
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: a5YjXhaZsXRR6/oW/iuC3nA0J3v4aLXQ0/olzWx8yeg=
Subject key identifier: F1:F8:41:0F:77:F7:A6:E2:06:05:56:98:81:B6:34:0F:E5:FB:81:D4
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 0199FAD811EEC5F53C835F8B2966CA86761E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0DCE
Signing time: Sun 19 Oct 2025 05:01:28 +0000
Manifest this update: Sun 19 Oct 2025 05:01:28 +0000
Manifest next update: Mon 20 Oct 2025 05:01:28 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: 5ZaoGRgRT/QN9dVi9PLoFpgHm6kqpvd2IJGLU01KhY8=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:11:ee:c5:f5:3c:83:5f:8b:29:66:ca:86:76:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Oct 19 05:01:28 2025 GMT
Not After : Oct 20 05:01:28 2025 GMT
Subject: CN=f1f8410f77f7a6e20605569881b6340fe5fb81d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:b9:62:25:4c:69:73:26:c3:53:41:7f:40:
30:70:8f:78:98:aa:a2:3e:78:0a:be:2a:c2:b3:eb:
f8:e8:07:f8:31:ab:51:25:4c:eb:43:cf:bf:17:fb:
4a:81:a3:f5:36:5c:81:7c:24:a9:6a:c3:da:14:07:
d2:21:0d:4d:e8:d0:83:dc:39:8b:4a:68:46:79:22:
d3:58:18:1b:80:f4:fb:2d:6a:24:19:0b:c8:d5:1a:
27:d8:86:d1:92:f7:e3:23:65:6c:1e:8b:26:4d:ef:
ff:31:1e:63:a5:d6:f7:cd:92:4c:e8:42:3d:4d:00:
8f:43:d8:cb:bc:e2:a9:5e:bd:ae:96:9a:22:13:81:
cd:ed:1e:c5:4b:7b:58:0c:b7:89:1f:93:aa:fb:09:
7b:f9:92:b7:a5:79:ef:04:66:c7:7c:6b:2b:d0:ff:
f6:36:a6:d4:40:be:71:c7:bb:4b:72:c9:32:d4:fa:
ea:e2:f9:22:32:65:ad:70:8a:b5:da:c8:43:00:6b:
5e:27:8a:63:1c:f4:3e:52:5e:b4:b3:9d:24:60:a0:
e5:88:bb:17:8f:78:03:96:63:57:3c:a7:5b:81:05:
fc:0d:45:1b:0e:ce:a6:f3:2f:84:0b:77:cd:e0:ae:
2e:fd:c5:8c:22:bc:90:d8:57:1b:7c:9f:b0:90:11:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:41:0F:77:F7:A6:E2:06:05:56:98:81:B6:34:0F:E5:FB:81:D4
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:03:5c:39:e4:9d:62:80:10:0f:90:21:89:bd:68:5b:58:c7:
54:2b:66:11:e3:50:a7:e0:7c:18:57:e2:66:bd:84:5a:dc:90:
3a:d6:21:8c:7a:64:de:19:25:99:a6:b3:4a:ee:8a:6f:1f:9c:
1e:6c:9e:88:6f:86:b9:d7:c6:ee:a0:bf:72:b9:98:8a:b6:04:
de:d9:46:b1:80:fe:dc:30:8d:ed:92:b8:c3:43:db:47:9e:c5:
16:17:29:cc:e2:51:da:73:71:20:d0:7e:d9:e5:17:43:b0:45:
6e:fe:03:41:1e:7d:ec:2e:a5:69:6b:bc:63:b5:ad:ef:1b:9e:
27:f3:cd:a3:db:8a:b3:4f:84:91:cc:e2:71:1d:42:5e:7d:78:
98:7d:6b:cb:d4:ea:d5:2f:1e:29:e5:52:04:ea:7f:55:87:b9:
7b:fb:e0:8b:de:30:e8:f6:e8:f8:a1:4e:97:f6:e3:72:7a:c7:
5c:b1:cf:fe:8e:d9:38:53:76:3b:de:00:fb:05:60:59:c4:f4:
aa:5d:e6:74:be:0d:44:9c:da:74:ef:13:09:25:08:5f:7f:49:
67:09:74:51:80:5c:e0:64:1f:e4:16:d0:29:51:65:b1:a2:93:
dd:4b:29:e3:53:01:f9:60:3f:f0:b8:76:c4:ee:97:cd:01:ae:
63:7f:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:44 2025 by rpki-client