Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: NOViCizEfv23oAF9soczsLtqZ2IDcBTEHV3JNOQm8Kw=
Subject key identifier: 32:95:EE:BD:62:CB:C4:20:0F:F3:24:62:72:48:D7:B6:43:F1:19:43
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019A1AD06301CC395AB5E2E73CDEA0974F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0280
Signing time: Sat 25 Oct 2025 10:00:55 +0000
Manifest this update: Sat 25 Oct 2025 10:00:55 +0000
Manifest next update: Sun 26 Oct 2025 10:00:55 +0000
Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: CJjJhiJFqIruHVyIAThqcrDx71M9tDHoW+ZIKD7RW8E=)
2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:63:01:cc:39:5a:b5:e2:e7:3c:de:a0:97:4f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Oct 25 10:00:55 2025 GMT
Not After : Oct 26 10:00:55 2025 GMT
Subject: CN=3295eebd62cbc4200ff324627248d7b643f11943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:ba:e1:2b:ab:dd:99:4a:c2:57:7d:8e:fa:
47:3c:cb:d9:5d:b9:6c:62:7e:20:a8:51:cf:d0:5b:
2f:66:bc:49:56:b1:48:ba:21:b3:18:48:26:53:0a:
04:d1:5c:6e:86:5f:4a:c6:ee:38:19:35:c0:0d:3e:
44:0d:6a:f1:47:0e:d1:bb:fe:2c:00:08:70:83:14:
a1:23:45:f8:38:b6:c4:64:b2:89:45:eb:7d:20:00:
15:18:b1:e4:9b:9c:8c:ec:12:80:92:95:8f:2b:60:
ee:b6:0e:5d:4e:57:f4:10:27:a6:91:93:df:b2:b2:
53:fd:d3:a1:5d:ae:10:a2:4a:ab:89:e2:b8:7c:d5:
33:55:7a:c5:5e:b9:28:51:63:fd:a7:49:15:0c:a4:
25:d5:9f:dd:48:96:40:ac:57:09:eb:9c:32:4e:59:
54:f4:9e:95:5f:e4:14:04:13:43:9b:46:1a:83:37:
cc:38:78:da:92:66:de:ea:7c:ea:5b:2b:73:2d:6d:
22:e3:5e:52:20:fa:d6:38:4b:77:0f:b2:99:fb:3f:
23:bd:f2:3b:a0:86:f4:f4:a5:86:cb:40:33:86:80:
36:4c:04:a0:90:a3:41:e0:07:d7:9b:06:2c:49:f1:
43:61:e7:ae:26:b3:ad:a3:60:fc:00:0d:92:bc:60:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:EE:BD:62:CB:C4:20:0F:F3:24:62:72:48:D7:B6:43:F1:19:43
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:51:97:dc:3a:da:a0:e7:28:b8:a3:3d:32:1e:24:34:bf:3a:
0e:5f:0f:75:00:7d:04:a1:4c:eb:14:29:b5:29:bd:63:46:06:
ac:e7:f7:6f:b8:cf:02:e9:71:38:c1:ad:56:df:ad:36:c7:f3:
a0:25:bb:cf:b4:84:54:cf:a4:c5:47:e2:86:f3:21:4e:f4:14:
f7:4a:47:29:f1:e1:f3:dc:db:75:a6:33:81:25:57:0f:ea:6e:
c0:85:e1:03:d1:40:6a:db:68:58:15:0e:fa:c0:dd:84:9d:7d:
83:4b:30:dd:23:e0:be:51:d9:72:67:f6:be:cf:c1:22:eb:ee:
53:34:5c:a5:51:67:e6:35:6b:82:55:b3:8b:54:3c:57:16:a6:
4b:d0:97:d8:0d:f3:3a:04:17:9d:f7:07:b7:5e:0d:05:b6:21:
4e:ff:d5:45:27:a9:12:bd:3d:03:c9:cb:c7:0e:10:c0:40:9e:
b0:55:88:e7:64:fd:0b:90:3f:e3:15:b7:af:ce:c1:9c:bf:7e:
dd:6b:61:65:70:02:d9:6e:ea:82:ca:18:6e:fd:eb:1a:74:b7:
f3:a2:22:d6:41:a2:3a:3a:49:6b:9f:cf:44:fe:8a:3b:64:04:
1b:ab:b7:e7:1e:4e:05:3a:41:89:7b:1f:cb:f7:66:19:14:96:
d5:be:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:38:48 2025 by rpki-client