Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
File: OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft (raw, json)
Hash identifier: 3mo+SvNeOPk3QYS0CmMVL2EFCO6TIaiXkiP0LyvsE0o=
Subject key identifier: 90:2D:D7:0E:D5:0C:44:30:51:F7:66:FD:F8:1C:C7:4F:2E:C8:BB:D8
Authority key identifier: 3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
Certificate issuer: /CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Certificate serial: 019A71EEED9704873CF119147C427AA1656E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
Manifest number: 1139
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl (hash: iGqECeBiU2D3lPYAf8e275pBy7Pzmfq2pHOJFcWo9Xw=)
2: fmsKsNJsScyYZyH8RUfSLeG-UJA.roa (hash: XWgPxzT1eqv4he1A7biAZG6QqWis59ng7mldQueWS0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ed:97:04:87:3c:f1:19:14:7c:42:7a:a1:65:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a84dfef3d5107b84fc77c56dcf79e05fe9c7351
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=902dd70ed50c443051f766fdf81cc74f2ec8bbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:24:f2:c3:0e:b4:66:6e:17:b0:20:6a:73:
3a:2e:b7:75:e3:48:67:27:e7:9a:a9:02:9a:93:1f:
0b:28:2d:ce:47:01:0f:86:af:cd:0e:e8:35:55:71:
2a:2c:64:90:33:0f:44:1d:71:7b:a4:f4:72:23:50:
06:52:13:7d:c4:6c:3c:d1:4a:43:24:ae:46:99:cd:
94:36:60:fb:e1:a1:c1:c8:b5:7f:8f:fe:f6:cb:4e:
ee:30:02:cf:f3:ed:10:89:4f:3b:1a:d5:ea:75:05:
48:7d:66:3b:19:fe:66:93:35:99:12:74:2d:29:ae:
77:9a:24:b8:81:a5:a4:fa:c9:69:ac:57:9c:bc:d4:
61:bc:90:5b:20:1a:4d:74:99:59:0a:87:7d:8f:03:
e6:16:32:7d:1f:78:20:24:5d:cf:2c:57:95:2e:d2:
3f:96:a5:ee:a0:04:ba:9e:bf:1e:f0:e8:b8:8e:39:
a4:fa:b7:2c:87:04:e3:8c:c1:37:02:36:00:29:2d:
42:1c:ee:ce:47:3e:7c:5c:1b:24:5c:7c:4a:88:0e:
af:fd:13:c5:af:31:9f:2f:2d:a2:09:83:1e:36:05:
18:cd:dc:d9:0a:df:ca:ea:93:6f:0a:b8:e9:fc:10:
42:78:34:df:bb:88:1c:f2:60:55:a1:70:a9:9a:52:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2D:D7:0E:D5:0C:44:30:51:F7:66:FD:F8:1C:C7:4F:2E:C8:BB:D8
X509v3 Authority Key Identifier:
keyid:3A:84:DF:EF:3D:51:07:B8:4F:C7:7C:56:DC:F7:9E:05:FE:9C:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoTf7z1RB7hPx3xW3PeeBf6cc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d4b7f3-40ce-42ed-a93b-5e8dedac9cb7/1/OoTf7z1RB7hPx3xW3PeeBf6cc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e4:7d:95:62:06:be:b9:d9:35:6d:05:dc:be:3b:39:86:7c:
0e:09:0c:ff:4e:e6:58:20:33:af:ef:56:d4:26:60:e5:9a:6d:
74:69:08:9b:8c:05:3f:01:c5:c9:d2:91:d3:2d:4f:95:64:9c:
91:db:5d:b2:19:3d:fd:9e:dd:ca:8b:5c:e1:15:4c:a4:0e:3a:
1b:29:f8:8e:3b:5e:f1:2b:b5:9d:f6:c0:ed:fc:75:e4:59:29:
29:32:66:cc:b1:55:9e:95:99:c1:b4:75:5d:0a:1d:52:17:5e:
d6:c2:a9:96:74:37:33:a5:90:c8:fc:51:6c:b9:5c:76:ca:3d:
39:a1:03:95:61:32:15:e2:77:7c:b8:2b:30:30:ec:a0:6c:1c:
99:c4:ae:d4:42:20:c9:ae:7e:b1:e1:90:20:6d:b9:34:da:5b:
b9:7e:77:a4:f0:d5:d8:83:5d:e6:08:30:3e:47:7b:d2:35:53:
55:90:e7:2c:9e:6c:7b:18:3a:0c:0e:94:e8:1a:0a:8a:20:b8:
ca:47:3b:70:c3:61:c3:dc:2c:f2:97:c0:e4:ef:7e:b3:c1:43:
62:22:f9:ad:e1:08:8a:2a:6c:0b:8a:bc:49:8e:0a:c0:30:21:
36:33:a1:c7:42:4c:1c:c0:85:9f:28:7e:f2:56:0e:27:57:5e:
f6:8d:99:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:02 2025 by rpki-client