Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier: TG+CZ47zi+wJagYpRhLAMkuAs2c7iPpM18DH0MWUohk=
Subject key identifier: 2A:BA:D8:6A:20:60:D2:AA:6A:EA:4F:D6:02:81:50:BC:4E:68:AB:2F
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 019A725C88483A9B8F4C84F724D23DE260EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number: 0C19
Signing time: Tue 11 Nov 2025 10:00:57 +0000
Manifest this update: Tue 11 Nov 2025 10:00:57 +0000
Manifest next update: Wed 12 Nov 2025 10:00:57 +0000
Files and hashes: 1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=)
2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: M/8oo3/KO2WzacyAibF5sXhCVS69vAUCN5hcZVAb0QM=)
3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=)
4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:88:48:3a:9b:8f:4c:84:f7:24:d2:3d:e2:60:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Nov 11 10:00:57 2025 GMT
Not After : Nov 12 10:00:57 2025 GMT
Subject: CN=2abad86a2060d2aa6aea4fd6028150bc4e68ab2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:1c:6f:ba:f5:7c:de:33:49:0a:34:19:3f:
f1:79:88:c5:a7:26:10:e0:26:8b:af:08:85:e9:b7:
c4:6f:26:60:83:12:87:61:63:e0:f5:66:20:4b:af:
24:6f:0b:b1:b2:bf:af:64:97:d8:59:65:c8:30:80:
65:aa:26:20:38:86:b8:1a:a9:63:cf:4d:65:5f:1a:
1d:61:72:a1:0e:14:e4:bc:e4:ea:22:b7:b6:36:d4:
f2:4c:f0:ba:8f:a4:4e:81:c0:21:98:70:16:c4:a9:
a0:5a:1d:d2:2b:4b:00:4e:26:f7:db:91:fc:98:b0:
72:43:6e:e8:dd:a0:39:4b:05:d2:8a:50:26:45:d6:
a6:8a:de:e3:74:2a:dd:50:b1:d9:fd:af:e4:ce:2f:
bb:b2:cb:b9:ff:f4:95:cc:e0:8e:12:1b:a6:10:74:
52:33:e3:59:f8:89:93:50:b1:5e:18:57:98:36:12:
e7:9b:66:72:d8:38:a2:63:1a:a3:45:09:29:4e:90:
5b:66:7b:7b:8f:2c:9b:22:03:6a:6a:90:c5:11:60:
9d:20:f4:9a:54:8c:dd:12:2a:68:9d:56:78:b3:32:
7e:92:5f:9b:5e:0a:ae:df:15:c0:52:d3:11:c6:8e:
74:a3:16:d6:a9:f0:49:03:29:ae:90:38:64:b3:a6:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BA:D8:6A:20:60:D2:AA:6A:EA:4F:D6:02:81:50:BC:4E:68:AB:2F
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e1:29:29:bd:1d:90:e6:f3:0f:47:1b:d4:d3:7e:83:27:fc:
d3:a0:b2:4a:ee:31:6d:0b:95:0e:91:7f:d1:1e:37:09:89:86:
30:3e:a0:58:c7:6d:7c:c0:f4:cf:c3:9c:5e:62:a4:ca:45:6f:
fe:a6:3d:2f:ab:c3:f9:c5:28:f8:5a:33:c6:9a:4e:94:ab:27:
01:9b:c0:de:85:9d:50:b3:94:9c:63:8a:a6:77:aa:53:8d:46:
b4:35:5a:77:61:aa:97:57:e0:bb:4e:b9:f7:e4:ed:6a:83:8c:
d5:9f:87:a3:19:d5:13:49:b3:48:7b:92:10:30:8d:8e:24:bc:
d4:14:0b:02:fe:07:15:b0:ff:8a:b5:df:e5:5c:b9:cf:0d:65:
a4:a9:42:68:ed:c1:22:db:ec:2e:a5:04:e5:ef:c2:8c:dd:94:
08:0f:03:e5:4a:2d:aa:3d:ea:d0:9a:3e:4e:55:e8:96:d5:6d:
35:3d:7d:82:b9:e3:af:fe:d6:eb:31:27:eb:a4:aa:be:61:c8:
3b:ba:7a:52:3f:a9:08:18:51:7e:d8:63:ca:28:99:cd:42:e6:
1e:5a:d9:c1:f4:0b:95:38:b9:48:0b:a4:3f:89:f0:a2:24:3c:
6d:9c:1f:74:a5:11:b0:e0:27:cb:19:ca:07:06:77:4d:00:00:
ac:1b:cd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:21 2025 by rpki-client