Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: JfiZN6e3T+LLre38QXWc+Hm8rNhjzfyYk/oU6Nr+l/Y=
Subject key identifier: A5:B6:03:C1:FB:9D:D6:40:02:AB:C3:5B:7E:FC:36:E4:B0:AF:63:4D
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 019A7112FD2C6B89170FFC3074CEA7EA3EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 04EF
Signing time: Tue 11 Nov 2025 04:01:01 +0000
Manifest this update: Tue 11 Nov 2025 04:01:01 +0000
Manifest next update: Wed 12 Nov 2025 04:01:01 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: A7RT/7LVd9HDtPCqygd4RrEBEK7yvIJ31QZ7H00PKow=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fd:2c:6b:89:17:0f:fc:30:74:ce:a7:ea:3e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Nov 11 04:01:01 2025 GMT
Not After : Nov 12 04:01:01 2025 GMT
Subject: CN=a5b603c1fb9dd64002abc35b7efc36e4b0af634d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e9:ef:57:66:8e:57:67:21:e2:8e:d0:f4:2a:
44:3d:81:e3:e2:70:7b:18:da:38:a6:f2:66:98:5e:
99:e5:d2:29:bd:cb:5b:98:e7:b5:ee:02:14:2f:73:
94:7a:ac:d5:d8:b5:e0:6c:4f:0a:26:9f:4e:a7:dd:
fb:22:15:bc:5c:28:d1:85:ef:7d:1e:09:ae:ab:9f:
94:09:d7:6f:d5:45:84:1a:0e:35:fb:79:65:e8:3b:
a7:5f:8c:f2:78:1a:87:80:2a:9b:82:5c:a1:27:5b:
d5:8c:42:fe:5c:da:15:fe:74:fa:88:97:0e:a9:9d:
96:4f:d7:0f:f7:55:6e:5e:81:05:ef:1e:d2:d4:18:
99:1c:2e:4f:dd:35:e2:61:01:15:76:4e:ab:0c:73:
3f:21:55:d2:ef:02:ed:be:20:1a:be:cb:78:72:9f:
dd:2b:d8:da:c9:0d:57:65:b5:d1:f1:03:ac:4e:c7:
40:4e:f7:53:56:d4:1e:62:a8:6a:97:70:87:47:bc:
e5:73:cb:5e:fe:c1:f1:c2:ae:7e:44:c2:5d:cc:c6:
6b:14:ff:9f:76:93:43:8d:dc:21:e1:4c:8d:4e:cf:
ee:25:ca:dd:e3:7a:e7:3c:03:95:95:15:f1:bd:22:
71:2f:c6:97:43:cc:c0:1c:d7:95:c9:1c:c5:f7:93:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:03:C1:FB:9D:D6:40:02:AB:C3:5B:7E:FC:36:E4:B0:AF:63:4D
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b4:52:ca:10:16:24:c9:7a:36:6a:4f:bb:b6:70:f0:ae:a1:
15:91:84:30:26:6a:27:9c:2b:53:f9:ef:30:75:7c:bb:28:63:
29:4f:a8:93:2a:9c:71:e0:42:8e:24:a5:13:9a:42:4b:8d:69:
97:16:df:da:9f:b2:c7:26:34:f2:a3:bd:08:88:8b:b0:5a:fe:
2e:75:7f:b8:3c:63:ee:c7:0e:c4:04:e1:f8:63:ff:ab:59:b3:
4c:0d:72:24:e8:a8:69:f7:40:87:60:d6:89:f8:1e:99:de:11:
36:24:1f:fc:ca:73:54:e0:a1:8c:3d:c8:86:cc:7f:ec:b3:19:
29:d2:96:f3:fa:24:21:75:32:13:78:3c:cd:cf:ee:5b:fa:da:
a5:2f:a3:a1:1f:94:27:41:45:30:43:d4:ec:b7:05:19:02:b2:
20:8c:2f:09:37:54:40:02:cb:02:48:fe:8a:b1:4f:ee:27:07:
34:ec:7c:6c:ea:38:6c:30:05:be:2a:dc:bc:85:a7:89:03:49:
93:a6:5b:d1:a1:1e:96:b2:3f:d3:8f:5a:99:86:49:3f:16:92:
c2:48:ce:54:c1:70:43:45:b6:b3:74:bc:ed:5e:df:d4:8e:f8:
26:3a:ad:ec:36:4f:1e:b1:d3:38:91:b7:89:f3:53:96:9f:55:
59:5c:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:03 2025 by rpki-client