Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: YcKcf1rLovbseAopDltf/c4PEMRLRsQPB3O/l/1w9KQ=
Subject key identifier: 4E:91:A2:30:48:49:13:17:AD:AB:12:07:A4:0C:1B:5B:49:FB:27:48
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 019A541A94E1642335A6FE417E632A76F5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 0200
Signing time: Wed 05 Nov 2025 13:00:19 +0000
Manifest this update: Wed 05 Nov 2025 13:00:19 +0000
Manifest next update: Thu 06 Nov 2025 13:00:19 +0000
Files and hashes: 1: 9kI0xW5MbOx76ceEc1r6lL1zLqw.roa (hash: EBfX8OboRteLfAyp7yvYOpYG1nnQo1fO08vfwQ0PAY0=)
2: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: VDI61k9RfWcqNhVeTddeNHCEncTewL6B4LlJ+RNf/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:94:e1:64:23:35:a6:fe:41:7e:63:2a:76:f5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Nov 5 13:00:19 2025 GMT
Not After : Nov 6 13:00:19 2025 GMT
Subject: CN=4e91a23048491317adab1207a40c1b5b49fb2748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:27:38:6d:1e:8c:7c:cd:61:62:65:31:a3:
57:90:b0:30:12:53:c2:fb:21:56:f1:33:02:27:98:
63:0e:1b:52:17:7a:66:b5:cc:51:a1:c4:49:a8:df:
7f:2f:17:c1:db:8c:2b:33:06:b0:5f:47:16:12:a7:
ed:0f:2a:cf:5b:40:ee:6c:29:df:0c:89:3e:55:24:
54:25:19:b4:d8:0f:0f:37:f9:1e:5d:96:33:d2:ab:
6a:83:6b:b4:77:08:f3:94:4c:f5:7a:d6:5d:7a:ba:
f7:41:8c:2c:72:5d:9a:dd:65:36:c7:06:ef:82:d9:
8c:fd:0c:d3:cf:05:06:c5:29:1c:41:ee:79:b1:ec:
83:ab:aa:bb:6b:77:25:ca:b8:c1:03:4b:7b:be:67:
9b:53:fc:b0:ae:2f:7f:e0:d8:cd:85:fd:88:13:c1:
b3:3a:7d:60:18:1a:99:ae:b8:2f:9b:2f:ea:3a:77:
49:f8:c8:fe:41:0d:6f:97:e4:22:d6:d8:dd:f4:b1:
01:af:0a:e5:f3:20:41:bc:f0:c1:5b:76:97:13:2a:
07:f7:a4:b3:aa:05:f2:73:91:22:ec:5f:36:e1:a3:
43:d3:4c:ed:96:73:8a:63:17:be:02:4e:30:4a:23:
1a:e9:bf:e1:4d:21:a1:1d:71:4d:15:64:dc:79:d5:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:A2:30:48:49:13:17:AD:AB:12:07:A4:0C:1B:5B:49:FB:27:48
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3b:4d:4f:53:1a:93:a1:c8:27:0e:e7:95:60:df:7e:44:39:
d9:b7:44:1a:7e:32:64:21:d4:54:91:e6:4f:6f:11:11:5c:f3:
15:5a:41:90:2e:4b:c8:46:a5:9c:2a:d8:1d:98:5d:60:7d:1e:
c3:10:2e:81:ed:06:09:a4:39:76:17:41:f6:ce:86:67:78:f9:
92:c9:21:63:4d:b5:00:81:2b:e0:41:28:44:ad:ca:d7:17:b4:
34:11:21:c5:9f:47:49:3c:4c:bf:a7:7d:d9:49:45:c9:9d:26:
3a:c0:e6:54:ef:7f:e2:36:cd:83:f6:00:e3:bb:64:86:35:bd:
99:df:f3:2b:cb:10:ef:e9:f7:2b:50:ce:6e:11:ec:0f:47:c9:
a8:72:b6:aa:cb:12:7b:28:b1:9e:90:c5:ad:a4:08:5d:c5:28:
92:80:5f:a1:1d:ef:ee:a6:2a:ca:96:67:c1:e6:dc:1e:b3:51:
9e:55:77:55:d5:01:a2:c6:3e:4f:13:fd:d2:c4:40:8b:bc:47:
ad:14:dc:7a:5b:a3:69:90:6a:f8:56:0e:f0:e1:6f:3f:d1:d7:
13:06:78:37:63:3f:3a:8c:8e:1c:8b:7d:90:ad:9e:21:a5:71:
b3:0f:a4:d8:3e:80:48:22:ae:52:53:6c:69:03:08:0a:28:dc:
a6:2d:58:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:40 2025 by rpki-client