Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json)
Hash identifier: 1gujmeFGjJm/3IBbk3u12a+oacqNS/NhCBhSlATv+eM=
Subject key identifier: E6:AB:CC:BB:5A:FD:89:08:87:96:CA:04:A3:39:54:A7:F4:54:75:0E
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 019A73018DAC0262FACFAF2D50B8AC44E195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
Manifest number: 0B58
Signing time: Tue 11 Nov 2025 13:01:12 +0000
Manifest this update: Tue 11 Nov 2025 13:01:12 +0000
Manifest next update: Wed 12 Nov 2025 13:01:12 +0000
Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: Lfccfqj70bjeEehBzM70UX4yMfbPjnbMeF6TT+Y03Yk=)
2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:8d:ac:02:62:fa:cf:af:2d:50:b8:ac:44:e1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Nov 11 13:01:12 2025 GMT
Not After : Nov 12 13:01:12 2025 GMT
Subject: CN=e6abccbb5afd89088796ca04a33954a7f454750e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ef:af:0f:99:62:74:0b:70:d3:60:be:09:74:
90:1d:07:3c:53:74:01:c4:1c:ab:ea:e5:cb:b5:d8:
09:cd:4e:33:cf:35:60:60:0d:12:91:7a:d9:26:00:
0a:d0:6f:9a:99:a4:d2:ba:83:68:dc:93:16:97:3f:
94:1d:d3:01:c0:d9:29:bc:2a:d7:d8:c8:23:54:7e:
3e:f4:40:ea:97:e6:b6:e0:4c:27:5f:c8:1a:f4:9d:
95:fe:ba:c3:62:9e:75:a9:27:65:ec:09:4c:99:b0:
5f:c5:83:61:8c:f7:ad:9a:78:8d:c2:da:d5:89:e7:
8e:e4:bc:4a:f7:77:db:39:49:53:88:df:ec:58:0e:
66:fd:8e:9d:a0:cb:64:08:c5:cf:9e:1e:18:4f:b6:
f5:20:23:e7:62:9f:f1:9c:a8:f7:8e:4d:3c:c0:25:
7f:d8:9e:7c:61:63:d1:ef:93:15:72:2d:77:6d:60:
16:9d:19:f2:8a:94:b8:dc:f3:96:f9:f3:8d:c0:e7:
08:f1:c4:40:79:2e:e8:a8:02:18:60:2e:ed:a8:73:
9b:1c:ea:79:30:f7:02:39:a0:7f:0f:f8:a7:40:98:
a4:69:25:ba:38:94:70:bd:20:ab:fe:9a:0f:6f:bb:
51:eb:0c:f5:87:3e:0c:e2:a7:5c:68:90:e6:1b:ed:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AB:CC:BB:5A:FD:89:08:87:96:CA:04:A3:39:54:A7:F4:54:75:0E
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:17:76:0e:4e:c7:0e:ca:69:69:7b:87:8c:00:fe:92:87:6d:
14:ca:b4:df:49:9a:be:8c:2e:a2:e0:85:df:a8:5c:9a:69:51:
b6:5c:a4:4c:92:ba:84:bc:2b:9d:9b:41:b0:81:13:43:88:90:
e5:a5:b8:10:ed:42:7e:27:15:91:72:95:79:94:ba:28:d8:1e:
c7:9e:0f:85:f1:70:c7:8b:5f:1d:cf:66:df:30:86:aa:9c:3d:
37:d8:52:7e:7a:a0:a4:98:e3:6f:5d:4a:18:db:b7:f2:de:43:
8a:cb:56:f5:73:8b:c4:0b:ee:4c:31:39:3a:d4:6f:f8:35:32:
6e:32:b5:5f:2a:91:d2:5a:1f:5a:97:74:2f:69:e9:44:d7:2d:
b8:67:62:e9:0d:a2:46:72:6f:85:23:91:18:51:3a:c3:48:b2:
45:53:fc:d2:89:19:73:33:a0:0c:76:91:bc:e5:74:82:77:c0:
fb:05:77:14:f2:ef:ad:b3:58:c2:67:51:80:72:e9:c5:c2:36:
e2:42:ee:a0:d4:a0:52:c2:77:a3:db:89:94:8e:33:54:ce:58:
d7:9a:58:de:41:d1:d0:aa:22:19:f1:e9:9f:8b:c9:cb:83:e3:
28:43:eb:90:eb:7b:39:c6:ee:05:37:25:70:71:66:7b:25:d0:
bb:26:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:49 2025 by rpki-client