Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: 33V8JzwGOx8gfWN0pVCAp5fqi1G9kPxsvpwDg8Dio0g=
Subject key identifier: D3:E0:7A:66:3D:BD:77:BA:9F:9F:83:E9:F7:CE:BC:DF:08:F2:A4:72
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 019A7225E020AA2C6ADD3A112665667DAA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 0BDF
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: TqErbU2MzkbPZHuOKlWfi2gr3bSN/eKFQ6Gz5RdLNwI=)
2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e0:20:aa:2c:6a:dd:3a:11:26:65:66:7d:aa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=d3e07a663dbd77ba9f9f83e9f7cebcdf08f2a472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:37:55:c3:1f:38:2c:41:39:02:e6:30:56:
d2:1d:99:97:f3:f0:eb:02:8d:7a:e4:98:37:a2:38:
1d:6f:72:61:5a:94:42:b6:3d:7e:f3:95:2e:cd:8c:
4b:bc:61:2c:da:79:0c:2e:94:af:fe:1c:e7:9c:77:
e2:1b:e1:f3:0f:81:8a:d6:4b:10:47:af:57:e1:f8:
2e:4c:d2:46:09:03:65:85:db:e7:65:a7:70:0a:84:
08:48:30:29:4b:77:a8:85:7b:b6:da:f9:fe:e2:ca:
2e:e3:00:0a:ae:a7:35:3c:a6:71:13:ee:fb:e4:0a:
07:e3:a0:f0:6e:49:de:17:86:ce:57:27:f0:4b:57:
02:b5:a5:ce:de:09:64:3b:0b:c5:40:11:71:49:e1:
67:39:85:07:46:df:71:62:7f:e3:60:bc:8f:db:2c:
7e:ef:38:31:a0:05:ea:3b:67:cd:91:2c:87:6c:e8:
2d:2d:3e:6e:e3:45:c5:ae:15:86:1d:8c:4d:33:d8:
57:e9:74:22:ca:7f:c2:50:1d:e5:d7:2c:f0:f0:dd:
49:32:35:74:22:a8:f4:c7:c8:fb:11:d1:46:a8:31:
9f:4e:f7:93:d2:f1:ef:d4:d8:07:c8:c7:68:36:fe:
ae:5c:5a:c5:81:00:69:e7:ca:e6:21:60:48:0a:8a:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E0:7A:66:3D:BD:77:BA:9F:9F:83:E9:F7:CE:BC:DF:08:F2:A4:72
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4e:d8:db:09:0b:48:54:66:66:f7:52:2d:c8:64:e0:20:95:
a6:9a:cd:27:66:c0:c3:e4:9b:73:7e:2a:02:dc:aa:5b:27:25:
97:4e:ed:f9:24:da:4a:3c:0e:14:c7:24:45:4b:28:36:0d:d9:
47:b3:57:e5:f5:87:9c:24:92:40:72:b8:9a:36:cd:9d:73:37:
e3:07:bb:72:80:df:15:14:e5:5c:e3:c4:b5:60:d5:fb:d7:0b:
21:78:bc:4d:48:04:98:de:04:5f:9d:e8:a8:03:71:27:fb:12:
cd:5b:7e:8d:b1:4d:71:f3:27:8d:c7:16:2d:4c:a4:8e:0d:18:
80:ff:a3:7e:6c:81:98:76:a7:14:9b:d0:c3:3a:92:99:cc:7f:
8f:e4:5d:e7:2b:d5:6b:86:c3:41:3d:3d:fc:2b:06:8f:8c:25:
81:fd:e4:63:7e:b9:0f:99:d5:0f:4c:a4:ee:fe:38:66:98:28:
2a:e0:5e:02:0f:09:76:5c:d9:e7:a7:c4:98:e9:95:ab:5d:98:
92:01:bf:79:73:d9:7f:1b:2a:24:ae:f1:ab:83:cb:57:0b:45:
01:d9:e9:fe:17:5a:4a:81:6e:58:0b:b4:d4:6f:fe:43:9f:5c:
02:66:5a:ef:17:a9:15:e8:a3:1d:f3:21:39:7f:ee:ba:ad:a9:
38:84:62:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJeAgqixq3ToRJmVmfaqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjUxMTExMDkwMTE1WhcNMjUxMTEyMDkwMTE1WjAzMTEwLwYDVQQD
EyhkM2UwN2E2NjNkYmQ3N2JhOWY5ZjgzZTlmN2NlYmNkZjA4ZjJhNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFA3VcMfOCxBOQLmMFbSHZmX8/Dr
Ao165Jg3ojgdb3JhWpRCtj1+85UuzYxLvGEs2nkMLpSv/hznnHfiG+HzD4GK1ksQ
R69X4fguTNJGCQNlhdvnZadwCoQISDApS3eohXu22vn+4sou4wAKrqc1PKZxE+77
5AoH46DwbkneF4bOVyfwS1cCtaXO3glkOwvFQBFxSeFnOYUHRt9xYn/jYLyP2yx+
7zgxoAXqO2fNkSyHbOgtLT5u40XFrhWGHYxNM9hX6XQiyn/CUB3l1yzw8N1JMjV0
Iqj0x8j7EdFGqDGfTveT0vHv1NgHyMdoNv6uXFrFgQBp58rmIWBICopI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPgemY9vXe6n5+D6ffOvN8I8qRyMB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO07Y2wkL
SFRmZvdSLchk4CCVpprNJ2bAw+Sbc34qAtyqWycll07t+STaSjwOFMckRUsoNg3Z
R7NX5fWHnCSSQHK4mjbNnXM34we7coDfFRTlXOPEtWDV+9cLIXi8TUgEmN4EX53o
qANxJ/sSzVt+jbFNcfMnjccWLUykjg0YgP+jfmyBmHanFJvQwzqSmcx/j+Rd5yvV
a4bDQT09/CsGj4wlgf3kY365D5nVD0yk7v44ZpgoKuBeAg8JdlzZ56fEmOmVq12Y
kgG/eXPZfxsqJK7xq4PLVwtFAdnp/hdaSoFuWAu01G/+Q59cAmZa7xepFeijHfMh
OX/uuq2pOIRi8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:31 2025 by rpki-client