Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
File: OA3Z5zVccsdR__TxddrOfap7nL8.mft (raw, json)
Hash identifier: 8pGxjfoDbWAnH9V0i5tiM+Yd6YCNztllvQHQSCMNlyk=
Subject key identifier: 11:93:8A:0B:6E:AA:96:20:36:F4:48:09:E4:E8:14:4A:A8:DA:1B:57
Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Certificate serial: 019931C87AC3B0ABA81DF91AAD0E9EF1CD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
Manifest number: 02FB
Signing time: Wed 10 Sep 2025 04:00:45 +0000
Manifest this update: Wed 10 Sep 2025 04:00:45 +0000
Manifest next update: Thu 11 Sep 2025 04:00:45 +0000
Files and hashes: 1: EbZtq2coMU270JnZ4a-zaYQT_0Q.roa (hash: yU3RaYJSG7d5Cg9VqCAtXvTzjDsa0Gi9QQwBd19SnQo=)
2: OA3Z5zVccsdR__TxddrOfap7nL8.crl (hash: WMaTb5/Z1gPNIzwxyhXbvpOCXeVfegGFI4/V8OSOwJg=)
3: kXbHyNgTaS4VSl7iNXExbL4omTQ.roa (hash: OHwa8ZLjzHYPPIqn4XloQ0JQlOD6SyKesyHnojZd1NI=)
4: sp5HWDtPMPeAvare88h0cl4f6NY.roa (hash: cp6kC/ZTZY60gv6a/PRr0WyiM/AiMEE4rKCbnq7jXXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:7a:c3:b0:ab:a8:1d:f9:1a:ad:0e:9e:f1:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf
Validity
Not Before: Sep 10 04:00:45 2025 GMT
Not After : Sep 11 04:00:45 2025 GMT
Subject: CN=11938a0b6eaa962036f44809e4e8144aa8da1b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:02:51:1a:86:2e:ce:70:bd:55:7c:c8:d5:
23:12:87:55:bd:f3:29:04:5d:d7:89:1a:02:53:41:
15:a7:7b:b9:e5:69:12:d5:46:3b:38:ff:f3:cd:64:
22:fc:34:6f:dd:cf:96:6b:87:07:d0:e3:99:5d:e6:
fe:53:0d:ca:bf:25:18:53:18:99:b2:23:de:46:c0:
c7:62:d6:2b:10:ee:fc:2a:0f:40:11:34:c8:9e:c8:
99:69:8f:92:bc:0c:65:76:9d:14:89:38:67:11:4e:
c6:bb:2b:7e:1e:b2:9c:a7:f6:19:3a:a8:ba:1c:a4:
48:0d:45:3d:fc:a1:25:1c:18:ca:35:95:21:47:11:
9f:05:79:e9:ed:36:91:03:d3:ab:a6:39:9d:9b:ce:
45:79:cf:47:43:07:af:f6:04:12:f2:b4:fa:6a:d9:
81:e9:cc:fe:b5:a0:d3:5b:90:54:ed:46:ed:28:48:
9d:aa:75:04:20:4d:94:8a:82:8a:68:38:9e:85:b4:
8f:70:4e:ea:b3:9c:73:45:6c:88:5c:e4:96:c9:e2:
b8:7b:d1:2b:6a:f2:72:aa:dd:b9:27:7e:f7:00:f9:
8c:21:c1:a0:3d:bc:3f:f2:15:ac:12:3a:a3:d1:47:
b8:e3:29:dc:7a:64:96:a2:66:71:9c:49:fe:0f:11:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:93:8A:0B:6E:AA:96:20:36:F4:48:09:E4:E8:14:4A:A8:DA:1B:57
X509v3 Authority Key Identifier:
keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cc:3a:b2:e7:49:57:71:84:e4:57:ca:0e:52:02:bf:d4:62:
f6:d9:ce:7d:c2:a6:0c:0a:93:cd:bb:5f:33:2a:10:8b:9e:0c:
5e:4f:1a:79:d1:ba:14:c1:6a:02:93:f1:b9:e3:f8:68:a8:75:
3f:ba:7c:b1:08:8f:6e:c3:66:b8:b8:01:a5:8e:31:0f:6a:cf:
01:83:f6:fc:7f:f4:96:91:0d:2c:47:a2:9a:86:98:91:6f:b8:
a6:1c:8a:d3:fd:6d:d8:f3:dc:92:54:b0:81:f6:c3:f2:76:5c:
01:6c:cb:1c:d8:bc:f8:67:a0:4a:df:b9:11:a3:4e:57:7c:a8:
bc:b0:93:e4:1b:ec:41:27:98:b5:8e:7e:5c:82:6b:78:fe:1b:
c2:f8:cf:d1:aa:b5:c9:c6:e3:ff:d2:12:56:bb:e4:8d:19:d7:
9a:69:f1:58:10:5e:b8:b1:97:e6:99:c3:6d:c6:b0:c5:11:f5:
55:11:46:56:2e:b0:8e:2b:15:ad:57:d5:b8:93:be:27:f2:ef:
cc:14:f4:39:28:c0:9f:7a:4d:9a:a4:c9:e5:7d:5c:af:99:fc:
92:a6:19:60:b6:ab:0c:84:dc:bc:6f:ef:b0:f3:24:2c:aa:e3:
4e:b6:8b:43:49:8d:d3:e0:53:e8:16:80:9e:84:9a:f0:c6:af:
bd:11:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:31:21 2025 by rpki-client