Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: Vy5EHx44o7AdZqB7PeSSj4+Arx0uz64Qq44pD1Xs6AI=
Subject key identifier: 3F:EB:0D:58:D0:3E:BC:0B:0D:E8:F5:A6:C4:23:98:CA:7A:16:10:60
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 019A71B85E9028FAD595E4A651C185395E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 161E
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: eeg2mCf20G7M+Lz5AoS3siWv2F7N43WNpKcM96K7GJ0=)
2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5e:90:28:fa:d5:95:e4:a6:51:c1:85:39:5e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=3feb0d58d03ebc0b0de8f5a6c42398ca7a161060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:5c:51:c1:d1:38:27:16:75:44:fa:84:2c:
1e:cd:4d:8c:3a:32:c6:aa:b1:14:ae:33:73:37:dd:
cf:0f:1c:d2:33:15:69:af:1d:02:07:ce:ca:3f:ca:
a4:18:1b:c7:c0:b6:b2:f0:dd:b3:a4:f7:ae:7c:eb:
8e:9c:5e:ce:4c:e1:45:e4:86:3f:e3:55:f5:01:d6:
30:c4:81:a4:7c:51:bb:2c:33:0d:7f:00:d2:01:6b:
0e:cc:3c:9a:41:f4:d7:86:c7:ab:ac:e0:a0:69:02:
84:b3:16:7d:5e:7d:5e:2e:7a:60:be:ca:a4:f8:9c:
a0:ed:72:61:3f:ca:22:00:6d:54:fb:87:34:7a:ed:
e7:a7:86:5f:4f:8e:3c:31:99:f4:de:d9:57:61:9c:
1b:8e:6f:7e:06:77:ec:2e:30:11:c7:e1:61:00:f1:
43:43:71:df:ea:5b:09:6a:c9:90:92:af:69:4e:dd:
17:67:2f:08:e0:02:bc:ca:9b:af:47:20:e8:7f:91:
c5:59:e5:ad:45:0c:72:9d:c6:52:ac:85:45:6e:b2:
cc:13:e1:3e:2a:94:37:4c:ac:7c:50:9f:cb:44:c0:
c5:dc:c7:8e:3c:6c:e7:fd:17:53:e3:b7:d9:a4:9b:
9c:bc:b5:4c:37:e6:17:41:dd:e6:28:0c:a3:51:b1:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:0D:58:D0:3E:BC:0B:0D:E8:F5:A6:C4:23:98:CA:7A:16:10:60
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:a4:5a:96:f7:cc:8a:70:42:4c:1c:6b:d7:9d:6b:0b:5d:34:
44:22:2b:74:30:58:29:ea:c3:db:73:17:83:c0:32:8a:b5:5f:
89:77:6d:8e:b0:ab:8a:6d:4b:93:6a:48:e7:1f:e2:3c:40:02:
f1:42:89:73:59:d4:39:f2:87:21:6b:12:30:0c:fb:fd:84:70:
93:da:1b:4c:2f:3f:4d:8e:fe:02:71:ef:f2:c1:c6:27:3f:a3:
49:7a:86:c4:71:f2:41:27:c3:34:73:03:6b:1c:e5:67:99:13:
26:8d:90:35:d0:38:45:3c:f6:7b:bf:da:00:59:81:1e:de:ca:
83:ed:8c:39:55:0b:b1:50:79:a3:65:79:90:ed:30:e1:f4:a5:
7f:83:6f:e5:bd:49:92:a4:b3:83:92:be:0e:57:ff:70:80:c5:
fd:31:2f:b0:eb:b9:50:67:fa:ce:02:83:c6:24:9d:9b:7d:0f:
ae:b4:3e:e2:2c:d4:45:0a:46:ea:26:99:49:94:43:63:4d:6f:
87:00:5f:18:b3:42:66:93:bc:be:db:0b:d5:12:62:6e:7e:44:
50:84:dd:87:2a:47:e6:41:14:6f:d5:64:4b:ee:e2:5a:36:c9:
5d:85:5e:17:2c:8f:c3:82:ae:dc:cb:e0:fc:f7:5e:21:c9:cf:
b2:73:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:53 2025 by rpki-client