Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: ox41KoVzbpmsOA7eCQ47e/5v4iJTTREyiCBexX0eBF0=
Subject key identifier: FA:EF:57:99:65:1D:B2:FC:01:9A:DF:D9:5D:AF:A3:6A:B1:6E:B6:F6
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 019A71B7B0C382DE20A9725881DE76AF5D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 1252
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: j35PtMF2WKpoecaB6g7SKKlmY6yk36zz9EbCnaePu0I=)
2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b0:c3:82:de:20:a9:72:58:81:de:76:af:5d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=faef5799651db2fc019adfd95dafa36ab16eb6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:5f:bc:fc:03:89:54:4b:62:8a:2b:ec:de:
54:c9:67:cb:68:b5:31:69:15:f2:c3:d5:b9:de:d6:
d8:df:70:de:0e:99:ec:fe:79:2f:2a:d5:88:f8:9d:
ff:fc:98:e2:b4:70:e7:03:ba:56:0d:8c:bd:71:ab:
f8:57:d1:ad:2b:97:b9:e8:38:38:0f:ef:cd:0a:e3:
7e:7c:c1:7e:70:de:e0:1e:a0:56:0d:65:17:84:74:
c3:35:1a:87:3f:79:86:6f:4a:23:b7:f6:28:2f:1a:
0b:bc:da:f8:df:67:ee:b3:ca:4c:a9:ab:4c:a4:08:
7a:74:7b:ef:e6:be:f8:ad:26:42:af:05:14:31:16:
40:c2:96:ac:49:42:7e:61:9f:13:95:74:fd:c9:35:
f5:12:60:d5:0b:ec:7f:e6:89:9b:0a:c4:2d:97:98:
6c:cc:e0:4e:68:5b:52:3c:a7:9d:dd:f3:b6:f7:c3:
30:f6:9f:88:01:30:47:bb:97:b0:77:38:5d:5f:e4:
47:b7:f4:56:52:bd:b1:b3:db:e5:79:67:77:18:50:
8f:5b:8b:70:5c:aa:67:09:17:a4:57:cf:f1:98:44:
9f:85:58:e4:62:85:fc:e0:ef:f1:24:1e:b2:bf:b3:
40:69:7f:27:1f:f2:64:18:87:95:8c:de:e5:33:1c:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:57:99:65:1D:B2:FC:01:9A:DF:D9:5D:AF:A3:6A:B1:6E:B6:F6
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c4:45:d8:b9:6c:95:b7:56:f0:24:0c:32:f3:cf:5c:e1:60:
7f:a0:bf:bd:a6:cc:15:95:65:e6:86:d7:7c:a5:48:bd:e1:49:
44:3c:85:5f:47:4c:e4:fd:99:94:35:81:3d:8e:ac:3d:e4:e0:
92:11:ea:74:3f:bc:6a:c6:e5:27:16:fc:dc:aa:86:86:95:5d:
89:e3:41:1d:21:f6:c3:2f:1e:1c:48:51:ab:5f:85:70:b9:77:
b8:1d:f5:14:93:eb:d0:37:0a:20:9c:63:27:4c:8c:c9:03:e5:
46:33:57:b7:15:59:02:12:85:70:88:4e:fb:b1:f7:fe:e7:0d:
5c:2d:72:d2:69:c9:03:f5:2b:c1:71:c3:c9:32:ae:7c:2f:fa:
11:27:23:a1:cd:0a:0d:f2:42:bb:76:a5:ee:39:a3:6a:f8:4e:
59:2b:7b:58:16:b5:78:bb:f9:fc:c6:5a:f1:16:95:bb:a3:a0:
90:68:35:bb:b4:39:83:13:54:c9:80:09:c8:a0:b6:00:b0:bb:
b2:36:96:9f:85:10:45:72:2e:2b:70:42:01:c3:7c:a8:2b:dc:
c1:bf:d8:f2:63:0d:1d:73:a5:70:e9:b8:10:a2:7c:99:b7:ad:
3a:fa:d8:14:32:9f:8f:24:fc:0c:63:15:f8:8e:b3:f9:86:be:
96:1d:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:24 2025 by rpki-client