Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: g7nyXDLUvrOYzjNXVfL1R+gSpYfZXU1irHnUv4wdQg4=
Subject key identifier: 24:5C:49:D5:3D:48:CF:10:58:E5:3B:9D:34:B4:2C:63:3E:96:A8:98
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019A4EF5824E8FC98CDFC6591F54DB7A3D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: vQC8q/kFKG46fXcJVQCrjfFVOyT7RZTkp1qPoudx6I4=)
3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:82:4e:8f:c9:8c:df:c6:59:1f:54:db:7a:3d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=245c49d53d48cf1058e53b9d34b42c633e96a898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:08:eb:b7:d5:33:63:98:41:95:41:c0:c4:
82:28:7e:62:55:52:b5:97:35:e6:01:4a:2d:39:07:
e3:5c:57:b8:e4:b5:43:b1:92:ce:2a:d8:02:a3:91:
d5:91:cb:c1:38:4e:64:ab:07:15:e6:aa:96:d9:ee:
9c:4e:35:d2:a3:77:71:3a:53:a3:c7:bf:6f:dc:f8:
1b:2f:0f:ea:a0:da:6d:72:e7:4d:bf:bb:a5:bd:eb:
58:7d:8b:b4:ea:81:24:8b:8f:b0:f1:ed:b2:4c:0a:
09:74:39:55:51:7b:26:a5:d1:f2:36:4e:f0:b6:57:
a7:05:26:3b:3f:01:c2:73:87:35:bc:94:f4:d3:e3:
b5:94:ff:74:ad:04:b0:18:23:2c:4a:2d:75:6e:0e:
99:68:a0:b1:70:52:63:fe:66:a3:46:52:40:c1:58:
08:2c:f6:1d:1f:88:f9:5f:9f:8d:68:42:2a:32:44:
11:31:94:5d:cd:c8:c0:2d:25:cb:42:1b:b2:b5:5d:
7c:85:3c:d5:5b:2a:30:01:76:9f:42:77:53:a4:6a:
bc:c1:59:65:7b:ff:4e:84:90:fd:72:8d:6a:ae:d3:
6b:3e:89:7e:27:6d:d8:5b:9b:4b:67:02:8c:37:d9:
9b:3a:38:d1:80:bd:36:cd:3e:fc:1d:51:0d:cc:af:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:49:D5:3D:48:CF:10:58:E5:3B:9D:34:B4:2C:63:3E:96:A8:98
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4e:5c:ca:63:9a:50:bb:95:be:d4:16:c9:03:7e:d7:d8:39:
de:50:1b:09:6b:1d:9f:29:25:78:76:d9:04:db:12:89:e7:89:
93:eb:f7:cc:e9:f7:93:41:de:32:77:76:66:47:cc:ac:8c:13:
71:94:ed:53:e5:23:ae:1a:04:47:8f:a5:07:4b:3a:89:37:4e:
99:28:d0:a4:c7:3c:e5:13:0d:42:5e:18:58:a4:78:5a:52:8e:
af:20:e2:b2:46:8b:e7:9e:29:e0:c5:7a:bc:7a:eb:2e:79:5e:
6e:54:e3:f1:90:18:9c:d2:e8:de:f3:18:c3:ff:ab:92:2c:a4:
b8:08:49:66:ba:3c:6d:6a:5d:a6:ab:f1:5d:c0:04:d4:76:9f:
df:66:39:8c:e6:6f:ff:b4:e2:84:28:6c:93:cb:be:b2:50:a2:
59:54:7c:10:34:1b:d2:c2:fa:a9:f0:70:87:a1:37:64:4f:80:
bc:d6:a6:a4:b5:6a:77:87:e9:93:39:ae:fa:79:34:67:2e:ea:
9d:c3:4f:2a:c0:de:f8:70:c4:46:74:e7:07:cf:ab:ff:b4:0a:
55:d1:d0:e6:cd:c7:05:46:18:97:59:5b:c1:c8:e7:8e:55:01:
f4:81:e6:75:d5:8a:6f:2f:86:c3:ef:f4:70:c8:1e:74:d1:fa:
a0:ba:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:38 2025 by rpki-client