Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: pIDoeWiSLQNXLKV/R5DMII/KojlrH1z/3ctNNchneWA=
Subject key identifier: CA:0A:F5:17:97:85:50:AC:EA:C5:C3:9C:8B:E1:EB:85:61:03:7C:45
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019A4E19026D7B7D180F7D2E8F330045FF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0D2C
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=)
2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=)
3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=)
4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: oGX38vt5qJ0FDXAOaPBbqoIQk8iC9O+LEUh/SNT22R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:02:6d:7b:7d:18:0f:7d:2e:8f:33:00:45:ff:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=ca0af517978550aceac5c39c8be1eb8561037c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:07:7f:68:14:28:a6:44:f2:02:f6:6c:95:
57:06:ce:77:d5:7f:c5:a3:62:03:9d:8f:48:c5:f3:
cf:87:f8:1b:af:72:de:69:e8:84:90:7b:a1:36:4c:
10:6c:83:db:27:55:e3:54:63:49:8f:1d:10:58:86:
2c:ad:21:ed:df:2b:ec:c9:1a:34:0a:b3:b5:1e:21:
dd:e3:49:63:a2:4a:ad:55:d0:47:70:d4:29:ae:3d:
13:a2:10:7a:17:b4:c2:67:3a:f2:59:18:3c:75:48:
e2:e9:03:0b:c7:ff:6d:34:66:8c:a9:35:6d:a1:e2:
2b:1c:71:5a:36:6f:88:e9:fe:16:51:fd:fa:5d:d0:
d0:0a:bf:a9:e8:15:8f:f6:ac:fb:e5:95:bb:54:25:
6c:2e:31:71:53:cd:ca:1e:d0:14:17:35:6e:df:51:
29:64:7e:04:19:a8:02:12:28:6a:24:2c:0a:02:c9:
24:4e:d5:83:da:11:44:ae:e2:61:81:dc:4b:42:c5:
78:8e:cb:bc:80:3f:27:1c:e8:7e:f4:40:ee:63:71:
06:ed:3c:aa:12:a1:c4:ba:74:d7:35:9f:f8:c8:ce:
c1:7f:e4:b4:bc:fb:80:22:a4:04:6b:93:0a:b5:8b:
9b:24:2e:f4:4f:8e:6c:88:2f:a4:94:5d:a9:aa:35:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0A:F5:17:97:85:50:AC:EA:C5:C3:9C:8B:E1:EB:85:61:03:7C:45
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e2:8b:cd:ea:c4:fc:0a:a9:8f:55:f7:2f:3e:8b:d1:4e:86:
a3:64:5c:4a:f4:be:8b:a8:53:5e:db:53:a2:2c:ae:a8:b5:33:
87:d1:73:a3:6e:21:c7:6e:f4:2f:7d:11:3a:6f:b8:d6:a2:74:
8f:ca:6a:25:29:fd:f6:d9:86:a1:cb:e0:06:24:38:32:38:e3:
78:a9:fb:4e:5e:df:6a:62:2b:4d:14:36:ed:d0:7f:c2:b4:f2:
8c:39:c8:b0:d9:f1:d1:1a:9e:77:14:52:68:7c:4a:e5:2e:4b:
67:19:64:73:53:89:ba:6a:15:96:50:c2:16:85:48:b7:38:db:
72:34:1a:0d:6c:fe:f7:fd:7b:54:e3:26:df:11:da:28:7d:88:
ee:99:e9:01:2a:52:48:33:10:05:de:1d:38:ce:28:d2:1d:d8:
61:8c:d7:4c:e4:c9:60:6f:7f:91:64:64:93:3d:56:d4:a0:28:
10:4b:79:43:07:f8:b7:93:18:49:fd:d6:7c:0f:9d:2f:e7:4c:
3c:c6:93:c2:63:10:f7:65:87:db:d9:f4:49:6d:57:0f:c9:e9:
67:5e:74:7c:17:b8:2e:d1:6e:63:5c:92:1c:6d:f3:2e:75:53:
cd:03:ad:65:2e:15:77:dc:b8:c0:30:77:91:48:63:29:3d:04:
e3:28:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:46 2025 by rpki-client