Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: q6kFZ8WDQhqQiMsm6wGJNYfk4trX98jckhf9V+vDByQ=
Subject key identifier: 3C:0B:17:63:BC:AC:B7:5F:BB:49:0D:BE:19:B6:05:02:3A:25:24:41
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019A503E1DE20B8A2A0B2AA6DF1C6F2971EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:39 +0000
Manifest this update: Tue 04 Nov 2025 19:00:39 +0000
Manifest next update: Wed 05 Nov 2025 19:00:39 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: /t/HgsCD9zzG92WBWLVwDY4uqymbhqPF+amvbCfNOwY=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1d:e2:0b:8a:2a:0b:2a:a6:df:1c:6f:29:71:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Nov 4 19:00:39 2025 GMT
Not After : Nov 5 19:00:39 2025 GMT
Subject: CN=3c0b1763bcacb75fbb490dbe19b605023a252441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:de:24:59:66:da:aa:36:eb:ef:28:6b:35:
ca:c0:22:2c:69:b8:96:e5:b0:e2:f7:14:9f:9c:b6:
31:af:2e:9c:72:eb:81:24:85:71:40:2c:d6:89:1f:
54:94:1a:d6:1f:b4:0b:84:fa:09:54:3d:31:64:4d:
28:e0:6e:17:6c:6a:ee:02:ae:6d:39:a1:8d:81:be:
9e:a8:07:7b:17:cd:71:8b:0d:46:e6:30:53:1b:82:
c5:f6:b1:ed:ba:d5:59:6c:59:20:f1:34:ca:4f:19:
9b:78:23:85:51:b4:15:6c:97:cb:f4:90:4d:1d:50:
f9:88:6a:2c:ed:ed:42:7a:c2:d4:1f:38:be:ff:2c:
10:a1:03:66:85:f7:2b:09:ee:a0:6e:fc:0d:9a:ce:
30:a2:4d:d0:a7:fa:ee:4e:7f:fe:09:25:2d:9f:c1:
00:b8:27:5c:28:41:20:f8:d5:6b:cb:9a:a4:52:41:
80:70:71:08:75:10:60:c6:f4:70:ed:0c:11:11:3b:
09:56:e4:7f:b8:68:38:da:98:6c:02:56:23:7d:c4:
6b:45:71:bd:0f:cc:c7:db:e7:30:53:d7:cb:8f:51:
ba:b5:87:c8:3d:fc:ce:24:89:7f:91:43:3a:06:ab:
a2:f7:cc:b8:c0:37:49:49:ca:f3:31:a2:26:52:a5:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:17:63:BC:AC:B7:5F:BB:49:0D:BE:19:B6:05:02:3A:25:24:41
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:73:63:f2:32:42:4d:a5:62:b1:fc:d0:6a:09:14:43:96:
f4:57:39:27:93:d6:b2:28:d7:d8:ce:da:e1:02:3e:5f:52:5e:
31:4e:5f:fc:c9:98:fe:c6:e6:ab:38:9b:91:ed:f4:da:88:68:
10:82:69:77:dd:6d:7f:e4:0b:6c:29:dc:47:65:b5:03:ec:c3:
5d:b6:3e:ca:12:3a:a5:5b:63:3e:d6:9d:68:8d:22:6c:9f:2d:
b8:fc:86:bc:2a:78:9d:f9:45:bc:d6:b5:dc:17:a0:0c:16:8c:
37:b9:d4:26:7d:53:04:ff:e7:eb:41:76:fa:1f:dd:77:8d:d0:
8f:f0:08:c2:e4:69:c8:48:50:57:26:63:dd:38:3e:b0:99:a6:
d9:0c:c2:f3:e5:9b:3a:ae:bb:eb:3b:e6:b5:eb:c1:f5:97:b8:
4e:6e:ea:dc:ba:ec:2b:af:0d:70:d4:84:e8:fd:2c:d3:ab:ce:
58:ff:19:8d:b5:f2:ce:c0:59:bb:4e:c7:cd:12:02:0f:14:71:
c9:af:ac:43:ff:8d:4b:2a:fa:74:27:e5:a5:0c:75:a7:bf:8d:
11:80:8b:5d:70:2a:0b:07:91:31:03:5c:ba:7d:45:b1:78:1f:
db:44:ad:2e:ae:9c:79:39:fe:75:a3:75:51:d2:18:b3:36:45:
69:30:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:03 2025 by rpki-client