Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: ODzP/mC+Xwn0MXI/645BlBpxYGvbWyCjSsyoHgFiKHo=
Subject key identifier: F3:82:BC:D3:A1:CA:2E:06:54:E6:E7:97:2F:DB:D4:60:85:2B:8B:EB
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019A7112D97F70ACA97CD6C969A324633009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 076F
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: 6vJvEHB7Oy3MdYPNeP/g4Vo3lxRL2UlKwqqXIw96HpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d9:7f:70:ac:a9:7c:d6:c9:69:a3:24:63:30:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=f382bcd3a1ca2e0654e6e7972fdbd460852b8beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:4c:35:72:e4:c1:64:c9:41:cc:01:26:10:
c2:d7:ad:cc:ec:f2:f4:af:c6:fd:e7:7f:eb:e6:25:
5c:1c:86:ad:03:43:81:b9:58:70:ba:88:ac:e9:17:
4d:3f:4a:45:e5:46:5f:24:32:08:86:61:eb:aa:32:
e1:62:cf:8b:02:5a:29:20:05:a9:85:07:bf:b1:53:
3d:47:84:79:cd:db:86:c2:3e:75:64:7d:86:d7:ca:
18:97:44:2d:98:50:27:2e:1a:71:65:ec:b4:e0:d6:
4e:89:a4:c7:9e:21:a6:4a:a3:1d:e3:96:a3:9e:0b:
0a:60:8d:50:40:6e:9e:6d:6d:ea:39:45:ad:28:a8:
51:02:6d:2d:7b:20:41:05:5c:de:a3:64:99:11:f1:
d3:86:e6:4f:09:da:6d:cc:6c:2f:d8:a7:24:7e:d1:
41:b7:67:bc:4f:fd:f7:c1:41:8e:88:ba:c8:cf:c6:
03:19:79:52:2d:dc:5a:1a:28:91:7c:94:4b:ba:ae:
10:56:23:7c:f0:46:58:19:fc:9d:55:b2:77:c0:97:
f7:66:eb:9f:66:62:31:7d:0c:99:97:44:b5:3b:5f:
1f:3a:b3:d4:50:20:cc:2b:12:1b:ef:a4:13:5c:a0:
e9:dc:15:84:06:a6:5f:9c:8d:bf:d5:05:85:fc:db:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:BC:D3:A1:CA:2E:06:54:E6:E7:97:2F:DB:D4:60:85:2B:8B:EB
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:b8:26:6f:8b:14:df:e6:47:71:50:64:de:49:eb:fd:f4:
80:58:3d:1c:00:b9:01:2d:34:f2:02:f8:55:44:35:6c:1c:c1:
61:da:2e:ad:c3:72:d4:9c:7a:d7:2e:45:9f:c1:62:b5:13:d2:
f5:92:1e:b5:93:f1:86:a8:88:3d:99:03:2d:8b:72:9c:a7:90:
d4:c5:ff:71:fe:79:b4:ca:28:f3:3a:cf:50:8a:ef:77:2c:b2:
6d:01:2f:ef:fe:ca:32:14:eb:17:70:d6:91:5d:f5:75:eb:2a:
f8:d5:29:e9:dd:b7:2b:8e:bb:c0:8a:c4:38:69:47:48:54:a4:
54:e3:2b:6e:ae:96:72:68:1b:e3:1c:19:1b:27:86:7a:69:40:
29:19:3d:a2:b5:0b:1a:3d:e1:62:90:9d:86:42:dd:87:53:db:
9c:e1:d9:9c:81:9f:ad:9a:6b:5b:b1:6c:32:d8:fe:ab:6c:f9:
b9:62:88:25:48:66:5c:7f:ea:0a:b6:0c:b3:22:2f:58:7b:0f:
1d:d7:75:12:06:97:64:a4:a8:bf:f8:ca:af:eb:be:7e:21:8b:
19:63:74:12:19:1c:86:1a:5c:b7:09:4f:62:d1:fa:04:e0:7c:
2d:8d:a5:d4:58:56:34:a0:34:87:53:95:23:ad:22:46:fa:ed:
08:cd:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:03 2025 by rpki-client