Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: DKVEebFk1f53Q2/ZVdQqVv4OI8Rb2tomPuO0/idwnGg=
Subject key identifier: 89:B2:D9:63:04:40:3C:5A:18:83:01:95:AC:AD:FE:7B:7E:AA:E2:F7
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019A4EF594C07BED127B6434922177F1E04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0C99
Signing time: Tue 04 Nov 2025 13:01:48 +0000
Manifest this update: Tue 04 Nov 2025 13:01:48 +0000
Manifest next update: Wed 05 Nov 2025 13:01:48 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: mxKEqyGm8pdbgZmqmKNcfKVjuJtQkP7eoiEIS7Fdrq0=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:94:c0:7b:ed:12:7b:64:34:92:21:77:f1:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Nov 4 13:01:48 2025 GMT
Not After : Nov 5 13:01:48 2025 GMT
Subject: CN=89b2d96304403c5a18830195acadfe7b7eaae2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:48:03:e3:34:ea:57:11:e4:60:5c:6c:df:
b9:9e:e4:48:20:4f:36:e5:a2:cc:85:75:76:2d:95:
10:51:15:e1:a7:6b:40:0c:6e:12:a4:f7:79:60:47:
f4:6b:7e:64:d6:70:d0:6b:f4:12:9b:18:27:64:8f:
35:46:74:74:53:47:9e:80:f2:4c:24:fe:fe:9e:85:
29:3b:5d:1a:b8:96:e7:c1:ec:cd:fe:b6:99:77:cb:
b7:5e:40:20:62:02:b7:51:5c:08:73:67:92:c2:9a:
da:8c:99:df:aa:46:3a:64:84:27:cc:92:fa:e5:35:
50:b8:5a:45:51:bf:44:5a:c8:27:63:79:be:88:2f:
e9:90:14:0b:0a:af:76:34:42:30:19:b7:c4:94:71:
5c:78:d6:1a:05:fa:76:45:78:35:8a:af:07:6e:8b:
32:bd:82:ad:a6:7d:b5:aa:21:58:b8:e5:0c:5e:11:
b4:b9:b0:d7:0f:6d:18:5e:c1:0e:8c:c8:47:c9:2d:
77:e5:30:bb:94:6b:ef:fd:d3:45:97:eb:c6:58:bf:
87:28:85:3c:46:2f:dd:b5:cf:8f:6f:09:7d:1f:3f:
77:10:c6:2d:20:62:7b:ef:67:26:7b:64:ab:72:e6:
b7:dd:93:f2:ab:f8:30:c2:ed:ab:1c:b6:3c:e0:ea:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:D9:63:04:40:3C:5A:18:83:01:95:AC:AD:FE:7B:7E:AA:E2:F7
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:23:95:e9:d0:32:74:0a:c8:39:01:3d:93:8d:21:6d:e9:df:
48:5c:8d:cd:31:87:85:f2:97:71:ed:f9:7d:ab:11:e2:d1:19:
4d:b5:63:5b:44:4f:7e:14:a8:5d:fe:c1:9e:8b:23:da:8f:6b:
71:21:13:5b:0c:8d:de:c6:d9:3c:6a:24:05:c2:90:ab:67:bb:
c1:e2:3a:1c:41:80:b0:9a:2f:8c:4e:37:5d:13:49:9c:a3:33:
9e:61:d3:76:4d:47:9e:75:7f:aa:9e:ef:cd:c8:06:f8:8f:94:
84:98:c2:82:9b:12:d5:a7:40:b3:e3:3f:b6:39:e4:dd:8a:61:
c4:05:01:16:9a:7e:16:5e:b6:8d:f4:f3:eb:b5:97:28:32:15:
1c:08:05:f1:d2:81:ad:77:dc:55:ca:f9:ce:1a:8f:6a:6b:36:
d7:ed:27:b4:88:52:e0:6c:6e:31:6c:c6:b9:78:e9:7d:13:8b:
4f:f6:7a:e3:a4:a3:1a:44:3e:24:d1:85:2b:cd:34:72:2f:3c:
67:db:f3:f8:97:c9:9c:9b:b3:e8:cf:6e:4a:9c:36:e6:5c:cc:
7d:86:4d:fe:34:7e:45:4d:a7:e4:d1:b9:93:79:d6:a4:8d:35:
08:2c:ce:22:de:f1:ec:74:ce:4b:04:7f:9d:8a:9d:2f:ed:f6:
11:c6:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:05 2025 by rpki-client