Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: Ft5nUKP3u+U+ZtXfZUFWECpsk7UBGTfdq1x83UMZyX8=
Subject key identifier: 86:CB:88:49:5B:1B:A7:60:BE:76:80:81:06:21:8B:8E:F6:D0:80:D5
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 019A72938E346CDC87DC32E7E803A6C7F1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: 2ELOPln+zfnKz12XrwRRL+GOnoXVbQxipjNN7Oekz/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8e:34:6c:dc:87:dc:32:e7:e8:03:a6:c7:f1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=86cb88495b1ba760be76808106218b8ef6d080d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:c5:3e:73:d1:ee:9b:06:2a:6a:4a:3b:82:
c2:70:d9:fb:de:39:9c:e4:f8:99:ba:30:ec:a9:54:
ce:4f:75:27:9b:04:5b:34:a8:3e:ab:22:9a:05:90:
77:cb:ef:b3:ef:91:90:cb:6e:e4:32:5b:4d:34:af:
07:c9:88:23:5b:91:7f:06:a7:a4:d5:f2:93:25:3b:
62:91:34:d0:b2:55:65:60:89:2a:e8:b1:26:00:fd:
86:0f:54:46:5f:3c:51:6d:ea:77:e3:e0:2a:44:f8:
dd:84:6c:44:69:e1:d6:fc:6d:9f:66:4d:8e:52:12:
85:92:6c:29:c9:29:c8:2c:be:09:7d:03:8f:5f:0e:
43:3c:09:19:3b:20:97:39:d5:1e:39:36:30:c0:3d:
b1:b6:95:cf:62:2d:ab:f0:2a:25:db:86:6a:7e:37:
b4:0b:c2:db:0a:5e:05:7f:57:95:79:ee:35:a3:2d:
de:97:09:11:d7:ba:85:41:25:71:5b:d6:39:25:09:
41:f6:16:51:9a:60:c0:c8:75:92:eb:68:fd:9c:0e:
b2:0c:3e:41:0a:12:8e:68:14:ec:1e:5a:49:09:45:
7a:c7:0b:8e:f3:7c:2c:d1:03:d3:a6:e8:21:de:38:
84:d4:d5:f9:e9:7a:f8:27:2b:dc:a8:3d:3e:53:de:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:88:49:5B:1B:A7:60:BE:76:80:81:06:21:8B:8E:F6:D0:80:D5
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:32:67:0c:d4:6f:22:28:48:df:31:ef:cb:17:0d:6e:1e:c8:
5c:f6:f1:fe:13:70:3c:06:ea:c3:91:b9:1e:7a:bd:85:30:a4:
78:4b:e2:31:17:ea:63:59:36:fc:50:ee:f0:7c:26:a0:ce:61:
a2:f9:d8:5c:36:f8:69:b8:3e:d5:5a:e7:34:c7:0f:b7:97:92:
cf:ca:89:5d:2b:63:2b:9e:09:b7:07:c4:3e:51:e0:04:d5:0c:
30:0d:ff:61:34:16:c1:95:86:f5:19:cc:00:73:db:84:c7:38:
e0:a0:b5:d9:28:a3:1d:a8:4d:4c:df:07:00:ce:ae:7c:4b:f2:
e2:6b:68:b8:87:6a:3d:28:0d:91:4c:52:23:7f:ab:8e:3c:ed:
ed:2a:7d:aa:78:5f:19:c2:97:11:49:f8:cb:e3:a7:aa:9f:3b:
5c:b2:d4:c7:68:18:b6:90:11:5d:07:a2:ce:3b:e7:a9:65:39:
81:64:da:eb:d9:60:c8:aa:ff:b9:8a:00:5e:d6:02:c1:03:1e:
98:cd:97:d8:2c:74:45:47:a2:79:d8:da:10:1f:a0:9b:dc:e7:
3b:b2:3f:d4:13:80:b0:b3:6b:df:52:bd:51:92:78:6b:cd:37:
5d:21:39:21:4c:1b:01:2d:a2:9e:8d:f5:51:d3:0d:88:92:73:
0f:71:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:28 2025 by rpki-client