Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: tVssN/ivljwK77gSbXLKhJqjpru20+EFiYVd+JnZIZ0=
Subject key identifier: 63:52:91:EB:13:52:23:17:56:2B:DC:E0:C6:34:27:44:6C:4E:18:F3
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 019A4E4FB67055657FC4F47F54EB50856690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 0317
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: OW+W5mChX2rWYJ2jzmB4BvHV7Iicfe57PQzKPOQvvJ4=)
2: f0dwYiFEnOu3_JgUSzuAzEREF1g.roa (hash: finZQb06qlnebE/7uJEc9oVyw8NWrlEdleXzIM/XsmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b6:70:55:65:7f:c4:f4:7f:54:eb:50:85:66:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=635291eb13522317562bdce0c63427446c4e18f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:00:fe:da:80:e0:3e:54:03:f4:83:b4:0a:
b0:eb:51:72:4c:b8:a0:e5:8f:0e:b9:17:bc:64:2d:
f7:1a:30:5a:ca:b8:71:68:24:cc:30:53:0b:93:61:
1d:ef:97:4b:23:9a:c1:3e:57:ac:13:f3:5c:52:ab:
5f:f6:1a:01:54:30:27:3e:8c:2e:35:a8:eb:8e:2c:
2e:f1:ce:a3:36:6d:6d:f3:87:7e:fd:24:6c:e7:a6:
52:55:5d:35:94:21:62:98:32:3a:47:2e:dc:a0:47:
de:37:47:71:8b:3a:fe:2c:25:46:f7:63:8e:7e:60:
b0:dc:88:2c:9e:0f:03:b3:7d:45:09:c2:08:5f:92:
10:d6:a7:12:56:67:1f:d1:90:c5:94:b1:71:56:9a:
aa:ad:f5:ab:32:10:35:33:ab:a2:6e:79:65:8c:e2:
6a:ba:78:3e:0a:90:d0:57:06:be:72:c0:e4:c3:1a:
81:e4:2c:75:48:e2:07:d8:81:c3:4e:95:5e:63:50:
fe:39:45:20:17:4f:65:24:94:7b:69:6d:e1:77:cc:
6b:9b:23:af:14:a8:93:82:d4:7b:57:47:01:e5:68:
f8:32:fa:02:b2:e3:62:28:ea:5c:ee:8d:fa:56:72:
39:58:97:2d:6f:b3:59:7a:46:04:11:eb:00:a0:15:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:91:EB:13:52:23:17:56:2B:DC:E0:C6:34:27:44:6C:4E:18:F3
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:bc:56:e6:70:67:4d:a7:3f:b6:0e:14:da:37:26:c3:1c:
f2:e3:70:3e:77:42:4b:41:9f:2d:91:25:7e:32:69:f7:fd:30:
57:6c:3f:11:61:5f:4a:2d:86:9b:bc:85:a5:e3:ee:1b:9f:06:
38:3c:b2:2e:86:15:9d:a0:09:89:9d:02:a2:51:d8:a2:c3:7d:
9c:82:4a:29:50:48:71:6b:ed:1b:03:88:36:a2:92:24:c4:e1:
5d:c3:99:cb:f5:a4:3f:81:4b:fa:12:1a:35:cb:ea:51:09:e2:
db:46:a6:d9:4b:67:38:b7:84:5f:64:1b:63:6c:6a:f9:86:52:
03:a9:a4:1c:72:ee:e0:40:0c:4c:57:b9:27:37:63:55:0e:85:
18:53:11:3d:6c:ac:ff:93:cd:11:a6:d7:ef:52:b3:bf:0f:a0:
16:c9:46:36:5d:1b:1b:b1:b7:65:69:b0:10:28:58:b0:0a:d0:
38:2e:90:46:28:22:ef:a6:dc:0c:38:2b:71:41:c9:04:ac:5a:
c8:53:b2:ef:19:4f:31:09:86:1d:f5:f1:b7:d3:5e:28:99:0d:
12:e8:ea:5b:3c:f9:9f:c2:ca:86:38:f2:99:0a:92:5a:c8:72:
41:cf:99:c8:2f:0f:46:a9:56:5a:58:b0:f4:6d:ae:ee:95:b4:
e6:5f:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:35 2025 by rpki-client