Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: 4wjxntOry/mH7flvDjxDfCHVC+F8grfCXY+dHepbm3I=
Subject key identifier: 8D:75:4E:ED:8C:7A:21:F9:03:E5:C6:E6:0B:0E:1A:9D:96:4D:4E:B0
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019A71B90A093EB6C7992E0DD27FDC90B103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 0B0E
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: 4uHmLjaozidjjhzg4dR78qfBtskLoSVbhzOL21Q4WPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0a:09:3e:b6:c7:99:2e:0d:d2:7f:dc:90:b1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=8d754eed8c7a21f903e5c6e60b0e1a9d964d4eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:1b:c5:c4:b5:b1:72:ab:0f:19:c3:85:c0:
a4:df:cc:12:9a:6d:91:ba:84:1f:6b:63:4a:f8:0c:
58:8a:b0:15:7f:ce:3c:42:c2:8f:df:c6:c4:af:e3:
58:09:6b:02:f2:3a:2b:cd:a7:d2:04:b4:e6:57:51:
6d:7d:d7:c5:4b:61:9f:7e:0d:24:3b:cb:2d:af:73:
f6:7c:8c:69:db:12:5f:72:6f:49:31:47:07:de:2f:
09:82:f8:bc:a1:76:ae:06:ce:46:7b:e8:00:63:ca:
32:91:3e:2f:63:76:2b:b6:bd:f4:d5:8f:25:6a:f6:
80:68:2e:9f:c3:58:b2:0a:8e:88:9b:ce:0c:71:a2:
f5:76:54:7d:ac:e5:16:0f:8b:fb:38:9d:33:54:47:
8f:5e:0a:e8:5a:8d:35:40:4d:20:ce:ce:36:0c:5b:
a0:f8:89:0c:92:75:3f:4e:a4:45:b9:ae:fe:78:5b:
18:d1:32:c5:9a:53:d5:97:fe:ed:a5:22:e3:4a:7f:
a6:2d:90:76:24:b7:91:eb:9f:43:7f:3d:d4:5f:6c:
86:f7:db:08:3b:16:39:2b:e3:28:3a:2f:02:43:2f:
d1:f6:35:72:27:77:ae:e7:cd:ea:c2:c5:00:5b:a7:
c0:65:23:fb:f8:d7:db:45:59:b0:e3:9d:07:e5:20:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:75:4E:ED:8C:7A:21:F9:03:E5:C6:E6:0B:0E:1A:9D:96:4D:4E:B0
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ae:1c:f9:5a:d5:65:b5:4e:4e:b9:29:b2:1a:49:21:94:45:
fd:0c:b9:00:85:e0:4d:9e:1d:85:69:87:3e:a0:e3:10:a6:f8:
70:a5:6b:bf:e1:16:e3:8d:9e:93:c0:a6:78:2a:fa:e3:f6:2a:
fc:51:21:72:84:85:48:70:b3:6c:04:4c:0f:65:82:21:e6:f8:
c8:92:1a:de:54:f2:d9:f0:c5:be:c1:4d:00:5b:7c:29:b8:1f:
cf:18:9f:9a:85:47:cd:78:de:a9:08:90:cb:e0:e2:6e:26:3c:
08:c0:11:c7:8c:b2:61:b2:97:6e:46:a7:d9:31:7a:09:c3:7c:
50:34:96:61:ab:86:50:88:dc:2c:f0:14:fb:50:ce:c5:9b:12:
2b:41:79:51:24:4c:d0:8f:ad:6c:03:bf:a7:59:bc:0b:6b:06:
42:c1:23:06:64:2b:6c:fa:cd:e2:de:c2:01:d1:58:4a:d9:db:
a2:9c:de:c6:4a:95:db:5a:ff:3e:ad:e4:35:53:40:ba:87:0e:
fd:2f:a8:65:a1:64:5e:ce:5c:5e:c7:e5:43:34:81:76:00:08:
53:ee:a8:d2:55:3b:03:3a:15:32:13:ae:92:b3:cb:49:d1:54:
3d:ee:2c:f9:91:0b:ed:6f:af:4d:8b:c4:8c:3a:43:a0:b7:f5:
82:a2:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:58 2025 by rpki-client