Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: 8Jerpysn6qbHDuamDpiOQ4xhmfRKq6nI3KPEzHPmhn8=
Subject key identifier: BE:CE:AE:BE:04:8C:C2:29:AA:31:4B:3D:2F:E5:44:D8:A0:C5:CD:76
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019A71B88CBEA68C90E4F0248CC3FEB8C198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 10FB
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: 0PWnFoVqfG+EjTdY0ILVYlV6RPW7nNZYrVMexZQbIt0=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8c:be:a6:8c:90:e4:f0:24:8c:c3:fe:b8:c1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=beceaebe048cc229aa314b3d2fe544d8a0c5cd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:2e:b6:c3:a3:8b:9d:ed:c2:70:3a:68:ca:
44:08:17:10:fb:85:c8:89:7e:ee:1e:c3:61:8e:45:
b4:50:ad:d9:f2:ec:98:b9:ab:e3:7e:39:78:d7:89:
ef:7e:7b:fd:23:2e:dc:c5:7e:05:02:31:b7:6a:6f:
30:32:7c:f6:e8:88:ee:38:2e:14:67:6d:4c:f4:b5:
71:cf:cf:19:46:28:ff:d2:2a:3a:a3:a6:31:24:df:
9e:f1:87:94:ba:b6:46:6c:13:a7:17:34:81:4c:26:
d7:05:24:30:e2:af:4c:a9:cc:7d:a1:91:d2:d1:95:
a1:6c:8f:9e:ac:19:fe:8a:aa:31:8e:3d:c4:4c:7e:
5a:71:64:85:9e:c0:8b:d4:a9:58:a9:3e:78:19:16:
7e:20:41:63:d4:46:f6:48:6b:05:7f:a3:c1:59:64:
91:b2:7a:13:b6:9b:ea:84:5a:37:cd:cc:7a:c2:72:
ce:da:18:21:29:be:88:91:8e:fe:b3:71:ed:ba:aa:
7d:cd:54:b8:bf:43:a4:c0:6c:61:55:73:c1:52:d7:
65:6a:6b:23:fc:bf:64:14:3d:1d:74:54:0d:c9:76:
99:6d:8f:67:e1:43:77:71:bf:f1:01:eb:4e:d3:09:
8e:27:84:10:98:cb:4d:10:f3:00:e6:d3:5c:bc:26:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:AE:BE:04:8C:C2:29:AA:31:4B:3D:2F:E5:44:D8:A0:C5:CD:76
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:0c:d7:3b:57:b9:a1:a5:bc:74:b2:7a:92:eb:58:ca:13:
22:de:26:04:ed:ce:1b:ef:f5:52:dd:63:a3:17:39:a8:02:d7:
41:ab:e6:d6:bd:a1:38:ff:97:db:55:b8:4c:5e:03:8f:0a:75:
ef:1d:e4:4e:24:70:a6:15:0b:d0:4a:00:0f:f8:2e:be:60:58:
76:05:2d:5a:2b:86:84:fc:5f:f9:df:e8:96:a1:8e:e6:2e:a4:
ea:e5:61:a9:36:d5:1b:13:19:df:b8:dc:1b:37:19:c8:37:c8:
ac:41:d7:bf:99:c9:9a:cf:1c:21:09:71:4c:8d:13:ba:34:76:
16:71:da:01:7c:fa:ac:27:be:b2:4f:57:cd:e2:09:9e:de:7e:
e8:3b:1d:7c:63:a8:df:4c:51:5b:b1:5c:d1:cd:52:10:22:37:
5f:c3:1c:ae:1a:b5:6e:9c:2c:71:a6:49:f2:51:2c:97:3c:46:
2b:e4:3a:93:47:22:2b:6a:f0:43:95:e9:d6:b9:bb:dd:7f:78:
a6:fb:20:b4:9e:e7:63:05:10:9c:1b:4c:ae:89:b3:ed:9a:a3:
d5:c8:d8:89:28:c3:61:f8:78:69:a5:cc:aa:a7:64:0d:ba:3f:
8b:5e:d5:4f:ee:4d:b7:61:ce:7a:01:91:2c:9d:70:e5:12:10:
35:0b:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:45 2025 by rpki-client