Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: BLa6e8QtAOgVeJXqm+hfNbZ5L7OLVPxPXmWcVF/KUic=
Subject key identifier: 59:66:49:F3:21:3A:D4:48:5E:BC:1C:DB:EF:F3:1A:E0:56:24:94:82
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 019A7293E04DFB09C8C3F4A0FB6D4D86F716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: 26TbrymsKsZjBkQHIbbRRWaFR8Y.roa (hash: SWIdCtaxTysSBJj/hZn1IHZ7qzsZ9zOqjJPPtoUQNGw=)
2: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: iaTls2zfI0lRaDnLvxH3vtp4Aq7DuqmVM8+V1st/qyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e0:4d:fb:09:c8:c3:f4:a0:fb:6d:4d:86:f7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=596649f3213ad4485ebc1cdbeff31ae056249482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:01:59:fa:34:1f:c5:97:6c:74:00:21:46:
e4:04:aa:8e:90:60:5c:f6:e0:af:22:46:ec:e5:56:
06:58:70:c4:5e:5c:73:6d:8a:69:35:9a:f2:a3:a1:
dd:bc:9c:d4:1f:7d:e0:30:28:db:7e:ce:09:05:dc:
3d:98:91:91:87:98:f9:58:1d:e6:99:cd:54:e8:a0:
6b:a8:ce:4f:75:a2:e0:7b:51:8c:4d:61:30:e2:a0:
5a:28:e7:65:2f:5c:52:3e:7f:a4:f1:3d:d9:31:16:
a9:43:e7:19:78:38:78:8b:b4:aa:e5:e1:33:13:a7:
6c:66:8f:99:5f:fe:c0:8d:1d:b2:ab:bd:d2:6e:9b:
bd:11:33:9b:19:70:9b:bb:99:7a:ed:85:d5:87:cb:
75:77:52:f6:dd:ff:88:2a:03:13:c5:5b:c1:4c:aa:
da:7a:a7:93:8a:07:b6:25:79:b7:14:b3:94:e1:b7:
0f:f4:61:0c:87:7f:0d:d6:5e:e7:61:de:e0:de:4f:
a2:b5:92:a9:85:0b:3b:85:81:e6:c7:5e:61:31:6f:
e7:7a:dd:37:b9:46:b1:06:31:ad:a7:d7:19:90:2d:
5e:92:06:89:e1:7a:6c:7e:4f:2d:a0:e9:7a:b3:30:
f4:3d:45:5a:4c:c0:7e:e5:76:73:50:3c:2f:a5:16:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:49:F3:21:3A:D4:48:5E:BC:1C:DB:EF:F3:1A:E0:56:24:94:82
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:68:f8:fb:e5:40:09:cd:8d:7d:f4:89:88:39:89:9c:f0:6d:
1a:81:3f:93:2b:29:f7:89:65:d8:3f:4d:1f:90:c9:22:06:32:
d9:e1:12:d4:35:62:5d:68:8d:fc:56:32:cb:3d:ef:27:31:6e:
6b:59:40:8e:61:32:87:eb:34:20:30:17:ac:94:ca:2d:4a:00:
09:62:8d:e4:fc:d7:04:89:4f:60:f2:d6:cf:19:42:e8:1a:c9:
2e:31:8a:0a:4b:1c:f2:89:00:cd:f4:a2:1c:6e:ad:84:84:7e:
da:ef:c8:3b:33:63:3d:f9:aa:4b:de:da:0a:59:8d:3d:e7:90:
2c:57:2b:f2:8b:31:1e:b3:81:df:1c:bc:d2:6e:ea:b8:f4:3d:
c6:6b:c2:60:85:08:39:53:ae:2c:e8:83:a6:84:b7:6c:2a:ab:
d9:8e:a3:61:b6:62:b3:cd:1a:08:3b:52:3f:80:e0:53:22:ad:
ba:27:be:9b:01:74:7f:de:83:c8:d4:e7:ff:4d:41:f4:b4:81:
c5:98:59:05:df:c9:75:ad:a7:fc:34:50:24:96:60:8f:d9:d4:
51:34:02:d8:f3:d6:b1:f1:d1:63:7d:2a:55:a9:31:da:ae:84:
b7:31:75:db:39:c4:14:42:9e:1c:27:ce:8e:18:54:62:d6:0f:
45:ec:1b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:50 2025 by rpki-client