Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
File: t_OeNnC0P1fxURt43eIIWWQBdFU.mft (raw, json)
Hash identifier: xON+d0EuJOHEaWZfOXZLovPNfzmcddnofRq6G/pZ3Ug=
Subject key identifier: 02:C0:A9:08:83:E8:7A:96:2A:C3:7D:39:38:AD:A3:31:45:5D:74:62
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial: 019A7293EC5FBC8EE8059C4578C686A49A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
Manifest number: 0EA8
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (hash: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=)
2: t_OeNnC0P1fxURt43eIIWWQBdFU.crl (hash: O5HqhgFvbZeVROUmelsGyhs7Afc2FpDglYPvzxtBeLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ec:5f:bc:8e:e8:05:9c:45:78:c6:86:a4:9a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=02c0a90883e87a962ac37d3938ada331455d7462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:32:fd:1f:76:b2:33:46:64:83:03:64:32:
ed:b8:44:a1:8f:b8:84:86:f0:38:68:cc:fd:14:0c:
d8:1b:f8:92:9f:9c:5a:6f:96:5f:f5:82:38:38:5f:
1c:76:b7:52:33:15:1c:1f:b8:61:7d:75:9b:b0:48:
eb:4f:f5:a7:2b:bf:a3:11:22:e3:9b:d7:ea:d0:55:
0c:9e:82:b6:a8:3f:7b:76:9f:3a:b3:47:94:63:26:
84:58:60:40:e6:c8:34:3b:cf:85:8f:9a:35:3c:da:
cb:52:61:d3:07:3e:d0:a9:c7:6b:c4:c5:47:da:17:
be:bb:a3:ee:ad:e4:0e:52:49:7e:02:a8:36:a0:4f:
8f:44:0c:c8:4a:59:42:c9:b6:77:b0:bd:1b:c7:82:
ce:e8:59:30:9d:6d:f2:64:4f:e9:3d:e1:d2:22:08:
3a:95:c0:1a:be:05:c1:48:4f:d2:0c:c3:43:cd:39:
c6:53:e8:fa:b9:86:92:db:06:f8:da:e9:63:2e:ad:
bd:80:54:57:9e:92:5d:df:74:4e:01:b0:a7:31:62:
4a:ee:8a:f8:b0:4d:5d:a1:36:09:6a:8a:2a:5c:a2:
6a:d7:10:6a:4f:57:33:2f:52:5c:d7:19:fe:89:a9:
9b:59:98:27:f4:0b:31:29:02:ba:b9:5c:12:63:27:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:A9:08:83:E8:7A:96:2A:C3:7D:39:38:AD:A3:31:45:5D:74:62
X509v3 Authority Key Identifier:
keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:03:49:4e:a7:65:52:1a:a2:20:d2:52:f2:59:cc:6e:89:0e:
7d:3a:9f:02:4e:ae:e7:12:08:61:af:a3:50:32:08:0b:68:da:
d9:ff:a7:50:3b:47:00:83:50:69:cb:af:4f:8e:ad:9d:60:11:
26:46:f3:8c:3b:00:39:f9:72:2d:e9:17:e0:52:79:7a:30:32:
07:bd:69:b1:4e:ce:69:b3:de:2f:ab:7d:e0:48:88:82:92:86:
ec:f9:7c:da:c2:be:fe:8d:3e:83:1c:af:40:e0:4c:98:32:d9:
9c:f7:c4:34:f6:c6:27:dc:62:ea:69:ae:bb:ee:31:33:41:f2:
b6:e8:f6:3d:99:31:3b:09:0d:b7:52:c8:27:a7:aa:a5:ef:67:
69:7a:6b:4a:e7:23:cf:2e:13:9e:44:1b:1f:4a:16:59:08:d3:
a3:05:8c:b1:f0:30:8c:17:d5:ca:84:60:e6:c1:ef:3c:69:7d:
74:32:a1:83:5c:de:49:9c:39:d3:af:23:96:67:b0:2b:fd:eb:
5b:a8:16:67:6d:e7:2e:d9:dc:e2:d9:93:df:f5:02:7b:f5:a8:
bb:24:ea:70:7b:2f:4c:98:b5:a9:e7:47:6a:04:5d:6d:05:db:
fe:5a:8c:28:ad:4b:40:65:37:f5:bc:5d:9e:fa:c3:79:d3:a9:
4a:0c:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:14 2025 by rpki-client