Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: FN7drMLPSploMl0A+ZkYYHXdJ1Dtd7daIjOst1mc9QY=
Subject key identifier: 2E:48:2C:85:AD:C6:02:47:4A:9B:4B:80:1D:B3:D7:79:F7:29:D9:95
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 019A714A250FB31DC380D2E4D67AD87EEEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 02EF
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: bp5x62Zyl7JWmy23aQgvM10ld6k.roa (hash: WQfC7fNdtGvy/wZ5eChzXDiN7gOvNpvcGnI7lpvTUh0=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: UuU9ifjExdIHKmfMLjapk/+8WI+9pW4s+dIcm0+kGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:25:0f:b3:1d:c3:80:d2:e4:d6:7a:d8:7e:ee:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=2e482c85adc602474a9b4b801db3d779f729d995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:9a:6c:a4:97:14:a1:a4:c1:1d:01:ff:b4:
46:70:1a:9a:44:b5:c7:3a:78:ea:c0:18:66:5f:62:
d8:88:21:5f:10:26:eb:c6:6a:c1:dd:6d:28:6a:cd:
03:43:f3:3c:c2:1c:92:2e:f4:1e:bc:91:8d:be:bb:
74:6f:38:69:11:dd:75:b0:1a:c0:0a:e6:31:0f:31:
66:a4:fb:0f:ea:b1:68:ce:17:85:86:5b:b6:d7:4d:
f0:9f:bf:c7:d6:5a:b6:e0:43:52:a1:47:63:9c:57:
9c:7c:63:01:8e:38:e3:e4:92:9f:bb:07:f1:47:ef:
21:6d:3f:6b:3f:a7:5e:29:76:fd:3c:c1:4e:86:19:
2a:fd:d8:b9:fe:ec:63:73:b0:22:96:37:73:40:1f:
48:77:7a:bf:b3:12:ad:a1:f0:83:17:7e:3e:98:83:
9f:eb:09:04:44:eb:96:7a:6d:8f:62:c8:ce:2c:dc:
a4:77:ea:09:79:60:15:e9:ea:db:e7:a8:eb:eb:04:
0b:1e:c0:ef:ba:58:01:e2:1e:05:2e:df:8e:78:4c:
18:30:4a:6d:db:9e:55:5e:a3:2e:45:d7:eb:6a:59:
7f:50:bd:b0:5e:61:93:54:58:36:00:22:46:f2:7b:
17:73:04:c2:38:72:5c:0b:f9:0e:69:cf:56:f5:b8:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:48:2C:85:AD:C6:02:47:4A:9B:4B:80:1D:B3:D7:79:F7:29:D9:95
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:2e:06:d3:c2:ff:73:8a:02:6a:5e:42:14:79:9e:68:78:
45:ca:83:ad:e3:e4:24:1c:4e:61:c1:aa:31:e2:9b:7d:ce:4a:
a0:83:1a:0d:6f:bf:45:e2:39:8e:4a:97:c7:d5:06:f2:72:a9:
d1:eb:ad:17:33:f6:44:00:44:28:e2:43:a2:79:74:fa:ef:16:
74:04:65:1f:d4:fd:de:84:a2:22:cd:00:62:03:ad:73:76:2f:
51:d2:39:66:51:ba:ef:e6:c4:d8:0b:9e:02:3d:b2:cb:5b:fe:
93:a4:59:1c:ed:49:1c:e7:f0:90:77:83:dc:7f:dd:aa:3d:aa:
ea:44:ca:3a:c7:73:da:d7:8b:69:96:86:17:e2:8f:75:a3:bb:
2c:bf:c1:07:b8:79:be:cd:35:10:34:14:dc:2a:2d:99:29:ad:
cb:6d:96:ad:46:1a:d3:45:ec:b9:4b:82:9d:4e:3d:b0:af:6b:
a4:c6:ea:f2:a3:64:2c:05:d6:d1:f2:c0:8e:61:fa:bc:79:05:
10:3e:d2:7c:57:c2:3d:ac:aa:fd:44:33:81:a7:0f:2d:4a:76:
76:d2:ca:4d:75:be:3d:d5:ef:a8:ea:88:9f:8c:09:07:10:96:
34:f6:44:f8:cb:4e:51:38:42:16:91:b4:0f:2c:d8:fb:b9:af:
ca:a3:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:54 2025 by rpki-client