Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: LCvsC+aDdpOYCoWhiyiQfMWnOOHtFrH0qQNjppKZvTk=
Subject key identifier: 78:A1:CB:A3:5F:70:0E:20:51:97:16:F5:F4:82:E6:4D:DF:49:5E:7D
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 019A4DE195602FD9BDF89A6D5EAC47860CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0C64
Signing time: Tue 04 Nov 2025 08:00:20 +0000
Manifest this update: Tue 04 Nov 2025 08:00:20 +0000
Manifest next update: Wed 05 Nov 2025 08:00:20 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: YKKBq3fyqg3epmU/rG7X2/hijPLVoYMIwKHXII6U1nk=)
2: PiONgyQtYCxtAKel6AwlToYS7WY.roa (hash: GhuVBG356WKiZheC0jkKfbw1tCMHk61qHlrUSlnDnIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:95:60:2f:d9:bd:f8:9a:6d:5e:ac:47:86:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Nov 4 08:00:20 2025 GMT
Not After : Nov 5 08:00:20 2025 GMT
Subject: CN=78a1cba35f700e20519716f5f482e64ddf495e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:b5:dd:dd:d8:92:a1:bc:25:f5:a4:f1:a1:
50:50:dd:54:66:ad:ca:6b:4a:e6:84:a7:5b:a7:a9:
ec:67:ee:50:a6:5d:2b:7e:54:c3:e2:01:5b:f0:f8:
c5:ea:fd:a2:43:9b:4f:a6:c7:92:0e:fd:7c:29:17:
75:b2:6e:ff:f8:99:31:d8:30:db:0f:9e:60:f2:2a:
41:e7:60:24:b1:84:6d:d2:1a:31:6b:06:51:9d:7c:
08:8a:9e:0a:7c:f8:b1:9e:95:9f:d9:c5:aa:54:4a:
64:1a:95:a6:fc:66:58:cc:e9:52:cc:ce:18:8f:81:
05:76:e9:2e:af:bd:05:51:69:bb:59:ca:40:94:de:
96:21:a4:d1:6f:96:f2:57:8a:da:ad:48:6f:0b:87:
86:7f:b2:1f:e2:b5:53:9d:df:d0:cd:cb:92:e3:f2:
3a:f0:e7:00:65:f0:2f:71:72:0b:f9:85:1b:16:ff:
ed:eb:ce:04:cf:fe:63:fa:fb:d7:88:2c:73:9b:1f:
3e:61:90:6e:d6:cc:b6:e5:ff:12:da:21:6e:e7:3d:
0f:45:16:56:15:6e:a4:38:9c:e9:7a:3c:ab:05:a2:
21:46:9f:ac:fb:f8:fc:a6:d8:cb:af:96:ef:63:6c:
0b:36:c2:d5:c0:7a:21:83:86:b8:4f:b0:88:22:6d:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:CB:A3:5F:70:0E:20:51:97:16:F5:F4:82:E6:4D:DF:49:5E:7D
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:95:e3:a6:56:67:7a:dc:31:c4:e2:17:a8:ab:f2:da:bf:de:
74:a0:df:94:ab:d6:09:a3:2d:be:2c:bb:72:24:cb:83:21:d6:
73:67:ba:35:5a:e8:7f:30:0b:3e:d3:8c:d6:1b:6d:ec:82:f4:
8e:be:2e:83:46:f9:14:82:0c:af:15:cf:65:43:7e:2d:60:dd:
62:f2:e5:0d:2a:96:6c:ae:a1:6c:1e:3a:fe:1f:98:49:fd:a0:
57:e3:79:de:0f:cf:2d:17:36:69:e2:ca:ba:8b:ea:22:d8:6d:
2b:aa:08:9c:40:38:1f:0d:3f:1a:f0:6a:fb:b3:45:50:44:e1:
07:e5:6f:ce:07:aa:fe:4b:50:8f:f0:eb:9b:0c:1b:8e:3b:96:
91:fd:6a:42:76:12:a2:01:a7:0b:e0:0c:bb:bc:d0:a6:e1:b2:
a0:81:5b:c5:cd:9c:ab:1b:8f:e3:8c:41:e9:8c:2d:44:78:e5:
38:78:fe:7b:e1:ba:fb:0c:fe:71:45:43:a6:ff:de:b0:bf:fe:
34:82:dc:33:bf:e3:f5:35:c5:b1:40:26:87:e8:d8:0a:a4:d8:
28:64:ca:bb:23:77:89:03:bc:5a:8a:6a:37:c3:ac:e8:02:5c:
1d:c0:2e:04:b3:0a:23:c2:9f:9c:fa:2e:ac:ae:d5:81:fe:19:
03:ba:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:33 2025 by rpki-client