Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier: M6fNi9TOzR8vtVREvz4YDjQ9oRPZHzAPbKBSmB1W7wc=
Subject key identifier: 9F:95:BD:0A:A9:AD:E8:90:35:5D:20:06:C5:FF:9D:97:CD:02:5F:DA
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial: 019A71B7F88A6B5E638458AAADAD3FD5184B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: KfvqJ792oMd34Pp7PugqoZjhvkw.roa (hash: S302iUZeOLpzdWoDN+iw2GhCZ0Q0jKKUkWWXOnKtMnU=)
2: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: r1uAZaJQfHUs0pNy5tI8LxSdty/OvTK1X0lRSDEYir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f8:8a:6b:5e:63:84:58:aa:ad:ad:3f:d5:18:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=9f95bd0aa9ade890355d2006c5ff9d97cd025fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:35:e1:81:74:f4:1b:e7:ae:48:65:90:1f:
03:11:9c:cb:7a:52:fe:ac:46:33:37:76:43:52:be:
94:95:8f:7a:30:5e:30:42:49:e5:fe:28:77:d4:7b:
e7:22:2a:18:59:b6:c1:a8:20:03:85:a0:0a:09:69:
95:5f:82:c9:a9:e8:d9:10:d3:0d:c8:3d:d2:d5:84:
4c:25:ae:52:79:a9:82:90:0a:93:bb:19:40:e2:c6:
7c:a3:e4:cc:e9:ec:d3:74:e0:49:88:85:28:05:83:
e3:cb:63:b1:58:19:91:ab:9c:78:61:d7:25:f2:c1:
d4:ad:d6:61:d0:bc:73:63:24:78:c9:73:3f:28:7e:
c0:1b:4f:d8:cd:73:81:8d:39:2f:67:8c:97:cd:dc:
db:94:48:97:c1:0b:15:a7:65:86:2d:e4:f4:1a:7a:
8d:10:01:85:26:d7:d5:d9:b5:36:69:0d:f5:9d:b2:
d8:73:de:02:a4:a1:d9:32:29:b4:32:58:be:50:19:
44:ec:70:a6:88:9f:c7:33:ee:1e:1a:f1:e8:0c:dc:
af:68:7d:b6:8a:f1:49:bc:7a:f3:1c:74:9a:41:50:
3d:11:5c:79:3f:09:68:24:e3:62:9f:20:b4:c6:f8:
6d:1a:03:dc:cc:28:d5:a2:e1:f5:32:68:1c:6e:e5:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:BD:0A:A9:AD:E8:90:35:5D:20:06:C5:FF:9D:97:CD:02:5F:DA
X509v3 Authority Key Identifier:
keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f5:ba:ce:b3:e3:0d:9c:c5:80:79:71:98:e4:64:7a:7d:3b:
ee:6f:17:e8:01:eb:8d:dd:7b:1a:31:ad:9f:04:03:08:32:87:
80:3e:8f:ea:49:18:8f:81:7a:3a:c7:3a:79:2a:75:6b:92:7b:
8a:2e:5b:38:fe:ef:a3:fc:82:2f:6b:85:05:e6:38:de:f4:81:
3a:34:bd:17:15:8b:8b:c1:e3:15:f5:0d:85:9c:46:79:2d:40:
06:83:5e:65:26:e7:7a:03:c3:ff:ca:0f:ff:1e:c3:47:46:4c:
45:5a:2f:de:01:0c:99:bd:9b:2a:51:3d:d9:ad:6e:d7:50:0c:
f7:07:0f:30:66:b7:00:da:c8:4a:ce:ad:9a:e0:09:f1:a8:fd:
d2:8c:55:91:9d:17:20:c7:4d:f7:22:73:01:6f:13:71:7f:47:
48:ba:99:2c:ff:7d:cd:5b:a1:20:93:27:1b:cd:21:78:5e:65:
67:8c:a6:ec:b1:7b:ce:b8:50:ce:1b:63:51:9c:53:ba:15:00:
0e:67:ec:36:d4:a3:f5:b4:94:fb:25:0d:9e:5b:97:5d:66:63:
2d:0b:27:82:37:49:5a:f3:c6:f6:76:82:e6:f5:57:07:df:ed:
f5:05:8f:e5:69:a3:9e:d6:78:da:6d:91:4b:40:24:09:38:8c:
18:bb:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:28 2025 by rpki-client