Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: 1j8N1DdqnhE5QjYUJivqfB32aFHlqTfDL2r6yJdxzVM=
Subject key identifier: 46:B1:67:3E:F2:97:8F:1D:A1:AB:88:4D:4D:A8:0F:6D:F6:8A:D4:60
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019A0290BAAFB739A87D1E476F3E9E1F607A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 0309
Signing time: Mon 20 Oct 2025 17:00:30 +0000
Manifest this update: Mon 20 Oct 2025 17:00:30 +0000
Manifest next update: Tue 21 Oct 2025 17:00:30 +0000
Files and hashes: 1: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: caOicQxte8GL3RHcIB9ptxUp5JpiR4WiCVyFhAXzFfY=)
2: OssV7x9D975GtTJ9Zxk9k-IBuBo.roa (hash: HUBvx/9/k5ebmWEXtREoZEFoPPX5mJnk5D0pyuECT50=)
3: v7E-tTxflPnqxg3MpmR53F2Z6QU.roa (hash: Ghunk7sqbhHZuCust1Ewo+nGVQQe1Aek1JX2tRRm0JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:ba:af:b7:39:a8:7d:1e:47:6f:3e:9e:1f:60:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Oct 20 17:00:30 2025 GMT
Not After : Oct 21 17:00:30 2025 GMT
Subject: CN=46b1673ef2978f1da1ab884d4da80f6df68ad460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:18:98:6a:9c:ac:a4:fd:97:7b:5b:52:13:
27:64:44:69:2d:ce:7a:e7:0c:cd:c9:b8:78:bf:0a:
be:d6:d8:5f:ff:f8:1d:34:58:8b:f4:f9:7b:69:3c:
93:8f:b5:b2:c0:61:66:94:5f:b7:57:9c:1f:c8:00:
4d:c2:b4:bc:33:9b:83:0b:e1:35:4e:0e:8e:74:38:
d7:eb:a9:2b:c0:85:6b:9b:66:c2:46:5e:fb:db:ba:
50:78:be:58:9c:8e:8c:4c:6c:50:a8:70:17:7d:eb:
42:cf:d4:6d:58:d1:23:62:c7:6f:e0:de:aa:35:89:
a3:93:0e:4c:e1:02:af:2a:98:ec:9b:15:95:59:f5:
e6:c9:b7:b1:1d:7d:d3:98:4f:45:45:49:22:40:73:
78:d4:ee:77:a0:9f:f2:15:62:b7:a8:54:82:e5:aa:
e7:b4:e0:b4:b1:b7:fe:f5:6a:94:78:7b:a9:a0:6e:
1d:85:5e:c2:bd:88:91:ee:1f:dc:47:49:11:d3:05:
c2:23:13:f1:ce:ad:a9:6e:4c:7f:1a:16:e2:25:a5:
05:9c:59:7e:7a:83:38:4b:b1:81:73:3b:e2:1c:f9:
5d:b6:7a:1c:a6:0a:75:2d:84:63:3a:fc:dc:dd:31:
80:e7:b8:0e:6d:66:66:90:1c:bb:7b:c7:10:cf:12:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:67:3E:F2:97:8F:1D:A1:AB:88:4D:4D:A8:0F:6D:F6:8A:D4:60
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a4:f8:fc:cb:8e:95:06:35:3b:4c:a6:96:88:14:1a:97:db:
46:7c:92:0f:92:cb:ae:bc:34:3c:20:84:e3:07:e2:b1:95:99:
11:aa:bc:fe:7d:d3:97:37:d5:7f:fc:5f:9a:c4:3a:bf:a3:79:
04:30:95:2e:28:73:8a:be:6c:34:4b:40:14:20:d9:ed:17:f5:
ed:25:5e:9b:03:6d:8a:ab:6c:6a:6f:54:92:d5:b3:d1:8c:83:
cc:fa:4d:88:6f:47:2a:27:0b:26:e8:9c:dd:16:9e:73:70:99:
ed:6c:de:42:7f:2b:de:a7:a2:3f:67:e7:c0:ce:cc:c0:98:2e:
3b:3d:2d:d8:69:5c:19:b3:24:60:be:d1:fe:3b:1e:17:16:8f:
25:53:44:5b:59:b0:21:7d:5f:7d:1f:0f:7e:6a:55:17:9e:36:
66:44:4b:2c:b5:ab:16:a0:1a:5d:8e:c1:c6:77:0c:d0:d9:22:
f2:f7:33:c6:15:a8:fd:ad:92:99:c3:c5:03:e5:67:b1:09:dd:
a1:d6:17:b1:15:86:1b:ed:89:dd:45:55:e0:57:73:dc:1f:cb:
05:2b:4d:39:03:e7:33:5a:1e:70:35:3f:58:75:0b:8d:f8:8a:
e4:10:66:49:3e:6c:73:d8:a2:ed:1e:35:f4:a2:c6:5b:00:64:
f7:1b:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:04 2025 by rpki-client