Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: ZABH/0vSWrfsnrwKbhT2HLj7hcBbrWiyeJ9sKr/TGV0=
Subject key identifier: E6:D0:F4:84:32:A5:B3:D1:3E:CD:49:1F:88:83:E2:F2:50:A5:2D:C1
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 019A27E6D1E4DE68F8BAC54EB4A7C4E9E415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0B88
Signing time: Mon 27 Oct 2025 23:00:29 +0000
Manifest this update: Mon 27 Oct 2025 23:00:29 +0000
Manifest next update: Tue 28 Oct 2025 23:00:29 +0000
Files and hashes: 1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: W9dBDDScxFdnqEZYFY+NFTMeu/4mHQ1ys5Q7fODAcFQ=)
2: iKF-Q9PfXOLXW4CJahZRW_VogkE.roa (hash: +qqtPKI3qMehNAw49JzdFyEOoExudNvSKeInlgLAy1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:d1:e4:de:68:f8:ba:c5:4e:b4:a7:c4:e9:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Oct 27 23:00:29 2025 GMT
Not After : Oct 28 23:00:29 2025 GMT
Subject: CN=e6d0f48432a5b3d13ecd491f8883e2f250a52dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:43:64:4c:88:40:4f:35:a5:ab:cf:71:b0:
0f:c8:01:c7:3e:b7:bc:3d:41:9c:fa:54:f0:d1:e5:
d1:89:dc:a6:b0:aa:54:c9:73:2a:fb:8e:13:f4:31:
41:9b:29:52:77:86:be:0f:c6:fb:46:80:9e:e8:90:
5c:0c:c8:8a:11:68:da:a8:a8:81:70:21:2e:1b:c6:
05:cd:b8:b6:11:8b:08:be:52:02:98:7d:1e:9e:f5:
c4:fb:26:5f:d1:44:52:51:08:0e:76:db:1d:72:83:
69:f2:40:f6:ed:e3:fc:ac:b6:14:1e:1e:88:eb:3e:
9c:a5:81:53:bc:77:cf:fe:cd:2c:66:10:31:76:03:
9e:07:8e:60:e5:f6:51:e6:8e:60:fc:7b:99:c0:84:
5a:9f:73:84:d0:3e:9a:3a:6e:3f:9d:69:91:ab:dc:
63:70:ab:e6:84:a3:4b:64:c2:a2:eb:c5:71:69:18:
be:04:17:08:3b:04:64:ce:d5:86:cf:c6:86:b9:99:
78:78:a2:7c:03:0a:2b:ad:bf:fe:58:43:22:4f:ec:
a1:06:b2:ac:f6:7f:8d:ef:73:3a:0c:e2:fc:a8:e3:
97:74:9b:40:71:8a:20:5a:d6:0b:b8:65:5a:98:4f:
b1:81:44:38:9f:8e:f7:71:49:3f:a0:3a:89:15:60:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D0:F4:84:32:A5:B3:D1:3E:CD:49:1F:88:83:E2:F2:50:A5:2D:C1
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e2:18:4d:94:ec:cf:6a:bf:db:de:01:0c:b6:83:e0:cc:39:
cd:a9:34:7f:10:a8:70:4a:80:76:f8:cd:f4:1c:8a:e1:f8:c8:
74:8c:0b:c2:55:bc:ae:23:1a:1b:8f:13:84:54:d6:6a:d3:07:
86:09:6c:12:6d:a7:37:f8:15:9f:77:0e:dc:b3:3e:d1:19:a2:
30:dd:29:b0:87:23:fe:c1:61:12:9e:e3:df:92:9b:b1:e3:d4:
8c:60:6c:8d:b9:e1:cc:bc:14:9c:5a:d9:db:64:0a:bd:35:24:
ac:bc:10:a1:0d:47:a5:19:f9:0d:84:63:9a:37:40:18:1f:a7:
67:57:37:07:66:bf:3b:68:6a:3a:5f:89:4b:50:2f:27:d3:ad:
d2:54:4b:db:b1:32:68:11:ca:66:19:82:30:9c:83:f1:c3:64:
42:63:38:63:fa:63:61:ef:88:7a:70:76:af:98:d1:67:f0:5f:
47:59:a0:37:e5:4c:35:25:b7:80:20:47:74:e2:17:9f:0e:ad:
50:26:d3:26:e7:c9:81:29:50:b5:56:3a:f1:ca:f5:ca:be:cb:
90:54:68:22:7d:27:d1:36:0f:38:af:06:b9:3d:43:55:b9:72:
e3:eb:43:86:e0:b2:0d:e5:0f:36:53:f3:65:25:95:a7:23:1b:
83:79:ac:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:23:15 2025 by rpki-client