Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: BMlhPrLv316uGZhGREhXp0MS8z2C9ieKl3NDzYoEY98=
Subject key identifier: 29:AA:53:43:C6:74:CA:1B:06:FE:05:24:01:14:5D:E0:83:FD:A7:80
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019A0DB98AD8750D6482268A00721A2EAFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0AEF
Signing time: Wed 22 Oct 2025 21:00:54 +0000
Manifest this update: Wed 22 Oct 2025 21:00:54 +0000
Manifest next update: Thu 23 Oct 2025 21:00:54 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: 7K1X7viTxznUuf/8+eef9eN1JN3yyQlKirc6xzROjQ8=)
2: lPRYsXr9JuYhFsnWzjWNX4jmwLk.roa (hash: iBeGuJYtICJBlFiRT2Vx63Td8Xc0QnYIl7/YBwzr0yk=)
3: nse16AXrwM95FOL9jR_rmw-FBUU.roa (hash: CGc2Mm01WTMfgJYYXJTw2QH6yfxtC7+nYMl9iTzeZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b9:8a:d8:75:0d:64:82:26:8a:00:72:1a:2e:af:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Oct 22 21:00:54 2025 GMT
Not After : Oct 23 21:00:54 2025 GMT
Subject: CN=29aa5343c674ca1b06fe052401145de083fda780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:0c:42:14:95:da:72:f8:80:c5:78:a9:be:
49:0e:d5:8e:72:5c:ab:ab:24:2c:8b:e1:2e:56:c8:
02:b5:e7:e4:b5:04:52:ad:5d:71:f0:c1:b0:e3:c0:
9f:63:e8:51:02:c0:5d:d1:d6:7e:bb:98:58:a2:74:
dc:05:8c:5c:5a:e7:d5:1d:ff:6f:f1:53:9c:1e:e1:
01:f5:35:60:ec:d3:d1:0b:c4:b3:bc:79:be:eb:98:
55:2d:c2:81:00:1a:f2:a8:96:8d:7e:0f:d2:d6:36:
50:a8:fc:f2:eb:d8:ea:a1:69:fd:0c:18:91:dd:03:
1f:20:a7:5e:e2:64:3a:61:e0:05:cb:99:34:4d:de:
6d:7c:20:b6:5b:13:57:73:46:4e:2b:f9:6f:bd:f7:
b4:5c:51:61:3c:aa:4a:2e:61:3f:27:77:de:55:d5:
32:cc:fd:bb:d5:6d:89:d3:94:38:40:f9:d0:97:07:
86:47:0a:c3:d6:4d:3e:45:2c:02:36:42:5c:2f:3b:
f5:46:e8:a3:3f:2b:7a:b8:ff:22:a6:a7:7a:21:70:
12:cc:67:1f:5a:0d:6e:0c:46:14:e8:c5:c1:dc:ec:
57:f7:53:2f:5d:ef:3d:b8:8b:f4:ea:75:89:67:d0:
af:05:b8:01:c4:de:6a:a0:d8:5a:b0:65:6e:2f:ee:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:53:43:C6:74:CA:1B:06:FE:05:24:01:14:5D:E0:83:FD:A7:80
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f8:3c:35:f3:97:04:7d:b9:6d:fd:7e:7a:0e:6f:cb:fc:46:
f8:d4:62:e2:0d:6f:61:ec:a0:2a:63:a5:71:aa:4c:8d:8a:5f:
07:9f:76:8a:30:22:81:e4:21:a1:5e:a5:2e:d8:dc:46:27:a6:
24:72:77:d5:14:05:20:c6:97:11:50:45:d8:52:8a:fe:45:be:
b1:5c:5a:fe:07:2e:19:ad:15:78:43:50:37:63:b4:1e:34:45:
51:bf:97:0c:25:36:af:27:ef:0d:f1:e2:b0:ce:e7:37:de:46:
4a:af:27:42:68:9e:ab:de:63:17:40:56:16:82:66:33:a4:ee:
0d:dc:d8:09:3a:36:c4:91:a6:0a:dc:a9:b5:5e:33:a7:a7:42:
f5:32:43:30:1d:74:0f:3f:0e:b0:0c:c6:e4:08:aa:4e:14:8f:
c2:15:85:25:18:28:b9:a5:2e:5d:05:36:7d:a4:ad:8c:9e:9d:
ea:a4:13:96:19:95:c3:ea:27:85:74:97:6d:0f:6b:6a:80:b5:
34:7e:87:0b:df:a8:b5:6d:fc:2c:0e:81:07:ec:40:2a:4d:03:
55:ca:f6:7f:dc:0c:6c:b6:8d:78:ed:3e:fa:40:7e:6c:ed:df:
d8:ae:31:2b:b9:e4:b6:83:06:4d:42:57:c1:52:28:e8:a9:a9:
3d:b1:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:18:12 2025 by rpki-client