Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: WGE2MltGxXv/id6SO/i6qB3Km3YwcJ8JC9QNjlzwCKs=
Subject key identifier: B7:E3:16:56:EE:75:65:1A:8E:BB:82:C0:AD:4E:09:E6:4B:72:8A:2C
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 019A183D25CDC5F4CE18E4E2FA3DFA6124C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 02FB
Signing time: Fri 24 Oct 2025 22:00:51 +0000
Manifest this update: Fri 24 Oct 2025 22:00:51 +0000
Manifest next update: Sat 25 Oct 2025 22:00:51 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: EnyK1NrCwEpnx8uAqmv/CS09d6yNDulSiX0FKnfBgfU=)
2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:3d:25:cd:c5:f4:ce:18:e4:e2:fa:3d:fa:61:24:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Oct 24 22:00:51 2025 GMT
Not After : Oct 25 22:00:51 2025 GMT
Subject: CN=b7e31656ee75651a8ebb82c0ad4e09e64b728a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:ca:7d:a7:9f:68:81:06:4b:38:c6:0c:c4:
b3:71:8b:76:88:07:24:2a:61:61:00:50:14:d9:64:
ab:59:ef:b9:0e:fe:0e:e0:4e:7a:76:b6:fb:d5:79:
61:64:1e:c9:91:34:13:28:3e:03:4f:23:74:85:da:
63:38:80:29:64:a9:35:0b:d0:c8:57:3e:24:3b:8b:
8e:06:32:a0:8e:7f:3b:9f:94:5d:ee:46:10:79:f3:
8e:cf:f2:58:cc:e0:c0:17:45:56:35:17:34:e5:55:
a9:5c:97:ac:20:6d:4d:f2:4b:ac:e3:2a:ca:e7:f5:
d1:dd:3d:f5:52:d2:ce:ad:34:e6:59:36:a4:8e:6a:
cf:da:da:39:64:24:2b:de:78:79:dd:d9:fc:05:1d:
45:7e:99:03:4c:c6:5c:af:62:bf:56:e1:df:1f:8d:
c0:ee:9d:c3:e8:93:0b:d2:c4:c6:ac:d1:a5:99:62:
97:1e:a3:60:ac:69:8c:fa:ad:9b:db:21:6d:e1:ea:
f9:53:f9:7c:eb:4c:28:6f:bc:00:ec:f4:39:61:07:
24:28:3d:85:b5:42:f8:eb:cd:30:18:73:8e:4e:e1:
03:0b:1f:30:cf:5d:e0:15:37:57:76:0d:02:36:e7:
fa:9e:59:77:4b:df:c9:d4:b9:9a:2e:e1:05:f0:e2:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E3:16:56:EE:75:65:1A:8E:BB:82:C0:AD:4E:09:E6:4B:72:8A:2C
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:01:f0:9b:f8:2b:4f:dc:6c:45:02:f5:6b:2b:ed:2c:b0:
05:5d:b7:4c:1b:33:b9:20:31:2a:db:e8:07:77:0b:1b:eb:86:
6c:d1:67:f5:03:56:93:36:b8:b0:9e:a4:d5:b5:d3:e0:d0:60:
db:e7:bd:18:dd:9c:55:87:55:64:b0:15:a9:76:e6:58:2b:bb:
3c:b3:e7:38:ab:3b:18:ff:74:5f:f3:92:ea:9a:11:09:fd:45:
38:2b:15:b8:54:29:f7:d7:00:35:c7:47:06:fb:b4:18:a6:a1:
90:f1:4d:0a:c3:7c:ac:c3:32:1d:7d:78:04:8b:67:ea:4c:0f:
eb:bd:0f:f3:fc:0c:7a:a4:37:40:34:e0:09:aa:24:a6:8b:94:
4f:df:71:62:3c:ac:b7:a2:b5:da:2c:c0:0b:77:c3:c6:39:7a:
a0:88:28:43:e6:0c:22:d0:33:24:65:eb:37:a6:a3:19:75:fe:
d0:26:3a:9d:5b:19:2f:55:4d:13:3f:14:d8:a0:a0:79:b2:ac:
eb:c8:97:f9:c1:f4:ba:ae:7f:4b:d4:1d:0f:60:f9:d8:13:1c:
89:27:bb:91:3d:f8:0e:49:6c:ed:ae:c1:58:ea:b8:45:91:71:
b7:2a:b1:0c:b0:20:87:f4:ee:6a:5e:4a:26:7e:25:70:4e:ce:
c4:7d:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:23:00 2025 by rpki-client