Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: qRxxSd9udLBXxiK82Ow5yaUUV7lFXoYNkWReTsJQJmM=
Subject key identifier: 64:9C:1C:C4:BC:7A:61:15:E3:D4:6D:D0:67:EF:D2:38:90:E2:83:3D
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019A71B856E37C9E80E926FC7937AC19A48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: 3zfhmRuzpKMKab2vapK/a4xj1jIhDprBJN3GOg+VIGA=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:56:e3:7c:9e:80:e9:26:fc:79:37:ac:19:a4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=649c1cc4bc7a6115e3d46dd067efd23890e2833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7f:7f:c2:0a:ee:af:56:2d:a8:bf:e9:9a:36:
91:b4:24:58:5d:4e:c2:21:62:0e:54:9b:92:dc:9f:
1d:11:29:36:87:6b:12:a3:d0:f4:3a:ec:d9:6e:0e:
df:8d:ce:29:25:8b:4d:a1:9b:d0:83:0b:ca:ae:d9:
fa:77:a1:72:bf:9c:92:ef:31:f5:49:60:3a:b3:2a:
c8:66:91:2e:95:b9:7d:23:d7:fc:da:d8:05:63:d6:
d8:c2:7d:9c:5e:7a:a4:d1:07:7e:df:5b:ac:1c:ad:
3b:5b:1b:51:5b:82:12:31:44:53:fe:e3:55:5d:b5:
bd:90:3d:e4:3d:dc:d4:45:54:d8:f5:70:47:b5:db:
1a:58:c4:a1:89:b8:46:57:7c:fd:43:ac:79:05:38:
5f:d6:e5:46:1c:0b:e8:b2:43:43:47:29:48:db:0a:
c3:2f:90:dc:6a:55:61:b0:c4:00:f3:30:6a:2d:a6:
d0:80:9f:67:7d:62:08:81:34:c9:75:6c:8c:1f:62:
0b:f0:66:ce:77:cb:26:fa:5d:d0:fc:6d:bc:ec:05:
02:b4:a7:b3:d4:77:89:57:39:47:bd:b9:10:97:ca:
a3:38:b2:0d:57:2d:41:03:6c:a3:0f:39:4e:0b:0a:
4b:97:c1:2b:51:f2:20:3b:45:8f:f9:b1:d1:6b:f0:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:1C:C4:BC:7A:61:15:E3:D4:6D:D0:67:EF:D2:38:90:E2:83:3D
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:67:90:ee:83:6d:61:9f:15:a4:4b:c4:dd:9f:fe:b7:0f:
6e:4f:38:43:20:3e:f7:b3:04:00:dc:11:4d:9e:41:12:2d:7f:
a4:c3:a9:20:5d:a4:a0:c3:f3:0e:6c:df:f2:26:41:e9:95:a4:
a6:e6:af:ee:59:ed:e5:7f:95:7f:f5:fb:39:db:d1:d3:dc:c3:
48:d3:ff:07:c8:30:6b:9b:d8:67:20:bb:39:8f:e6:1c:3a:b9:
28:a2:61:4a:53:88:f8:3d:f8:02:94:07:a0:15:64:c0:53:2a:
9b:df:50:f4:87:ad:0d:91:7c:03:8b:e1:1d:e2:83:c1:d4:b0:
72:af:ab:5e:e7:9a:21:fa:a2:cd:38:31:e4:65:4b:d0:43:76:
01:d0:f9:29:c4:89:45:f3:1c:44:04:42:65:03:19:39:8d:44:
cc:0d:3a:94:77:f5:0c:fd:9d:e8:22:6c:68:50:37:ee:7d:5e:
8d:9a:c3:45:32:d1:5a:3a:42:6c:af:b5:c9:17:ce:f1:8d:60:
46:3a:6a:c8:f5:3f:9f:82:69:ce:75:47:c6:a0:67:52:fe:06:
e0:90:d1:c0:61:11:f1:bf:78:51:92:0b:71:db:29:e1:fc:13:
7f:cf:2a:c8:a8:6b:b6:5e:4f:ef:59:e0:13:61:02:d9:86:b8:
76:e4:c1:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuFbjfJ6A6Sb8eTesGaSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNDkxMWU5ZDJiYmVhNjZhNmMyNDAzMTlkZGUzMDdiM2Rl
ZjQ4YzEwHhcNMjUxMTExMDcwMTM3WhcNMjUxMTEyMDcwMTM3WjAzMTEwLwYDVQQD
Eyg2NDljMWNjNGJjN2E2MTE1ZTNkNDZkZDA2N2VmZDIzODkwZTI4MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH9/wgrur1YtqL/pmjaRtCRYXU7C
IWIOVJuS3J8dESk2h2sSo9D0OuzZbg7fjc4pJYtNoZvQgwvKrtn6d6Fyv5yS7zH1
SWA6syrIZpEulbl9I9f82tgFY9bYwn2cXnqk0Qd+31usHK07WxtRW4ISMURT/uNV
XbW9kD3kPdzURVTY9XBHtdsaWMShibhGV3z9Q6x5BThf1uVGHAvoskNDRylI2wrD
L5DcalVhsMQA8zBqLabQgJ9nfWIIgTTJdWyMH2IL8GbOd8sm+l3Q/G287AUCtKez
1HeJVzlHvbkQl8qjOLINVy1BA2yjDzlOCwpLl8ErUfIgO0WP+bHRa/Bn0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGScHMS8emEV49Rt0Gfv0jiQ4oM9MB8GA1UdIwQY
MBaAFKNJEenSu+pmpsJAMZ3eMHs970jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEt
MTVjZGM5YThjMzhmLzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEtMTVjZGM5YThjMzhm
LzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSdnkO6D
bWGfFaRLxN2f/rcPbk84QyA+97MEANwRTZ5BEi1/pMOpIF2koMPzDmzf8iZB6ZWk
puav7lnt5X+Vf/X7OdvR09zDSNP/B8gwa5vYZyC7OY/mHDq5KKJhSlOI+D34ApQH
oBVkwFMqm99Q9IetDZF8A4vhHeKDwdSwcq+rXueaIfqizTgx5GVL0EN2AdD5KcSJ
RfMcRARCZQMZOY1EzA06lHf1DP2d6CJsaFA37n1ejZrDRTLRWjpCbK+1yRfO8Y1g
RjpqyPU/n4JpznVHxqBnUv4G4JDRwGER8b94UZILcdsp4fwTf88qyKhrtl5P71ng
E2EC2Ya4duTBBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:12 2025 by rpki-client