f:d8:26:1e:25:83:16:68:ef:48:81:
47:17:f3:6c:e8:e1:7f:4a:d5:11:ec:f1:d1:59:aa:b7:91:95:
32:48:c1:c5:97:99:9a:ac:10:e8:4d:c3:eb:3c:ca:4e:89:b0:
82:5b:2d:41:fe:b5:db:68:e3:c1:3b:59:f9:81:6c:13:5b:5b:
70:09:cd:46:2a:c0:32:c7:69:4b:9d:f6:9b:fa:66:b2:65:2d:
61:81:0d:e2:4d:83:ac:98:ef:0d:57:0c:e2:6f:8b:de:c3:3f:
61:3a:aa:d3:4e:2f:ab:8d:79:cb:56:a4:a5:e2:82:3d:9e:71:
d4:18:a0:ec:98:24:76:c4:f7:f3:21:fa:bc:9f:c5:fa:cb:77:
b3:b7:3f:f6:99:59:f4:5e:0b:10:e3:fe:b9:a9:8c:88:d5:cc:
a1:7b:12:c4:99:ac:a3:8e:d2:9f:da:0e:d4:81:76:41:26:a7:
2b:52:9a:e1:4c:e2:e5:c9:64:38:f0:b3:05:7d:f4:8f:2c:18:
ec:f2:bc:e2:15:64:5b:e9:c4:d2:68:3c:ed:36:23:50:bd:3a:
25:dd:35:62:56:52:a4:db:bd:b3:e8:4c:17:70:57:ce:40:72:
2e:27:9f:14:bc:21:b5:af:e3:ca:01:3d:b6:72:52:e5:7a:60:
01:bb:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:43 2025 by rpki-client