Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
File: O95jhoTGRf7dYA7TxQzfMQsRbT4.mft (raw, json)
Hash identifier: ZaSWpNDj93LtUfK/gjQcAPYoQ7B6yO+WQRpuwdGsCrA=
Subject key identifier: 30:68:D8:71:FE:53:4A:1E:A0:37:20:10:EE:7A:1A:5E:95:D3:42:F0
Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
Certificate issuer: /CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Certificate serial: 019A503E3622ECF80CB572F526CCFF0B9455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
Manifest number: 122B
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: O95jhoTGRf7dYA7TxQzfMQsRbT4.crl (hash: Z0jQtmUNK78mb8sV1CjfXCk3+FJYXgLYaQGrk2brCZk=)
2: RzF4b3sIXe3DzFdXYIh4DACfNyQ.roa (hash: NzaYQenLUpyVGKDKds+F+mtyj0Y2xs4JaXrSTsoxdK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:36:22:ec:f8:0c:b5:72:f5:26:cc:ff:0b:94:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=3068d871fe534a1ea0372010ee7a1a5e95d342f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:82:8b:d7:09:4c:2c:a9:7d:86:a1:01:cd:
dd:76:4a:45:f5:4e:b8:9d:25:70:ee:53:e2:57:f6:
ef:cf:10:13:5e:84:34:d9:99:cb:0f:6b:f2:21:70:
ef:40:9e:84:3a:9c:58:ba:95:07:d9:46:ae:06:96:
07:c8:f2:37:ae:43:e9:81:8c:98:66:fd:14:8d:d5:
a7:96:a2:ef:fc:d1:af:92:48:ab:e4:87:1e:03:34:
36:11:fb:42:20:7d:17:5f:73:31:43:a0:3a:c0:95:
2a:40:53:27:fe:98:82:1b:4a:ac:6c:2a:59:9e:ab:
eb:3d:6a:c5:a4:f4:cd:b2:94:69:74:37:0a:46:4d:
fc:3f:53:e9:9e:60:2b:93:d0:08:2c:7f:cf:66:6f:
72:cf:fc:ca:8b:d1:0f:38:c6:2c:68:f0:ec:20:f8:
d0:9a:6c:df:14:c5:6d:e8:08:ba:70:34:1e:e4:b8:
47:bf:6b:06:9f:28:4d:6b:17:26:13:49:95:bc:22:
ee:b6:30:5d:52:4d:07:f4:aa:64:2e:3b:70:5f:23:
1b:aa:71:f1:30:cc:81:b4:01:12:2e:d4:f1:8e:f9:
1a:94:58:00:3c:d0:0d:4e:8b:0d:9a:18:84:9f:73:
71:e5:f8:dd:6d:e6:09:28:ae:01:f3:1b:6a:94:0d:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:D8:71:FE:53:4A:1E:A0:37:20:10:EE:7A:1A:5E:95:D3:42:F0
X509v3 Authority Key Identifier:
keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ab:fd:36:4e:a6:fa:3c:99:41:7d:85:89:c8:2a:90:10:ee:
e6:b0:6f:ff:e6:b0:45:ff:0f:98:e0:c7:60:27:43:d1:44:19:
cf:bd:b4:87:f0:6e:64:20:92:25:46:30:9e:12:39:2a:76:7e:
1b:ba:b6:c0:18:c1:35:af:cd:3c:9c:b5:eb:3a:fe:1c:21:18:
0c:91:b5:68:02:a6:e8:43:ce:c9:81:f9:96:22:51:bd:40:62:
d8:2d:11:ac:93:4a:71:8e:a2:fc:90:72:63:18:16:16:69:48:
ec:14:4d:e2:59:29:f4:3b:1b:24:9c:d2:30:7e:79:c4:ee:ae:
e8:9e:38:75:78:31:f9:05:6e:45:ea:87:7d:82:43:47:b5:75:
88:73:aa:93:af:26:56:c3:da:b5:7d:56:24:78:f0:f2:9d:3b:
76:f9:e9:26:b9:17:d4:f6:2c:ea:13:51:02:33:b4:90:f7:70:
8a:68:de:c7:2c:b0:4a:73:53:7f:83:62:82:46:5d:b4:c5:40:
5e:5c:67:20:c0:5d:ee:65:f1:5b:16:85:c9:09:47:5d:8d:e0:
b6:e6:9b:e6:20:d5:5c:fe:7f:e2:f9:3f:99:d3:17:8f:1e:39:
45:6c:f7:18:18:d4:1c:6e:48:56:c6:a7:5f:9a:27:5b:c2:2d:
3e:73:10:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:02:14 2025 by rpki-client