Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: lncP32/Z9jfwnA5mbJxO4MJdiq7+zbyW0qJvsH7jYGk=
Subject key identifier: 62:B4:BB:71:EF:B3:8E:38:D7:19:AE:E4:BB:B7:CB:2F:D4:67:5E:2D
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019A71EE96B91C112CF20CB99B177C2D3BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0DC1
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: +rhr26hsq7cIJ29EwFOvoym8xHL8kxu7u9rqjIWtMk8=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:96:b9:1c:11:2c:f2:0c:b9:9b:17:7c:2d:3b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=62b4bb71efb38e38d719aee4bbb7cb2fd4675e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:cb:ec:1a:c7:4d:73:75:fc:5e:e9:87:d9:
16:58:53:88:12:b3:b4:bc:80:bb:3d:d6:87:4c:35:
af:0f:cf:66:13:9a:e2:89:ad:84:9c:a1:c6:70:7d:
dd:b0:32:8b:a3:60:90:e0:c8:65:51:48:49:70:6d:
da:b0:dc:a1:f9:c0:f0:15:3f:f9:09:cf:69:61:f6:
74:5a:2a:81:9f:2e:22:74:f3:92:a9:a7:cd:6c:a0:
0f:53:2e:55:87:7d:d2:38:8c:74:31:cc:27:8d:06:
ea:44:da:e5:51:4c:4c:eb:51:44:af:9e:ae:06:4a:
c1:98:5f:e9:5e:48:3a:1e:d8:3d:f5:d3:63:ab:e9:
6a:bf:77:db:92:91:ca:25:b9:77:8f:a1:d1:ce:32:
e5:35:0d:a1:90:01:f2:23:98:72:c3:ce:ac:90:0c:
42:77:e5:68:37:d7:7e:f7:15:59:a9:5a:91:94:78:
8c:61:ee:d8:00:89:58:7f:a8:51:5a:b7:a7:3a:7b:
38:7e:bc:ba:67:40:27:fb:2e:55:97:b2:2d:0d:42:
e6:a1:cc:46:24:c5:40:f0:84:f9:c6:59:f7:80:86:
78:69:fd:98:eb:6a:b7:6f:f1:70:27:2f:c0:8c:b6:
26:8b:04:2f:4a:68:96:a6:85:8c:db:64:90:17:2b:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B4:BB:71:EF:B3:8E:38:D7:19:AE:E4:BB:B7:CB:2F:D4:67:5E:2D
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ff:2c:2a:48:7e:39:89:04:aa:ac:fa:be:ea:64:93:46:5f:
63:80:85:f9:29:61:db:f6:50:74:1d:3b:cf:42:ce:49:51:b4:
80:8a:26:b1:15:1b:71:8a:ae:7a:d7:ad:61:70:cb:44:5e:58:
b5:dd:a6:bb:52:34:be:b7:42:4f:5f:5f:9a:df:91:85:9e:86:
57:f7:a9:41:ee:d6:45:84:a5:e1:0e:56:f7:88:64:40:c6:0b:
7e:ad:d8:80:68:b8:46:67:ff:e0:32:5b:ff:55:ef:02:0c:00:
63:e6:a9:66:84:9f:fd:92:e3:ea:38:bc:1e:12:f9:a6:58:14:
b3:00:fb:ef:89:06:10:01:ea:40:1e:f9:1b:0a:74:f0:59:03:
83:ee:1f:cb:98:8d:af:d5:7a:a5:db:8a:c1:3c:d9:91:28:96:
fc:30:44:6f:7c:e7:f6:89:3e:b0:5e:3d:70:63:55:14:88:e3:
d2:e7:01:f4:7f:ce:c6:55:46:53:63:49:e4:26:e9:24:17:09:
05:a0:c4:73:ff:da:d3:0c:45:b1:2b:4e:1d:55:a9:02:bb:52:
39:6c:63:c9:10:74:68:0f:ec:66:4d:3a:58:24:a8:12:0b:02:
e3:e5:bb:20:c0:e8:fe:6d:f9:d6:92:10:3e:f6:ed:89:a2:2a:
a5:fa:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:44 2025 by rpki-client