Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: AXU3sGb1LMbHYmQxc7p69zua0eWs3Xu9MOpt9SYvNN4=
Subject key identifier: 7E:74:65:9E:FB:A3:52:9B:10:DB:31:06:D4:96:0A:76:E1:8C:67:87
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 0199FBEAEF398E1A83982F5BB3C62AD28F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 13E8
Signing time: Sun 19 Oct 2025 10:01:41 +0000
Manifest this update: Sun 19 Oct 2025 10:01:41 +0000
Manifest next update: Mon 20 Oct 2025 10:01:41 +0000
Files and hashes: 1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: gUMeez7i8M+k5xQbTwZhAQn7+saRwssz59dnwLBJQVw=)
2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ef:39:8e:1a:83:98:2f:5b:b3:c6:2a:d2:8f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Oct 19 10:01:41 2025 GMT
Not After : Oct 20 10:01:41 2025 GMT
Subject: CN=7e74659efba3529b10db3106d4960a76e18c6787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:67:63:75:bd:47:fd:b3:65:55:a4:9b:d4:69:
a7:b6:5f:aa:73:1c:57:b7:3c:ed:1e:b3:e8:4d:89:
50:25:30:57:40:30:01:95:11:24:53:0f:b7:8a:e7:
c9:46:2d:18:08:7a:c7:0e:bd:7a:a6:02:46:bc:d3:
67:7b:ee:16:1b:df:c3:1e:54:92:db:c7:03:2a:27:
98:5b:e8:f1:78:44:12:85:ef:46:15:11:0e:75:1f:
4f:5d:62:91:bc:5a:ff:61:3e:8f:10:47:b1:91:69:
11:52:8c:cb:b5:9b:5b:af:ca:7b:de:57:3b:65:0d:
83:e1:ac:c3:f3:a3:fd:08:e4:46:d0:c5:c1:44:98:
a3:ce:c3:8e:1c:21:e3:f9:24:fa:f7:63:ef:fa:c0:
0a:5a:21:0e:8f:46:e4:8c:16:35:fd:a4:ab:93:fc:
6a:e2:27:5f:4c:d7:21:1e:62:10:07:32:65:de:4d:
74:72:9e:b3:59:1f:13:98:60:ea:9b:3c:51:89:1f:
fc:90:bc:3c:0e:0a:24:27:d4:47:09:25:55:28:ba:
cc:e7:ab:55:8b:61:39:1c:fb:e4:5c:58:00:a2:de:
7a:8b:2d:a8:93:2b:ad:e3:78:32:27:10:af:03:4e:
26:f7:60:be:8c:30:ed:8e:d3:5b:75:55:66:67:66:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:74:65:9E:FB:A3:52:9B:10:DB:31:06:D4:96:0A:76:E1:8C:67:87
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:17:7a:16:02:73:9e:3e:16:b8:9d:32:b7:20:d0:95:fe:9c:
86:a5:01:9f:1f:be:21:bf:a3:d0:02:89:70:94:73:77:3a:c6:
0c:03:a2:f4:08:39:23:84:0c:40:7b:13:1f:f3:14:02:2d:81:
41:8c:27:20:f6:8d:44:a8:87:41:3b:86:1a:10:0c:95:d5:d6:
02:ca:ca:c8:a3:48:58:04:52:70:a4:ae:23:b0:b3:33:19:46:
f4:61:8f:23:63:bc:06:97:7f:b0:49:10:61:04:76:14:ec:75:
68:f0:a2:22:07:27:e4:cf:c6:81:96:55:c9:34:66:7c:00:ed:
0e:f1:d7:3b:ea:3c:94:13:7e:15:cf:c8:aa:d2:3b:92:c2:24:
8e:fe:20:10:19:77:f0:17:47:72:5d:df:ec:0d:37:29:ad:bf:
8d:82:1a:d5:1a:9a:7b:fa:0d:ff:4b:1a:a9:2a:6a:72:49:0c:
3b:9e:ba:d6:90:29:9e:0f:b3:b1:45:19:61:9a:12:44:c5:08:
4d:1b:3c:e9:89:47:0b:9e:8a:72:77:20:9b:e7:5a:fb:72:b6:
3a:74:cb:46:6c:16:2d:d5:1a:41:2d:67:74:8c:64:c3:d2:eb:
aa:a2:6e:51:1e:8a:cf:83:df:02:40:f6:53:b2:89:df:95:35:
04:f2:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:15 2025 by rpki-client