Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: 1YrRlT0zRG8U5x7va7crLbcjdwhZim7cIIBA/KGhLww=
Subject key identifier: 9C:5A:B5:44:9C:F9:CE:4D:C5:CF:13:33:F6:65:16:D6:B7:13:0A:0C
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 019A4EF42DA9894B777E6128C326DFF2EFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 090A
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: svV7TK+4f6+aLEvjY9E3RZqR6Yjmv0NX++FISfyuKkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2d:a9:89:4b:77:7e:61:28:c3:26:df:f2:ef:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=9c5ab5449cf9ce4dc5cf1333f66516d6b7130a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:1f:e5:ac:90:bb:58:58:00:11:70:73:b9:
e7:0d:9c:d3:fa:1d:64:ff:84:57:52:e8:1f:35:02:
39:6c:07:bc:3a:22:c8:0f:91:9c:d5:b2:4f:d4:ae:
43:54:68:54:b1:2b:3c:7d:49:d9:25:c7:65:d4:6f:
54:55:16:d7:f7:4a:44:ef:76:3b:39:bb:f7:d1:05:
73:a3:07:cd:0f:80:81:0a:5e:a7:25:61:75:45:4f:
1b:d5:da:b0:ba:e2:78:6d:27:86:dd:91:0a:5d:c5:
25:74:94:4e:e5:09:23:ab:40:57:6c:4c:39:60:16:
d0:fd:50:4d:1a:b1:c9:09:56:ec:80:ce:bf:af:31:
c6:5e:3f:cb:0d:2e:2d:23:71:04:1f:f3:15:4e:6f:
00:cc:00:87:ba:71:47:9e:2f:2c:29:22:a4:0d:73:
bf:e8:c4:65:64:98:59:9f:15:b4:ad:60:fa:21:5b:
f9:e5:15:83:a6:a3:00:a5:60:31:d7:d9:4a:a6:db:
51:13:f6:08:84:3d:48:94:e1:3f:22:d9:2b:05:69:
eb:d4:1e:3d:2a:27:cf:1e:cb:f4:b1:fe:ac:1f:a9:
fc:4a:b7:c5:0f:2d:99:2e:00:5d:af:94:67:ba:e5:
1b:69:b6:ce:fd:24:90:7d:c2:54:ea:67:29:f0:53:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:B5:44:9C:F9:CE:4D:C5:CF:13:33:F6:65:16:D6:B7:13:0A:0C
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:65:b6:3d:5f:5c:9e:00:ac:26:6a:4d:d1:1e:94:c4:ea:18:
32:4d:a5:d9:82:66:d6:6e:16:12:69:9a:25:c5:b0:ef:ca:d6:
66:89:68:28:4b:ba:9b:d0:2c:46:fa:c0:18:b5:7b:d5:46:9f:
81:d5:0b:56:39:23:a2:0b:ad:62:ea:dd:1f:05:2b:63:a1:a6:
fd:bc:75:9c:2d:56:db:d4:57:c8:7b:e7:54:c7:45:11:ff:55:
2c:7e:db:43:3c:01:97:41:77:c4:a8:44:37:67:74:52:73:78:
6d:77:42:15:ad:00:ef:df:e2:c0:3a:13:bc:1d:43:6d:03:04:
71:65:b0:f7:9b:a5:76:22:ac:78:ab:44:d2:9c:5d:96:ea:b3:
87:e9:8b:65:86:82:c9:36:90:7e:5a:d9:5e:c1:3c:b4:16:eb:
5e:d5:08:0e:b1:20:af:62:66:69:12:0c:96:02:7d:9e:a8:17:
ee:e9:73:88:6d:45:48:64:f3:ed:a7:a3:0f:00:1a:cb:8b:d9:
94:79:9c:24:18:a0:85:ec:18:cd:2d:1d:ad:4a:77:c0:20:ce:
b8:2f:ef:08:22:32:6e:93:bc:ef:37:60:fb:fe:5f:20:17:6c:
78:3e:fb:05:29:0e:da:4a:9a:76:97:2f:6c:e3:27:3d:01:73:
72:29:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:49 2025 by rpki-client