Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: Wn7N0uIY1laDpPOB34d2qusHnkNxNzCvKdY5xF5w4zw=
Subject key identifier: 77:BB:D3:F0:E4:53:0E:AB:AE:63:06:2F:7F:A3:35:2A:39:2F:60:12
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019A722657944313B0C8797D95B7B7CB139F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: G8QTYqdMA1vLo+oQbnmYByLXr2i9KKs1zTazxWQsbaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:57:94:43:13:b0:c8:79:7d:95:b7:b7:cb:13:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=77bbd3f0e4530eabae63062f7fa3352a392f6012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:b0:c4:94:cf:c8:a3:a1:4f:32:39:61:17:
af:97:44:c7:a7:7e:c8:d1:77:79:24:6c:65:ed:84:
1a:67:04:ae:44:6e:1c:df:0e:e7:8b:68:c7:a9:bd:
7a:17:c7:80:f0:73:8f:58:ac:7a:b5:6b:4c:ad:8f:
76:d4:72:59:bb:b4:79:84:f6:b4:35:63:bc:48:0f:
ee:f7:49:31:35:90:06:c3:a5:65:49:9b:25:34:3c:
49:e2:7c:92:16:d1:92:f3:a9:7e:fd:c1:4e:2e:03:
9a:49:2f:41:6a:b6:6a:07:14:96:6f:1d:31:35:b8:
52:e5:52:42:b4:38:c6:2f:b5:c8:3f:4e:20:0d:ea:
3b:43:bb:b2:d3:29:39:01:be:ba:58:79:be:f2:0e:
e2:bf:b5:96:41:d1:9f:59:75:4f:95:8d:c4:b9:77:
ee:90:11:c3:8c:4c:ef:d3:13:d3:2f:6e:27:70:5b:
11:f5:2a:72:a1:a9:41:c6:14:cb:ab:9f:0b:69:86:
be:5d:ca:25:38:3e:31:85:4f:9c:c0:14:b4:f1:fd:
2d:e4:ea:2d:a1:16:f3:bb:0d:86:1d:9a:95:1f:34:
79:58:62:65:10:20:4d:ce:be:2e:f8:f2:a4:20:e7:
2b:1a:4c:cc:e3:82:f7:aa:84:cf:8e:55:81:d2:98:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BB:D3:F0:E4:53:0E:AB:AE:63:06:2F:7F:A3:35:2A:39:2F:60:12
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7c:06:eb:8f:03:63:31:6f:d4:01:2c:16:a6:29:0e:c6:8b:
ac:87:42:dc:a6:c6:68:b2:19:d0:d1:bc:c7:29:fc:df:28:c0:
64:ac:b6:7f:67:7a:7b:b8:6b:a2:35:d7:62:b1:5e:80:55:3e:
12:74:46:1d:ef:f7:4b:5c:78:58:cd:1c:b5:36:6d:41:c4:5a:
53:ff:14:5c:44:0b:5b:6e:ad:aa:c0:db:b1:cf:e1:39:b3:32:
52:65:af:53:1d:23:d2:f9:87:e4:dc:fa:5f:fc:20:a7:43:23:
e3:0b:27:59:39:51:8b:c1:1e:73:4b:06:95:d1:09:f9:4a:1a:
89:99:79:bc:08:c6:68:3b:86:57:b2:7c:4c:43:9a:26:9b:f0:
da:ea:d3:2d:6c:94:d3:33:73:b0:8e:6e:ba:ab:6d:e7:fb:d0:
ba:b1:76:85:1e:56:4b:5c:54:0c:10:02:ea:54:75:02:ad:84:
0f:09:47:70:a1:5f:d2:9e:68:e9:c3:fd:86:f2:20:33:e3:66:
59:1b:45:29:28:e3:ea:43:e3:51:e2:87:b4:d0:e3:51:a1:b9:
03:dc:9b:7d:54:b2:5c:0b:96:74:d8:ac:a7:5a:4a:b7:24:a3:
63:fe:6d:78:e4:f8:1b:d4:e7:a1:e1:4c:56:4a:6f:bb:7d:71:
10:b7:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:09 2025 by rpki-client