Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier: sgdqy5FTmxgfR9ziZnV/sWGrRy7oAZ+Dd4Ir1ZrH6gk=
Subject key identifier: 41:4B:38:A8:8B:E4:19:B2:DE:77:E8:A3:56:5C:3C:54:44:29:13:E7
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019A2D7B63CFF16148AEE135E3DBBA8A9A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number: 1216
Signing time: Wed 29 Oct 2025 01:00:52 +0000
Manifest this update: Wed 29 Oct 2025 01:00:52 +0000
Manifest next update: Thu 30 Oct 2025 01:00:52 +0000
Files and hashes: 1: RN1TQT-xsg56kc-nHBGX1sw7VuM.roa (hash: D7xpV8ZZw/mpW8KuuJCirKc+B2zWMvFel25IE+bx6qQ=)
2: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: 7Rg6EEXF5J5/afoQxYOpv9jjcduz1RggbpsIqiWqmcg=)
3: p12bDBAT0QPkWrhSOmjX5OOfRYU.roa (hash: I61D+01sCFA7/6eEMCDLtoz2JVh8EMCx1bfIAf32jrk=)
4: syr1WAsKdpbK3B-2acqa83QBouY.roa (hash: 7AhmNgpdXoA3dOcpljZ7vHI4I+47jOSplCREprRNiXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7b:63:cf:f1:61:48:ae:e1:35:e3:db:ba:8a:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Oct 29 01:00:52 2025 GMT
Not After : Oct 30 01:00:52 2025 GMT
Subject: CN=414b38a88be419b2de77e8a3565c3c54442913e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:57:7c:1f:a0:99:fa:f9:22:b3:62:62:e2:
f8:17:96:93:8c:a3:3c:f7:67:6c:a1:75:7f:95:ca:
a2:69:15:6c:59:dd:84:1d:bc:0b:ef:9d:57:45:70:
bd:fe:1f:e2:9e:34:c3:ca:4b:66:bf:ff:13:86:5e:
ec:8e:a6:d2:ba:b6:06:9a:68:c6:40:5a:91:12:a5:
91:6f:f1:86:b2:cc:ce:08:16:5e:b5:f1:77:54:c7:
7c:5c:0c:72:40:c7:9e:20:0b:22:da:5f:5b:f9:3a:
8e:07:e1:68:92:4f:43:be:a5:ca:07:e0:4a:58:cc:
1c:44:52:02:1a:0d:6f:11:88:33:f0:04:80:6c:e8:
42:8d:0c:3d:cc:d9:92:c3:ea:8d:e3:63:1b:13:a7:
97:96:2b:47:47:7c:a2:04:7f:60:d3:8b:82:e2:4c:
2e:cf:73:fa:64:d1:2e:04:47:00:0a:3e:03:be:c2:
df:32:04:b8:42:6b:d2:5c:71:b5:70:f7:45:64:aa:
31:bd:86:f1:77:ae:e5:4b:b6:69:a5:8e:e5:6b:ee:
41:86:e4:ab:9e:fb:c5:68:47:3b:9f:37:66:cd:57:
20:1f:9c:f5:5d:0e:26:d8:a0:b9:7e:85:45:c2:ce:
99:0d:4d:aa:e5:74:69:1c:ac:f7:61:02:bd:cb:63:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4B:38:A8:8B:E4:19:B2:DE:77:E8:A3:56:5C:3C:54:44:29:13:E7
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ca:48:23:19:f6:bc:94:f1:82:48:c9:78:3c:a3:08:4e:82:
09:52:a9:3c:e7:d7:25:b0:47:d0:f0:ca:a8:94:9c:c4:4b:02:
a9:54:75:3d:08:32:94:42:5d:04:61:15:ce:7e:a3:a7:4d:98:
40:79:8e:90:57:4a:63:16:01:fa:94:9b:5e:4f:34:64:f4:d4:
20:83:14:aa:f3:89:df:14:9f:3f:e6:7a:12:af:d5:0f:43:79:
91:6a:7b:78:c9:4e:5a:66:c0:4e:1c:f3:22:c8:c9:75:15:2e:
42:a3:b5:01:60:14:7b:f8:b4:6c:22:70:b8:c8:e3:a5:bf:52:
21:06:c2:d1:3b:d9:9d:4e:30:c1:74:1b:58:05:52:d6:40:03:
29:51:ad:80:f5:cc:e9:1d:6d:58:b2:05:63:19:9b:60:e9:74:
31:4f:f7:ce:bd:8f:5a:d4:de:85:95:5f:11:7a:ea:5f:c6:5c:
bf:e1:86:6e:26:a0:cb:d3:10:ab:ba:57:3e:b9:63:f8:22:25:
29:89:f9:25:c3:02:ea:4f:40:92:bc:f0:bd:f9:3f:8d:58:f6:
f1:48:a2:d2:34:6e:5f:23:99:44:9b:00:7b:b7:7c:e3:77:af:
46:e5:c7:a0:38:f1:e7:5b:fb:a3:df:c2:5f:bf:40:21:f9:1e:
15:8f:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:56:08 2025 by rpki-client