Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: +tIMsrc7QhfQO+MqK3cO3tB5KKhHUU1EYlWuwyq5EjA=
Subject key identifier: D1:81:F4:BD:B9:72:98:76:3B:19:2A:77:9E:FB:5B:64:18:A2:E5:EE
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019A4FCFDE32F0F6673F3B1DBD4A7D7792F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 17:00:14 +0000
Manifest this update: Tue 04 Nov 2025 17:00:14 +0000
Manifest next update: Wed 05 Nov 2025 17:00:14 +0000
Files and hashes: 1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=)
2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: I9ATAeCic1u74ZYFvHy3A1pp3NHWRDiQF/kXyiXYUGg=)
3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:de:32:f0:f6:67:3f:3b:1d:bd:4a:7d:77:92:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Nov 4 17:00:14 2025 GMT
Not After : Nov 5 17:00:14 2025 GMT
Subject: CN=d181f4bdb97298763b192a779efb5b6418a2e5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:39:03:6c:ac:85:85:ef:2a:23:a5:97:f2:
be:28:72:84:9d:48:f6:1d:c3:bf:2a:cc:3f:ec:60:
a0:76:d6:3d:04:c9:38:4b:33:a6:4d:ce:61:30:51:
c1:27:a6:78:9b:9c:99:2e:f4:2e:4c:ec:3c:c3:08:
ef:ac:8f:32:5b:c2:0c:2e:21:84:a2:f8:d6:33:f6:
d7:4f:d7:5d:e2:25:19:ea:09:44:01:30:b6:3f:4b:
4f:9e:ec:7c:11:42:78:ea:7e:e7:ea:fc:e5:98:c0:
a2:43:f5:ab:7d:a0:1c:75:5e:21:05:f9:cd:6b:a1:
29:bc:fa:db:12:4f:5a:4b:60:7c:62:5c:fa:19:5f:
3f:74:9d:15:a3:b4:e1:78:3a:47:05:e0:31:90:17:
f6:09:2d:10:fc:fa:5a:81:07:df:1a:1e:ff:48:8f:
d4:f5:da:3d:f6:0d:38:50:1b:56:ac:99:88:08:0b:
b1:51:bd:2a:92:bc:df:ca:37:9c:b0:91:cc:0c:5f:
81:da:9d:07:dc:e0:5b:5e:fc:84:7a:74:b7:c1:0f:
c3:d3:f9:95:d4:c3:12:01:b7:bc:08:8c:62:97:d1:
ab:8a:86:ee:dd:a9:87:cc:c7:a2:2f:d7:aa:bb:21:
c7:f1:bf:7b:91:21:3d:fc:3c:d6:42:2a:b6:a4:dd:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:F4:BD:B9:72:98:76:3B:19:2A:77:9E:FB:5B:64:18:A2:E5:EE
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:49:2d:b5:f2:84:0f:7f:00:e0:cb:96:ff:03:42:5e:7a:39:
28:0d:12:b3:ed:3c:59:63:4d:d7:4e:d5:de:e9:fb:42:3a:ba:
0e:0f:5c:d9:de:8d:24:f7:88:2c:23:14:b3:c1:13:78:14:de:
f5:8d:75:86:71:1e:1b:d4:d1:10:bc:18:6f:20:eb:87:6d:6d:
1c:a8:e5:f8:28:0c:ac:d0:37:e7:8a:26:96:7a:74:b3:f4:b3:
af:a0:91:1d:62:93:8e:8f:ea:f7:0b:b6:88:5b:e4:0d:a8:4a:
5f:51:21:0a:92:87:a3:02:f2:7a:dc:bd:35:a4:78:ca:79:c7:
1e:b6:97:8b:39:4b:d5:a6:8a:b2:0d:8f:c3:70:c9:b6:69:58:
86:14:37:c8:eb:4f:d1:6e:1b:5a:21:c4:f1:bc:23:83:78:bd:
45:72:61:fb:26:0a:e9:df:a4:6a:c2:f5:83:07:52:d3:76:60:
0c:39:98:48:de:a8:28:a2:df:1d:67:36:90:d0:35:0d:f6:11:
0e:4c:55:8f:04:f0:b2:e1:67:ff:94:cf:36:8a:f1:6e:80:91:
9d:26:01:ec:c0:7c:fa:a5:61:c9:c3:8f:83:87:de:34:ce:6c:
9d:e0:82:62:1f:ea:a4:cd:5c:05:5c:4f:81:bb:23:bc:b6:13:
88:e8:c3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:12:18 2025 by rpki-client