Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
File: OgQpta7KyDZFRL9iP5TxY6_c5WE.mft (raw, json)
Hash identifier: kfDkMxvVZQ5/toVXH2PMpH+/fwHC1qoC0hfVsSRiukQ=
Subject key identifier: 43:10:C0:C8:D2:56:71:26:8A:55:E4:D1:EE:DB:8B:DD:3B:AD:26:B9
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 019A00356E525263AEC0C8556F8EE83F34ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
Manifest number: 0911
Signing time: Mon 20 Oct 2025 06:01:32 +0000
Manifest this update: Mon 20 Oct 2025 06:01:32 +0000
Manifest next update: Tue 21 Oct 2025 06:01:32 +0000
Files and hashes: 1: OgQpta7KyDZFRL9iP5TxY6_c5WE.crl (hash: t6WmVWe2wuWAe7G6sherpDOB3s3LExOC3fZZCrjl0RA=)
2: QLu-t4-kWwjTWD2HUVQ3JUjA93E.roa (hash: wwPcnLN7UsFWJVqWb0xH9PzsYRh1MZUdzN16ZynKLqU=)
3: X9-z3qhXpej4BCNHXlOlwIoxiSI.roa (hash: +XeMFApgKN+wHjuGvI8Wb1xE1s+7UuhIUkYxW35SfdA=)
4: hwkpF7GCiN1Fi1Bf-G_kcCT7lXg.roa (hash: owUDYc5hXMNAaSpXWFyOh6YRLado21xVEXGeqVIdneY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6e:52:52:63:ae:c0:c8:55:6f:8e:e8:3f:34:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Oct 20 06:01:32 2025 GMT
Not After : Oct 21 06:01:32 2025 GMT
Subject: CN=4310c0c8d25671268a55e4d1eedb8bdd3bad26b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:71:fa:ab:28:33:b8:6d:72:d9:ab:9f:ad:
f6:db:a1:bf:70:73:63:99:92:06:a0:e2:2a:5b:2d:
59:06:fd:e8:68:e3:55:cf:22:7a:19:ca:03:6e:6d:
d0:ab:a1:f5:a9:00:71:3a:a5:2e:37:b1:4d:ad:5c:
0b:8b:0f:9a:82:8f:90:8c:5d:8c:a3:f5:7b:63:5a:
1c:c4:65:ca:55:b2:95:68:53:94:8b:1d:ad:93:4f:
89:32:db:b8:fe:dd:10:92:0c:e7:a6:7a:62:a4:aa:
a9:28:06:18:67:78:e3:2c:6d:74:72:f2:25:cf:47:
84:10:8e:1c:20:05:4b:03:cc:d9:aa:88:97:3c:a9:
ee:cf:61:9e:cc:9d:b8:74:3a:98:a4:d6:2d:00:6a:
10:fe:e5:66:9d:9a:6f:ca:ae:09:5a:54:10:a1:b4:
51:fd:a3:12:b8:b0:cf:81:ce:30:db:1f:1a:4b:06:
63:24:94:83:bb:d1:df:e9:00:7d:49:3c:b8:19:65:
af:8b:83:0d:2c:d5:dc:43:a9:86:ad:58:e1:7d:3f:
e1:81:4e:9b:d4:8e:08:99:43:a3:00:27:2b:c1:26:
1f:5e:9a:fd:b8:3d:1e:69:0f:0a:9a:df:51:62:cc:
bc:51:ab:3c:14:3d:55:ca:23:05:24:0c:21:8f:42:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:C0:C8:D2:56:71:26:8A:55:E4:D1:EE:DB:8B:DD:3B:AD:26:B9
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:19:5f:e0:c4:1a:85:7e:2c:1f:21:37:cc:83:98:b7:f7:9c:
fc:2d:08:2c:8d:74:c7:06:00:d6:26:7c:de:43:36:e6:96:b2:
7a:e2:f2:22:81:5b:ff:22:14:4c:33:43:ab:57:98:d7:c4:29:
d6:06:7a:e2:6a:73:e7:fb:7b:57:5b:f7:71:d0:f9:6a:f5:11:
0b:4a:2c:1b:bd:54:2b:86:e8:b8:e0:89:d1:01:79:fd:b0:f1:
c0:16:a0:ff:be:2b:8e:a9:90:c3:8d:e0:30:a8:ef:8e:d8:ce:
62:1d:27:66:fb:cb:3b:4b:57:b2:f3:43:a5:74:9a:6a:8f:96:
5a:7f:47:8b:bd:bc:5f:53:2d:cd:b5:5b:a4:e2:f1:bc:3a:c4:
6e:d1:ac:c8:7c:32:52:1b:4d:fa:30:b8:2e:c4:bf:bb:cd:42:
b0:32:07:ee:99:34:9c:5a:6c:9a:c4:cb:99:a3:2c:0f:ef:51:
ef:bb:22:bd:17:dd:73:02:bd:04:13:ea:39:89:3d:a0:f2:d5:
0c:0d:11:03:11:5a:9b:b4:d3:0e:19:72:f0:67:5e:45:90:e5:
88:b3:34:28:c0:1c:8b:19:ec:e2:d9:65:79:31:49:26:e5:53:
3c:e5:f0:d3:52:ac:b3:13:9b:63:d4:fd:72:72:97:f6:ab:ce:
13:c7:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:49 2025 by rpki-client