Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: 7F0tu+TfZvqLM5NzcSTl/IYUIPJ7lQNhJnCb6MjdKxA=
Subject key identifier: 85:48:7A:DD:18:C0:2D:ED:A9:94:9B:BF:DE:07:1B:36:68:AC:8F:D9
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 019A72CA5478B71173F2677910C477577890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 0804
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: zYGCiVm4gBz4lMYp6ZBEigVhlrjhdFjqFQfyQp/8n8s=)
2: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (hash: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:54:78:b7:11:73:f2:67:79:10:c4:77:57:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=85487add18c02deda9949bbfde071b3668ac8fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:29:eb:23:31:4a:d0:a7:89:f7:de:a7:65:
26:b9:18:ac:71:01:b0:11:0f:57:6c:f4:3f:92:8f:
30:15:15:f4:21:e7:f9:5f:c5:70:3a:07:9b:6a:e6:
b7:a1:d0:38:80:90:ef:1d:21:2b:c5:28:89:6a:52:
11:67:59:db:3a:c6:bf:62:2f:ae:00:48:73:24:85:
91:ff:23:5d:5e:ed:6e:99:41:79:0b:6b:0a:cc:35:
ca:01:ef:03:7e:f5:b4:76:cd:04:a4:6e:11:c4:e4:
25:f2:2e:23:f7:c7:37:ee:d3:eb:fe:98:bc:38:0a:
5b:04:2d:4b:23:a3:04:5b:38:3f:dc:fc:94:93:45:
36:02:4b:0d:05:be:b3:0a:cd:71:bc:38:c4:44:a7:
4b:45:e4:ee:07:6c:f3:4a:16:0d:af:61:f4:4b:63:
2e:68:4d:1c:d6:9c:7a:ec:bb:32:f9:5f:e0:07:ca:
f4:51:75:e7:4e:8b:b3:59:57:67:c9:a8:2d:59:07:
a7:01:69:fd:f8:bb:fd:f0:93:af:15:fd:78:ca:72:
92:76:77:02:fa:1b:86:3a:a3:f9:cd:1b:15:e0:b4:
f6:4b:bc:d6:fe:d4:6f:de:b7:45:29:b8:f1:d1:39:
b6:c8:5e:4d:d2:4c:8e:80:a5:87:ba:4f:2b:04:10:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:48:7A:DD:18:C0:2D:ED:A9:94:9B:BF:DE:07:1B:36:68:AC:8F:D9
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:c6:e6:c5:49:42:99:00:dc:a5:ce:f8:fc:21:44:a7:3b:
01:37:74:1a:35:22:58:78:cc:38:b2:ee:66:d5:65:4d:06:f7:
4f:d4:4a:a8:2b:a7:46:a3:9f:c7:b1:d4:5c:01:70:c3:b9:af:
20:4b:eb:d8:d1:43:9f:5b:a6:92:dc:7a:30:45:50:0d:b3:e0:
87:6c:35:34:76:ab:40:5e:40:5d:9e:f9:87:37:9a:be:a3:e6:
05:3a:73:9c:6a:6f:77:0b:96:c3:4b:76:40:df:a1:09:08:ef:
e2:da:30:dc:a0:0b:40:7e:69:94:09:4b:78:88:b9:d3:21:cc:
db:e1:c6:6f:1b:85:1d:70:04:2a:c0:df:ca:93:5b:2b:08:7b:
b4:88:cc:78:00:44:83:7e:01:51:55:27:7c:d5:1c:80:24:3e:
c9:b6:ef:72:b7:4d:a4:02:41:e3:11:c6:1c:10:bf:0a:5e:b1:
85:45:11:53:d9:67:df:ee:87:5d:10:e5:4c:80:67:1a:18:fc:
c7:bb:75:5b:5f:ce:57:0b:e2:0c:2c:28:7f:ec:79:3b:bc:08:
25:41:06:0a:50:3d:79:7d:2e:e4:43:e9:de:f9:4e:63:40:c1:
c0:c5:61:19:23:6e:9d:0c:77:eb:6e:9d:14:10:7a:ea:c0:82:
8c:cb:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:43 2025 by rpki-client