Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: Jy4sArNdhvcKX+3/U5f5qvs793ec6Q4YLPdiFxfoMxg=
Subject key identifier: 52:79:48:C8:F5:7A:47:92:CB:C0:82:8C:44:84:02:0D:8D:A2:66:B1
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 019A7337F2B91BA85DB564E2E60F81E2288B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 146F
Signing time: Tue 11 Nov 2025 14:00:37 +0000
Manifest this update: Tue 11 Nov 2025 14:00:37 +0000
Manifest next update: Wed 12 Nov 2025 14:00:37 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: 8h4dR4nEfX2gixbZ23GmYkPrN5iWtgbSvGTGhrKoXWk=)
2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:37:f2:b9:1b:a8:5d:b5:64:e2:e6:0f:81:e2:28:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Nov 11 14:00:37 2025 GMT
Not After : Nov 12 14:00:37 2025 GMT
Subject: CN=527948c8f57a4792cbc0828c4484020d8da266b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:b8:37:f8:59:1c:4a:8a:c7:1a:62:76:3b:
53:72:ad:f9:75:35:48:6d:a3:fe:6c:98:bb:2e:e6:
7e:2d:b9:a5:ec:fe:3b:07:b1:29:fc:ca:4d:5e:60:
da:c0:e8:28:c7:fe:94:85:7e:a0:e8:4e:81:4f:09:
e5:57:02:66:9a:0b:9a:05:02:c4:f8:11:de:4b:95:
d9:3f:08:ad:6d:6b:b7:49:7c:42:94:8b:21:b8:a3:
a5:6b:18:61:f5:7d:84:d0:e7:d5:c0:59:34:c0:97:
09:aa:f3:17:b6:9b:fc:32:d2:5e:45:7d:98:47:98:
58:9c:c7:8f:7c:b8:50:59:df:ed:59:c2:86:0e:47:
9f:25:f8:ce:49:1e:11:7a:68:45:15:0a:64:1d:34:
01:1b:d2:e7:0a:15:3b:ef:23:87:67:4e:1e:66:f2:
8e:f8:a6:77:fc:d8:3f:47:c7:5b:aa:42:28:98:8a:
4b:8a:67:51:3c:fe:d3:98:e9:c3:97:56:94:20:6c:
f9:12:cd:f5:99:66:db:56:61:f2:8b:96:a5:e3:5a:
c4:7f:8d:52:71:8f:0b:04:13:a6:bc:1f:ef:0a:b3:
d8:c7:98:aa:9a:ae:57:74:a4:f5:e3:a4:33:50:ea:
21:23:93:bc:e0:81:7e:8f:b4:4f:27:b3:7d:62:2d:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:48:C8:F5:7A:47:92:CB:C0:82:8C:44:84:02:0D:8D:A2:66:B1
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:85:aa:d4:28:dd:c0:fe:19:20:f6:c5:ff:8c:7d:f4:69:
a6:03:b2:75:17:e4:77:86:cf:2a:79:b1:2c:90:52:6d:d9:91:
b4:b1:81:53:03:9f:e8:01:44:5f:e0:e3:a6:e6:7d:5e:a6:33:
d0:90:4b:cd:d7:f3:d0:6d:3b:bf:ae:3c:2e:17:f5:5a:7b:a2:
ad:bf:49:14:85:62:67:2c:e9:2b:f5:e0:5b:cf:9b:bf:81:23:
4e:ee:83:e7:66:0c:09:b9:58:58:db:8e:dd:c7:3f:81:fb:96:
fa:bf:b1:f8:8d:67:46:24:bd:6f:b2:45:4b:e4:0d:b8:f9:30:
9e:60:d0:7b:5a:bc:8f:e0:25:7f:1a:96:7d:d0:11:01:63:71:
39:28:0c:10:99:43:64:d7:0a:35:bb:eb:61:7f:7a:f9:a5:44:
bc:f0:f7:8f:5a:a0:39:95:66:f8:ac:d2:57:bb:00:3e:96:42:
f3:49:6e:b6:c9:09:41:de:47:b4:c9:88:78:78:fc:4e:d0:3f:
fd:bb:56:99:37:b8:ea:d9:fe:f2:b3:2b:bc:a1:d8:70:08:8d:
b1:27:ca:b5:c9:93:3f:cf:81:3b:20:fb:44:d6:f6:83:ed:11:
37:e5:f6:b6:72:b6:bb:ca:22:cb:bf:e6:02:bb:16:76:a6:ce:
49:07:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:07 2025 by rpki-client