Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
File: O33D0CKCjk9bNr3vehiwuwz7rgk.mft (raw, json)
Hash identifier: mSwQ0c6Hfba0+JiULdOYN90ryWc/CUNxIB2qqNZBfvM=
Subject key identifier: 1F:F6:89:BA:1C:00:AC:75:6D:56:C0:02:75:0C:89:75:34:EE:E8:FA
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial: 0199FC218F06204D1220EE476F9323AF8632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
Manifest number: 0EF6
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: O33D0CKCjk9bNr3vehiwuwz7rgk.crl (hash: CRvP1GGyDPwufpVfalmSk5erHK+1Cr7TBeVN5DpRy9M=)
2: qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa (hash: 3oUc3w7eQj0W70nllC5MQS//X4mPSXNpxrBOqqqOaLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8f:06:20:4d:12:20:ee:47:6f:93:23:af:86:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=1ff689ba1c00ac756d56c002750c897534eee8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:4f:e5:a3:46:cb:d0:f9:3d:5a:25:6f:d0:
3b:46:6e:cc:56:ac:b5:14:58:fe:81:1f:3e:53:22:
01:f8:fe:8d:ad:81:7a:0f:90:fd:30:23:0b:96:9a:
23:1a:e0:45:f2:3b:69:aa:6e:a0:d5:6d:3f:b6:b7:
7a:98:3a:31:9c:92:1e:66:9b:60:d6:fc:19:51:13:
8a:7b:97:13:d1:2e:d0:3f:a4:0e:c8:06:ca:57:fe:
17:57:98:5c:3b:4f:b3:7e:be:97:e5:01:9e:73:f2:
b9:50:c5:59:0a:7f:b0:a9:fe:3e:23:85:cc:80:ee:
11:fe:19:b8:95:91:ce:c2:ce:25:1b:81:9f:a1:09:
42:9d:58:29:d6:6c:f1:de:6f:d9:69:e1:81:6f:43:
8b:84:86:f0:b1:99:b5:a9:1e:cf:c9:61:36:74:c9:
89:4f:21:73:a0:97:bc:1e:12:d9:e7:81:e5:4f:81:
47:b8:8c:06:bc:63:e5:ee:26:97:e3:17:0d:4a:b4:
87:04:e6:81:6b:6e:c9:06:62:ff:2f:35:4f:dd:30:
59:f4:f1:3c:46:17:1b:f4:a1:3d:e7:65:65:1c:04:
79:f0:0d:b7:e1:0f:b0:33:6e:eb:58:89:1a:df:46:
f3:b4:8a:ba:a1:40:7a:6e:a3:f3:c2:49:4b:37:cc:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:89:BA:1C:00:AC:75:6D:56:C0:02:75:0C:89:75:34:EE:E8:FA
X509v3 Authority Key Identifier:
keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:76:10:c0:bf:80:fd:3f:7f:68:77:f6:41:38:d1:72:5f:f6:
96:ad:d7:15:5b:32:0c:21:0b:89:28:a8:b8:4a:a1:e4:8a:df:
dc:0a:57:6b:26:a6:8c:ad:9c:ad:92:2d:e3:7e:37:a5:82:94:
28:b0:0d:b9:26:ee:a4:7a:c7:14:00:02:f5:4e:96:24:ca:e7:
46:a1:4d:18:b1:b4:ed:e3:de:0f:ae:61:19:5c:96:ec:83:2e:
96:75:54:cd:de:c9:05:33:c9:ff:0d:9e:80:ed:f1:a3:b4:49:
39:ab:ba:8f:6d:7d:ba:ab:42:ca:79:24:6b:c7:8d:55:1c:a6:
c0:35:a8:0b:7c:8a:93:3b:2b:d7:04:d6:3b:6f:22:be:98:38:
f3:28:0a:dc:18:94:59:8e:6c:e3:ab:8c:3c:ce:04:f1:e2:66:
78:13:77:ee:d0:71:61:8b:0e:f8:32:a2:84:8d:d6:1e:3d:81:
e2:8d:d5:12:f5:70:56:70:5f:44:44:a8:84:8d:53:34:63:2a:
39:ed:d7:81:ae:96:61:46:ef:94:13:5c:1c:6d:c2:7d:92:b0:
2a:0b:b7:9c:ec:0a:cd:77:ca:0e:5b:89:26:d5:8d:e1:30:c9:
42:b2:8e:fd:e2:9c:e0:7c:3d:44:1e:ef:45:5e:ee:d4:a8:8d:
5c:26:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:38 2025 by rpki-client