Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: mqsWahtOBcsyqBqVHqignSHjRPGU8LY1X8Sa7iGGQQA=
Subject key identifier: 31:CF:EA:EF:A3:3F:41:6F:01:17:25:70:D3:10:DD:AE:B6:2D:73:1E
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 019A4F2B71CF38B660A5351B72F20580C808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: ceDJNh7U7wq8UG38oichW3C94hyIfnATAjBPfTiyj/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:71:cf:38:b6:60:a5:35:1b:72:f2:05:80:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=31cfeaefa33f416f01172570d310ddaeb62d731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:36:1c:50:d6:e4:02:d6:f7:46:74:a6:5e:
d9:d2:61:8c:39:90:f5:bd:88:ad:d7:53:11:f3:19:
b3:ac:aa:ea:2a:e5:31:25:3e:00:bb:f6:1d:78:9a:
7d:4d:fd:06:0a:26:1b:c5:db:25:88:08:11:b6:fc:
2a:c3:a8:a9:b7:2e:33:f6:15:69:2d:d7:30:12:0a:
f8:39:a6:ed:fb:06:58:5d:6a:a1:79:fe:0f:fa:94:
ff:3e:3d:e6:58:6f:39:d1:ff:9d:94:5d:22:41:fc:
d8:86:10:47:dc:4b:d7:fb:80:27:c1:81:34:53:51:
19:4e:15:7c:86:50:ee:db:a4:98:af:40:87:e5:71:
47:de:b2:77:9a:17:0b:9b:e9:08:18:69:21:6f:07:
1f:d3:b0:9a:ae:9b:b4:79:68:a7:f0:1f:90:f4:54:
1c:89:37:86:8a:cb:fc:1d:35:0e:cb:08:3d:93:00:
bb:76:70:6f:7b:60:dc:88:68:fe:07:9f:98:b3:ca:
00:de:de:a9:68:7f:66:ce:62:13:0e:f5:c6:2a:4c:
c4:e1:17:d5:f2:17:7d:13:47:3f:04:ce:dd:7b:a1:
27:d8:bd:54:9b:3d:63:74:12:45:52:37:71:b9:bb:
4a:57:11:de:bb:50:5f:d0:57:51:63:1f:19:9f:fe:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CF:EA:EF:A3:3F:41:6F:01:17:25:70:D3:10:DD:AE:B6:2D:73:1E
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f9:92:a5:98:d4:b5:1a:fc:5d:22:1a:05:78:30:5c:33:78:
75:d8:34:93:be:7d:ff:8c:7a:32:e3:45:d7:fc:fd:6c:8e:a0:
91:55:5f:db:1c:5a:74:08:5a:76:32:c1:19:05:e0:07:86:8f:
de:89:3d:b8:5a:bd:d8:fd:65:90:97:22:5b:e9:0b:30:ea:17:
1c:38:46:38:43:68:5b:13:e9:59:b5:0a:c5:54:9c:a5:7b:2b:
04:51:ec:72:83:1a:25:9c:8a:57:99:25:cb:0d:e4:c7:c2:83:
f5:51:49:ba:36:8a:0b:69:70:92:8d:01:0d:e5:78:16:c0:56:
97:26:ed:28:3a:9d:f2:9b:5e:69:c7:70:9d:b6:a3:8d:88:5f:
5e:99:e6:cb:4a:01:ec:0c:9e:26:45:b0:cf:dd:50:4c:11:75:
8b:06:63:03:64:c3:a6:02:e2:f4:fd:55:5a:fc:82:72:19:b9:
d2:87:90:a3:5d:45:60:f8:da:9a:36:0b:0e:5b:1f:d4:df:cb:
52:e1:19:53:2a:45:ac:33:66:3d:8e:a0:9b:b1:7f:f5:1a:bd:
ef:53:7c:5f:75:cd:2c:02:ae:c1:45:e2:91:ff:15:32:84:48:
7c:0b:d1:25:ea:5c:9d:bd:8a:8b:1f:5d:07:df:40:ae:ea:f7:
d2:19:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:37 2025 by rpki-client