Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: UI7GwHbG5TQXUAHS45Mfm/nDHIhYLCGlhPtuG0+f/9o=
Subject key identifier: BE:67:59:B8:5B:09:99:F7:AF:BF:60:9D:03:AE:60:09:A1:6F:97:A4
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 019A522CB0BF97AB7C7CBBD0E5F47906D3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 01FF
Signing time: Wed 05 Nov 2025 04:00:51 +0000
Manifest this update: Wed 05 Nov 2025 04:00:51 +0000
Manifest next update: Thu 06 Nov 2025 04:00:51 +0000
Files and hashes: 1: 9kI0xW5MbOx76ceEc1r6lL1zLqw.roa (hash: EBfX8OboRteLfAyp7yvYOpYG1nnQo1fO08vfwQ0PAY0=)
2: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: 1yAd8cjR/GjhPBNDzrzLzJZQN0RUMyAiB4ab4vf98dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b0:bf:97:ab:7c:7c:bb:d0:e5:f4:79:06:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Nov 5 04:00:51 2025 GMT
Not After : Nov 6 04:00:51 2025 GMT
Subject: CN=be6759b85b0999f7afbf609d03ae6009a16f97a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:1f:ec:5a:14:a0:31:f2:42:9f:c1:69:5e:
23:1a:4b:a8:98:dd:26:ea:4f:18:c8:60:5f:1b:69:
81:e9:8f:8c:99:d9:be:93:74:c9:5b:0d:87:67:3f:
f6:3b:0f:6d:40:7d:fa:cf:6b:7d:bc:f6:db:48:e6:
e6:34:d6:a8:19:b4:3b:6d:c3:b7:61:6f:4a:0d:10:
9b:e1:d7:34:58:78:12:91:ad:a7:17:b2:b1:26:3d:
15:02:9c:c6:4f:9c:33:3b:bc:41:85:ac:50:cd:da:
45:7e:c2:9c:1d:b2:b3:b8:6f:74:ab:ee:22:e0:2f:
4a:b7:e6:49:19:35:f3:48:b2:8e:02:ae:5e:b0:53:
f5:33:50:44:1f:24:1b:c8:14:07:4b:e7:54:e0:81:
35:6d:24:5a:45:77:37:61:2f:89:d1:b0:d7:1e:c6:
c6:6c:5e:b0:c3:0f:9b:a0:ad:be:e9:d5:98:cf:3f:
b0:e6:b7:27:2a:e4:5d:b2:d0:a7:a3:1a:4e:5c:52:
68:f2:04:94:f1:1b:27:b2:34:7c:26:0e:24:74:55:
9d:ca:cf:9b:d4:66:6e:15:32:d2:93:bc:1e:43:a8:
87:78:bd:f6:18:b2:21:99:0d:f3:e8:2a:6b:39:22:
84:b3:2d:d1:3b:83:4d:d1:b4:fa:69:0b:53:a2:a6:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:59:B8:5B:09:99:F7:AF:BF:60:9D:03:AE:60:09:A1:6F:97:A4
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:c6:bd:fd:9d:47:aa:ef:f1:fd:7f:3b:e4:c5:ba:df:6a:
ca:61:71:de:a4:91:1a:4b:54:52:08:01:78:88:bf:f5:a5:d2:
f5:4b:4f:e3:26:ca:6b:77:df:2f:32:4c:b8:07:a1:82:90:bd:
4f:07:9b:58:c7:5f:03:ce:28:0f:20:04:04:39:54:65:d1:64:
8d:8d:75:5a:30:04:d0:b6:4c:83:6b:8f:64:96:70:d2:27:8f:
43:63:c6:24:ba:4f:34:07:07:70:8b:a9:d8:2d:a6:2c:e5:ba:
c7:4c:44:ca:2c:bf:02:6e:3f:ba:60:82:53:72:28:3f:66:7b:
be:90:42:b5:73:03:5f:7d:71:ba:69:35:01:02:da:b1:c8:fd:
1e:19:dd:20:46:cd:75:43:3f:1c:db:3a:ef:26:f2:1b:7a:1b:
75:80:82:ce:ef:ce:d3:4c:89:e5:95:3a:9b:1d:06:a3:ae:e9:
8c:7d:14:64:7a:48:cb:28:b4:71:e7:21:33:ee:d6:9e:13:30:
0d:c9:5d:ff:94:fe:34:4a:ba:39:10:ca:f2:de:f2:83:71:00:
3e:03:d9:a2:61:0b:f3:4e:f9:98:41:b9:39:73:bf:22:f4:b1:
d7:5b:0e:3e:fe:1d:2c:54:6b:31:b7:38:f0:60:22:3b:8d:28:
dc:27:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:54 2025 by rpki-client