Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: dJmvGJbFGY1sgMFLPLqQCth/ZhBssPj2iqWxawQPnpc=
Subject key identifier: 3D:3E:CA:05:EB:FF:69:35:A1:40:4D:1E:0C:0C:34:F8:D7:BB:47:FF
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019A4DE1DB0C1CD42020427B04CB82483B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0D98
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: oFYADrPgDiRruC9peJWJB2zplw+Lua2Q3sVgJCAUJUg=)
2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:db:0c:1c:d4:20:20:42:7b:04:cb:82:48:3b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=3d3eca05ebff6935a1404d1e0c0c34f8d7bb47ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:a5:3b:34:ac:61:9a:70:f9:7f:ba:29:5d:
bb:d0:97:09:b3:85:6d:7a:45:4d:d2:9a:d7:47:0e:
af:18:46:d2:e0:b4:89:2f:64:a7:19:3d:df:ab:7d:
5d:09:90:b6:15:08:b0:19:ea:4c:10:d5:20:78:4e:
d1:24:94:02:39:d7:74:73:71:d5:82:78:2d:a2:7b:
6d:57:88:3c:8e:04:4a:60:56:41:ea:bb:94:ff:75:
c3:5f:bb:b0:f2:c4:70:4e:e1:e6:6d:54:04:c6:4e:
48:5d:3c:41:eb:71:13:de:55:14:43:c8:93:74:60:
51:5b:90:0b:37:55:fe:94:bb:3f:2c:51:ab:72:55:
2f:ef:2c:2a:32:ac:28:de:e3:42:54:b3:f9:73:73:
a2:19:d0:28:7a:e9:56:e7:d2:ff:74:25:41:52:0e:
72:aa:86:ad:02:92:44:1e:ee:37:b7:17:8b:93:99:
1c:a4:a8:b5:2c:c7:6b:e8:01:52:fa:4a:74:e2:cf:
d0:c8:6a:b4:df:57:51:8a:df:d4:96:1f:4a:17:9b:
04:3f:39:bf:8c:23:4b:da:00:ab:80:24:fe:71:ab:
b6:82:a2:87:f4:e9:aa:46:09:bf:c6:8f:5b:5c:34:
d0:a1:39:2c:e9:11:82:9d:93:98:f1:1a:5b:2b:c3:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3E:CA:05:EB:FF:69:35:A1:40:4D:1E:0C:0C:34:F8:D7:BB:47:FF
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:69:c7:09:65:41:68:47:4c:22:96:cf:c9:9c:0c:27:89:b2:
2b:b9:70:ab:c0:02:0d:21:18:75:14:26:a6:7b:ec:74:fe:4e:
96:c2:0f:07:95:c3:4c:b9:3c:da:18:1b:ce:00:9b:5a:2f:9e:
2d:f8:bb:93:6a:f2:b1:61:2a:c4:85:12:a0:a9:f8:80:b4:a4:
ee:d1:ef:35:f1:56:06:fd:fa:c6:db:49:d7:3b:75:b1:46:26:
99:5b:10:43:12:4c:56:82:81:24:33:73:3f:87:e5:66:33:99:
a8:7b:ec:02:01:df:22:d4:d9:37:e2:4f:ad:9b:c3:c5:ab:1c:
18:3d:3b:47:95:bf:cc:93:c7:35:b0:22:5a:9d:f5:5f:44:11:
da:23:be:d9:7b:4f:55:29:7b:72:21:6a:70:c6:46:60:01:41:
be:8a:2c:ba:e3:af:09:2a:83:54:59:b8:5d:3e:4a:59:f8:90:
85:66:a2:ca:d7:74:f8:28:1d:07:a5:7b:56:b8:ca:67:52:9c:
cb:e7:04:44:4c:74:43:55:5c:fa:37:97:a1:c8:be:11:bc:15:
6d:4d:63:65:4e:ec:2a:7e:0b:36:50:07:d7:b8:66:73:db:a1:
ec:83:67:09:08:fe:98:d9:e3:fe:6d:30:1f:f2:8a:23:e9:0f:
44:1b:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:14 2025 by rpki-client