Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File: O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier: jXSLXsYvI/SXOxGC5AxmxQmq0ULBRAgJZTH/3VWNIO0=
Subject key identifier: 27:6B:35:39:71:3B:EC:7E:7B:F7:D0:C4:D5:0F:02:C0:83:05:83:C1
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 019A4DAA62A20836305542F12EDB2C1B245A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number: 0921
Signing time: Tue 04 Nov 2025 07:00:03 +0000
Manifest this update: Tue 04 Nov 2025 07:00:03 +0000
Manifest next update: Wed 05 Nov 2025 07:00:03 +0000
Files and hashes: 1: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: n/9C8/duZgY+kmzoNJL86wB5yb/OF693ndYcmhxxMJI=)
2: u2WMlvCqvR8C4fxIzSZBue7OPx8.roa (hash: qmjTqeANx+dQ4nPXTJuIRLRK9MoQ6Usvr9tkzeOywu8=)
3: zTvzZc3tlOwLBnnj-NPbv4PhboA.roa (hash: msHMJXILJsy2yJM+hVyJRqp2m3iGv1So8lJvoritOiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:62:a2:08:36:30:55:42:f1:2e:db:2c:1b:24:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Nov 4 07:00:03 2025 GMT
Not After : Nov 5 07:00:03 2025 GMT
Subject: CN=276b3539713bec7e7bf7d0c4d50f02c0830583c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:63:5f:e3:cf:d4:fa:69:72:32:b9:33:2c:
91:c5:44:47:f2:96:bc:5f:19:59:63:1d:4c:8c:bc:
c0:f2:44:83:c8:34:1d:f7:b6:58:30:a1:f8:11:72:
6f:02:c2:bb:a4:2f:26:92:9e:42:34:55:f9:2d:0a:
56:5c:6a:53:0f:8a:74:9c:b5:5f:30:4e:60:68:14:
89:cb:8d:25:99:83:bb:1c:3f:35:fc:a4:62:c1:50:
ee:6e:d7:65:62:42:13:42:22:a1:58:8c:b6:fd:d8:
db:d4:ec:27:d9:e9:3b:67:f5:2d:78:56:90:e6:d2:
f7:6d:26:d5:b3:81:a6:d7:32:c4:a7:ae:54:a3:a9:
9c:e8:71:43:b8:36:3a:13:29:4e:03:8f:90:77:c0:
0e:87:7b:d0:41:1e:c0:89:c6:e4:cc:59:fc:4c:b3:
4a:2c:ff:3f:25:15:3d:00:8d:87:7e:be:07:85:f2:
4d:ae:19:8d:5d:cc:5d:7f:9b:d5:e7:0e:7b:07:55:
9e:4e:f2:a6:04:af:7f:96:36:77:7e:cc:14:e3:5b:
59:99:9a:46:c4:1c:a5:69:e1:8f:13:42:b4:1f:d7:
af:d2:d9:ad:a7:27:b6:b1:7a:eb:92:37:a3:49:07:
f3:86:d0:d9:06:59:06:4b:eb:40:f1:06:7c:2e:3c:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6B:35:39:71:3B:EC:7E:7B:F7:D0:C4:D5:0F:02:C0:83:05:83:C1
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:47:74:a7:89:c4:77:80:12:5a:e8:96:31:9c:30:4f:12:b8:
89:95:2e:28:03:b1:ad:28:ee:76:3d:ff:d3:8a:39:89:60:7b:
63:15:c0:76:2f:3c:b9:b8:6e:9a:13:f9:78:4c:90:db:58:0e:
7b:93:7e:17:41:09:a2:58:d4:04:80:e7:8f:b3:1c:e2:1a:7a:
6f:6d:15:ea:1b:a6:7e:67:33:88:f9:29:8b:2e:f5:11:a6:79:
79:fc:fd:61:59:29:af:1c:f4:97:ec:15:ce:4b:34:d4:e3:92:
b4:59:be:ad:4f:12:5e:ac:b2:0e:35:cb:31:2b:d3:e9:ef:07:
db:da:fa:f6:d9:41:47:96:65:e4:bc:d3:48:f2:df:b4:bd:63:
70:8a:ce:29:91:46:31:14:fd:0d:be:ef:11:28:72:60:9f:ee:
81:bc:72:fa:9b:27:7a:27:e8:d4:f3:fc:95:0c:05:23:37:62:
c2:73:1a:56:95:09:04:3e:0f:fe:3a:36:da:e4:09:83:ba:b7:
37:dd:51:26:20:f4:f3:0c:f2:d9:e3:df:5d:ef:61:57:8d:79:
4f:d8:4f:e9:91:f3:2c:16:de:1e:0c:69:9d:ae:5d:8b:9e:a6:
a3:94:7e:d8:8e:a6:1d:bf:19:a7:d5:50:61:79:41:03:69:dd:
f9:3c:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:13 2025 by rpki-client