Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
File: o875PLessPtJuiiKeg-_JtMAT6U.mft (raw, json)
Hash identifier: 6XP0yRFQwdBT4f7j2ax0RjjmJSbW+XhmI7dQwYeUoPE=
Subject key identifier: B6:27:BF:1D:15:63:0B:AD:6C:63:8A:76:E0:45:48:30:1A:A4:66:6A
Authority key identifier: A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
Certificate issuer: /CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Certificate serial: 019A541A578B1450DACC03F0FB36F51EEEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
Manifest number: 0879
Signing time: Wed 05 Nov 2025 13:00:03 +0000
Manifest this update: Wed 05 Nov 2025 13:00:03 +0000
Manifest next update: Thu 06 Nov 2025 13:00:03 +0000
Files and hashes: 1: Mu_6vmjEmJ0Ji86QXCWXfF9bpOI.roa (hash: /uxIZLUhjbrsvb3qsWaj7YVyFLtcx8Jkz3bF3E7gb3c=)
2: o875PLessPtJuiiKeg-_JtMAT6U.crl (hash: kCWFgjtSZ3hM/+FnDn9VNhKyAptDhCVlf4+eVwArlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:57:8b:14:50:da:cc:03:f0:fb:36:f5:1e:ee:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cef93cb7acb0fb49ba288a7a0fbf26d3004fa5
Validity
Not Before: Nov 5 13:00:03 2025 GMT
Not After : Nov 6 13:00:03 2025 GMT
Subject: CN=b627bf1d15630bad6c638a76e04548301aa4666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:7b:70:d4:c3:d6:2d:be:62:bf:f0:5a:83:
ab:3c:da:28:dc:7a:29:9c:8c:28:a5:71:d8:b0:ec:
6b:bb:c3:3e:15:2f:85:47:78:cc:da:4f:70:fc:cb:
14:94:0d:7b:80:a0:16:79:d3:21:22:a3:59:37:52:
26:63:46:8d:b7:9e:32:b2:ed:6e:ef:da:13:f3:61:
4a:70:9d:ab:11:3f:16:50:56:f1:6f:dd:9d:ef:5a:
46:55:78:c9:0e:42:1f:26:16:9e:41:0c:b3:ba:7c:
e7:49:de:a3:51:56:75:1a:8e:c8:8c:1b:ef:be:bb:
57:41:5c:76:7e:51:75:84:02:f3:3b:25:7b:86:6a:
e8:72:31:4b:fb:17:a1:8a:55:ac:55:d9:92:9c:7a:
ae:d6:91:31:92:ba:55:fb:6d:d0:e0:9d:b2:93:72:
18:29:7d:bb:d8:24:14:2d:43:19:f9:de:2f:19:dc:
41:e4:ce:df:43:70:4a:22:2c:9e:60:6f:f3:3e:c1:
bb:5b:0f:eb:5c:78:d8:fc:cf:9e:a5:a1:31:1f:c4:
fc:fc:24:85:a7:02:2e:77:9d:7f:f3:3a:82:d1:a8:
b3:1d:c3:a7:89:26:64:0b:82:bc:60:4e:c1:9d:5e:
fd:5b:7d:d8:b2:3e:48:f1:4c:8a:2c:22:72:68:7c:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:27:BF:1D:15:63:0B:AD:6C:63:8A:76:E0:45:48:30:1A:A4:66:6A
X509v3 Authority Key Identifier:
keyid:A3:CE:F9:3C:B7:AC:B0:FB:49:BA:28:8A:7A:0F:BF:26:D3:00:4F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o875PLessPtJuiiKeg-_JtMAT6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/30ee7d-8e70-43d8-98d9-4b56949ee750/1/o875PLessPtJuiiKeg-_JtMAT6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c8:6e:e5:b2:fd:e4:1e:ec:01:fb:cc:5d:5f:55:d5:20:e3:
84:bd:8c:65:ad:d2:b6:c9:2f:fa:a0:22:82:25:30:e4:7b:f5:
6c:9d:50:31:cd:de:e5:ea:26:0d:a8:48:08:8b:e4:f8:56:f1:
2e:8a:a0:39:f9:e9:d3:ac:2d:48:4e:2b:3b:90:c7:25:b9:dd:
9c:a0:14:ab:33:c9:b4:2f:b9:b4:bd:4c:7f:a1:f6:91:88:49:
c4:ed:52:9e:59:a3:20:7b:eb:1b:5d:90:64:f8:1d:6e:bf:59:
89:70:8b:49:87:c6:a0:99:ba:f3:87:86:93:3d:b0:b9:4e:3e:
2b:3e:9e:b7:61:13:27:bc:5b:dd:92:c6:e4:60:3d:fb:31:73:
c7:82:70:d1:e9:7f:61:52:23:6d:0c:b0:e3:58:7f:8f:d7:12:
1c:1d:5b:f4:87:71:d5:1b:83:66:84:d8:9b:92:e9:e9:92:b3:
88:76:b6:2c:fa:69:ff:3b:1a:ee:a2:dd:77:42:cd:85:2c:d7:
39:6c:49:e6:9e:29:14:b7:f8:9f:de:35:71:6b:7e:95:e0:15:
eb:34:0a:70:47:d5:69:ae:c0:f5:72:3b:9b:6e:aa:f9:ab:d1:
7a:f8:bc:99:08:41:1f:6e:83:2b:b5:7e:a5:b8:e6:41:c7:63:
01:28:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:49:12 2025 by rpki-client