Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: OHSQwcuDyrm7QnlNryXtBrfccTvNkizAfyYAcHGvkCQ=
Subject key identifier: 41:00:C2:DA:AB:B0:DC:21:8C:A0:2C:E4:EA:A5:F1:8B:2E:16:FC:18
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 0199FF22B489A82299CFED1B1840B57405B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 13E8
Signing time: Mon 20 Oct 2025 01:01:28 +0000
Manifest this update: Mon 20 Oct 2025 01:01:28 +0000
Manifest next update: Tue 21 Oct 2025 01:01:28 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: 7k2czC3SSN7w7r9ZrIwZqZkUi0HVmTBbWoMudB6CkNs=)
2: hv7umvI_Ed2T9Pd9d7RaxMNZ_A4.roa (hash: JaoBtJPnKetAcsAKSYzZugD1L/s0rkCRonZhSkC43s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:b4:89:a8:22:99:cf:ed:1b:18:40:b5:74:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Oct 20 01:01:28 2025 GMT
Not After : Oct 21 01:01:28 2025 GMT
Subject: CN=4100c2daabb0dc218ca02ce4eaa5f18b2e16fc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:5f:5b:c1:a9:2d:38:7e:b5:06:ab:b1:9c:
d2:28:e8:3c:56:f0:ec:9a:aa:4c:00:44:a0:07:94:
d9:fc:76:6b:10:16:af:b9:db:83:ac:bb:45:b6:71:
b2:cd:92:2c:83:34:a2:a0:9c:1d:62:50:90:9e:a5:
a4:0e:4b:11:b8:24:53:6e:10:ff:eb:bf:be:d1:1b:
68:0b:65:16:81:70:0a:32:83:46:10:9a:ac:6a:8f:
34:65:48:7c:50:5e:dd:6d:37:63:f0:62:74:7b:fa:
78:b1:60:e2:5b:36:f1:80:2d:aa:de:38:84:29:08:
75:3d:e3:74:f6:3d:dc:ba:8d:8c:f9:fc:32:a6:e3:
9c:26:16:46:4b:c4:7d:b7:db:9f:d5:e7:b9:c1:47:
fa:95:f3:44:b0:4d:cd:2a:93:d4:6a:11:ad:ac:6e:
a8:fe:7d:c3:96:e1:49:40:7a:21:c7:b3:ed:21:a1:
9f:d8:71:38:84:1f:6e:81:2e:72:e5:c0:54:fd:a9:
b1:d2:cc:a4:fa:f7:76:75:55:cd:a6:29:dd:53:39:
86:6a:a0:f7:5b:8a:cc:bf:8a:e2:d0:6d:fb:0c:5e:
50:8f:7d:17:45:e6:1b:86:51:e8:04:44:c8:2b:be:
2d:4e:9e:c7:96:63:0c:fc:db:66:70:52:3a:0d:9b:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:00:C2:DA:AB:B0:DC:21:8C:A0:2C:E4:EA:A5:F1:8B:2E:16:FC:18
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3b:66:0a:93:68:58:66:1d:55:88:7a:97:2b:7c:a6:cd:c1:
0f:dc:a0:8a:68:3e:68:2a:39:ed:ab:24:cc:b5:4f:7b:55:54:
55:d1:a5:d6:df:2d:84:5f:16:96:8d:95:59:f8:01:eb:0c:20:
59:22:1d:69:b0:bd:31:ca:62:80:1f:ca:6d:8a:97:eb:87:a9:
fa:a0:2e:cb:fb:a7:ca:bd:ef:1a:5d:84:34:c4:56:83:e5:34:
f6:64:38:36:99:50:53:79:3b:2d:17:cf:17:6b:3c:9e:c4:a9:
a8:6f:31:1f:a1:66:bf:63:90:56:c8:d8:4d:4f:f7:d9:a1:b7:
00:ed:e4:50:5a:1b:76:9b:d2:f6:f8:c5:e8:fa:85:59:3e:7d:
57:d0:2d:77:aa:3c:c6:6f:40:4d:86:76:c1:6f:fc:d4:b7:de:
e1:e8:8a:c2:3f:1d:b6:e8:90:97:d8:6f:da:c2:39:5d:51:a1:
eb:1a:c9:33:12:58:c4:5d:22:23:72:1f:31:0b:4c:e5:b1:ab:
96:b2:22:31:25:fc:ab:88:2b:c3:0a:cf:f0:6d:51:5f:d8:37:
20:a0:00:0d:a8:50:54:f6:26:46:4e:ba:37:cc:b4:3d:15:f2:
17:f8:26:68:fb:7a:cf:ab:86:45:79:3a:aa:53:af:c5:3a:5c:
70:16:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:47 2025 by rpki-client