Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: xBRqguEx7cCKf4U8SE5EcF3Y44jpOAzW8rTBLH8qq5Q=
Subject key identifier: 7F:24:0A:FB:5B:7A:3E:94:52:A2:C9:9B:93:DB:93:C1:29:A7:70:7B
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 019A725CDB7B2B6780FB33294529FCE11237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 0F5A
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=)
2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=)
3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: a4/r5Twapkk2rT4eADmrGJLNG57kauOpwPxPPXbWD7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:db:7b:2b:67:80:fb:33:29:45:29:fc:e1:12:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=7f240afb5b7a3e9452a2c99b93db93c129a7707b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:de:d4:5e:e2:f3:91:f7:3e:bf:2b:49:68:
bc:be:19:85:07:28:71:ac:5f:c8:22:cb:fd:68:30:
ef:17:30:4e:27:2f:16:e0:ec:6c:86:85:54:40:d7:
6b:50:c1:b9:03:c8:ca:85:fd:3e:50:31:12:ee:5e:
59:93:6c:f4:56:f5:f5:c5:b5:0e:7c:3f:b7:72:19:
c2:68:f7:b0:2b:29:42:f2:f5:c7:6e:b7:c7:29:8b:
40:9a:93:00:e0:1c:9c:e0:ea:87:da:4e:24:1d:9c:
83:4a:31:1a:0a:6d:9b:00:67:c6:f7:14:57:0e:2f:
67:b2:55:2d:d4:31:a5:d5:ce:18:15:c5:21:da:c8:
17:5b:be:88:a9:71:2a:1d:9c:67:01:45:5a:d4:cb:
d2:82:88:6e:27:8a:f8:b0:bd:a7:7d:aa:db:6e:af:
36:ba:f7:f9:ba:91:e2:78:7c:9c:54:ba:67:95:93:
70:3b:5a:06:88:34:dc:60:c7:c1:1b:74:a0:64:c1:
98:7a:ef:95:d9:65:ae:79:bc:e8:6c:04:15:2a:81:
98:eb:6c:7b:c2:18:84:bf:e9:2e:5b:4b:c1:65:17:
a6:69:e5:3c:b8:4b:1f:d1:8f:a1:a5:7a:ab:f7:6e:
07:f3:82:7c:96:39:48:bd:2b:23:1d:dd:0f:32:13:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:0A:FB:5B:7A:3E:94:52:A2:C9:9B:93:DB:93:C1:29:A7:70:7B
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3e:da:7d:02:f0:71:5c:56:6f:c2:03:6c:1a:53:f0:6b:cd:
f6:c3:7f:15:b3:4d:42:3a:04:7b:56:8d:44:3f:a6:ef:dc:a0:
3a:e7:3e:5b:6e:78:2e:37:02:7e:aa:db:b5:b1:f5:d9:e5:44:
74:54:80:40:be:af:87:67:8e:40:dc:9b:c2:92:64:7c:ec:78:
41:dc:cb:98:47:06:8f:7a:58:f5:99:fe:b7:6a:d7:71:20:19:
a4:ea:b9:f3:e3:2a:69:7d:b1:95:5d:ae:1e:37:0f:bf:1c:e1:
ba:b4:c4:ea:dd:47:96:ea:88:f2:a1:1c:d9:d5:1a:bd:b4:71:
62:63:5b:9e:cd:d3:9f:0c:09:58:62:65:58:b0:cd:26:fd:37:
54:04:9d:7f:52:44:c2:b6:a3:96:a6:58:5e:2c:7c:26:1d:1b:
ae:ef:21:1a:2c:0e:0b:62:a3:ae:e7:bb:47:5c:b9:b8:1c:62:
84:08:88:e1:89:2a:9c:98:58:98:40:66:de:d2:17:be:49:11:
1b:98:82:66:42:ba:2e:ee:f1:89:18:4e:76:ef:b3:bf:ec:c0:
fe:d8:3f:55:33:ea:64:a3:05:10:95:e9:f2:fc:de:74:de:dc:
56:8d:6d:08:85:2a:e1:7b:2e:f8:b6:fa:38:5a:82:2e:d2:37:
eb:35:8e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:43 2025 by rpki-client