Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json)
Hash identifier: KM1zVS7tY1u+4oP0oTc9umO116RfgpusW7wYfk419lU=
Subject key identifier: DE:38:75:41:3A:75:E3:10:B9:0E:2B:BD:95:F4:B8:9C:0A:9B:51:0C
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial: 019A73011CDAFC1EB8EC13FB7EE1BD6150EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
Manifest number: 1443
Signing time: Tue 11 Nov 2025 13:00:44 +0000
Manifest this update: Tue 11 Nov 2025 13:00:44 +0000
Manifest next update: Wed 12 Nov 2025 13:00:44 +0000
Files and hashes: 1: HH4kNc1X7Vv3MoqhViTWK_E_VGI.roa (hash: O3Hf94Oha/v7Hh9wzuFaVr7kYXEFrWI2haBjKaDT/FA=)
2: QRWbN9gDLtiBKX0OHWitK4sar4Y.roa (hash: 9r207a3pRIUCl7V+9HyJcMsCjA45mcSFholzvZsRQ5g=)
3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: MGb0BFuEwNFm5QwIcQ4/2cI7z/2HDD+soIPLcmFHg8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1c:da:fc:1e:b8:ec:13:fb:7e:e1:bd:61:50:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Validity
Not Before: Nov 11 13:00:44 2025 GMT
Not After : Nov 12 13:00:44 2025 GMT
Subject: CN=de3875413a75e310b90e2bbd95f4b89c0a9b510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:90:d7:6d:eb:e8:fa:f4:45:95:0c:38:13:
3d:9a:f2:24:f0:8d:5e:14:54:f9:47:c1:3d:21:b2:
5a:be:b7:fd:db:53:01:f9:1d:2e:b7:da:89:10:e3:
b1:45:19:16:49:dd:53:cc:8c:63:c8:13:87:37:13:
7c:00:c6:3e:b6:dc:e6:a4:b2:65:f8:7d:7c:8c:5a:
4b:4e:df:5f:5a:ed:4d:d9:46:53:bc:a8:5c:cb:80:
40:f3:fa:f7:a8:9e:1f:be:f4:83:d5:86:55:64:d5:
f7:de:57:4b:8e:6e:5c:f0:01:4f:d6:6a:05:d5:8b:
bd:19:42:35:7f:32:b5:c1:08:3d:b7:07:c3:e8:83:
1c:b0:6f:c5:52:d5:cd:fb:81:40:41:3a:6a:5d:59:
ee:09:aa:37:e1:3a:5d:d8:bb:11:1a:cb:7a:d6:b9:
9b:56:83:01:89:8d:39:5c:cf:d3:3f:2e:39:bc:e6:
16:9f:77:de:f2:c2:fa:c1:35:50:7e:80:7f:06:ef:
20:0e:0a:17:ea:e6:f5:a4:8c:d3:13:bb:09:7f:3b:
62:c2:19:54:75:4f:44:cf:e3:81:57:81:11:86:c8:
cb:e0:50:40:45:9c:d8:9b:a0:f1:60:52:e4:63:38:
03:37:36:51:09:92:00:a8:15:0e:fa:32:78:1d:2e:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:75:41:3A:75:E3:10:B9:0E:2B:BD:95:F4:B8:9C:0A:9B:51:0C
X509v3 Authority Key Identifier:
keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fc:41:e6:d2:c0:0f:ce:c1:bc:05:a7:f0:8a:a9:08:21:a2:
9d:61:44:20:6b:04:be:88:e0:99:62:a5:52:7f:46:65:7b:14:
45:35:bc:32:79:40:c6:88:06:69:ea:e9:d3:fd:52:a9:8f:d6:
15:f3:77:d4:9b:55:cd:67:73:84:c4:4b:a9:5a:e2:2b:9d:a7:
40:dd:81:7c:8c:b3:d8:e6:b4:ea:c8:ca:e7:01:28:eb:cf:28:
f1:37:f2:3e:44:e2:26:48:79:c1:66:a2:5b:1f:56:57:6e:f9:
05:a6:d2:59:ff:94:3e:b6:64:1d:b4:c4:dd:a6:cd:be:ac:11:
2e:77:2f:21:dd:21:a9:f8:82:4c:4a:20:64:38:a9:89:48:74:
ac:5e:ff:79:29:05:ff:b9:0a:ee:8e:58:8d:00:41:fc:08:b1:
e1:9b:2d:10:64:61:74:67:99:3a:27:9e:a4:08:24:55:84:3e:
3a:6d:1a:8d:e4:9e:77:86:7d:9a:bc:d9:b0:c7:d6:f3:30:12:
03:60:03:e4:fe:c6:59:ac:83:3f:3f:b2:f2:a9:48:2f:e1:5d:
81:13:4e:88:80:75:90:0a:f3:9b:e0:16:3a:7b:00:da:79:db:
df:3c:2c:ac:94:29:e3:05:ec:4d:73:d1:c6:c7:ad:2a:34:cb:
38:de:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:07 2025 by rpki-client