Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: /7Q4bdssklr/BIsaZebZ4ziQqU+lZCNRYyka0h4KORY=
Subject key identifier: BF:43:F6:CF:40:59:E6:D6:4B:0F:3D:00:E2:0F:92:CC:47:4C:0D:88
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019A71B786953DE7F8C54C38C9D550B71CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 03CF
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: wGKs6UMrpNmrOCiEOm1fTXgIZhVNtNNG/stVNPdVjgE=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:86:95:3d:e7:f8:c5:4c:38:c9:d5:50:b7:1c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=bf43f6cf4059e6d64b0f3d00e20f92cc474c0d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:98:a4:38:8f:2a:13:98:07:32:46:c9:bf:
86:c5:c7:10:8a:46:4c:79:33:f1:e6:98:aa:7b:ae:
cb:6e:65:78:db:66:d9:ae:e5:d9:69:2a:24:87:b7:
4f:6c:0d:13:ce:b5:fa:09:f4:ce:2f:7b:24:e9:11:
a4:5e:00:b4:20:4b:a4:0e:81:f6:21:39:41:02:6f:
b7:33:2d:bf:d4:9c:d6:ab:64:6e:dd:ba:7f:07:e6:
d8:02:6b:88:9b:b3:06:66:1e:ff:2a:b2:99:65:1a:
d6:c3:ed:e0:03:54:66:e3:00:7f:fc:33:58:a4:1d:
44:e9:02:f0:d1:fb:12:b6:f7:00:29:b6:a5:8c:1f:
99:c3:34:46:bf:6d:58:92:8e:f2:a9:50:b4:85:69:
60:b4:2a:a1:86:50:c8:a8:00:23:13:02:a5:7f:50:
ef:bc:1b:d8:45:c5:92:19:d8:30:9c:3d:c1:97:c1:
ab:3c:51:fc:b1:5a:47:c4:03:a6:66:83:dc:bd:03:
a7:c1:78:f4:a9:f3:c5:22:e4:79:cf:9e:de:78:6f:
5b:1b:20:21:f9:58:e0:86:39:24:80:f2:36:f5:4a:
05:b9:48:91:91:26:78:30:8b:3e:a7:05:86:2c:85:
df:cf:4f:ef:60:e0:14:f1:2d:ec:2c:4a:6a:99:db:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:43:F6:CF:40:59:E6:D6:4B:0F:3D:00:E2:0F:92:CC:47:4C:0D:88
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c1:cf:4e:ea:16:8d:e4:d6:ea:52:b4:4f:fd:ee:38:eb:66:
fd:2a:8f:ea:76:35:34:48:c6:c5:bf:3f:52:61:c8:80:a6:23:
11:5c:a0:88:2a:0f:9b:18:6c:83:46:b5:8c:a1:f8:ad:c7:91:
78:47:c1:b3:8d:b6:49:77:bd:20:4f:9e:cb:69:ba:f7:c5:48:
a9:63:ad:17:dd:9b:32:f4:d2:53:64:3e:52:fe:56:35:57:d0:
da:30:a6:6b:19:54:0c:2c:28:cf:7a:be:98:3d:d2:e8:d6:33:
84:6b:38:84:5d:04:27:9d:90:1e:d7:0e:53:23:56:17:eb:da:
83:b4:b2:69:c1:8a:90:25:d5:61:14:63:a6:bb:de:fd:b0:dd:
24:6a:79:4c:c4:0b:1c:a8:8c:2a:f5:fc:d5:27:46:bb:5e:0b:
71:4b:46:47:14:25:c1:2c:35:f9:3b:b4:3d:bf:08:9f:d8:dc:
a1:32:be:d7:4d:4e:11:69:6f:e5:26:7d:5c:14:28:94:86:c4:
4c:73:0e:ca:38:25:62:51:b4:ad:fd:85:07:ac:72:eb:73:41:
18:d4:2a:64:c4:b2:40:58:df:d3:fd:d8:f0:b0:c0:9a:62:af:
c7:89:d9:e7:c5:78:41:bb:13:c7:d3:8f:c5:4b:56:98:71:ec:
0a:65:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:07 2025 by rpki-client