Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
File: o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json)
Hash identifier: o+Ovb3jK1JGmILDU8dwqG6EzvCln48bwuLZjeuof21U=
Subject key identifier: E8:82:F6:50:69:73:22:3F:BB:30:CA:77:D1:A8:8C:3A:C6:25:B2:B9
Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
Certificate issuer: /CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Certificate serial: 019A4D3CEE05A7232A5412E7FFDB491376AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
Manifest number: 052D
Signing time: Tue 04 Nov 2025 05:00:30 +0000
Manifest this update: Tue 04 Nov 2025 05:00:30 +0000
Manifest next update: Wed 05 Nov 2025 05:00:30 +0000
Files and hashes: 1: K7qTK9pIyiEZfe3oYQ_ZP0X2yEA.roa (hash: aRm9dSDweAWyai2Lyi7lBDWMUI5ncN0CehfI1VhjASU=)
2: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: dufToPJY1HczBNiSoOmyvy9Yin5U/K/d/9xnWqyBDeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ee:05:a7:23:2a:54:12:e7:ff:db:49:13:76:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Validity
Not Before: Nov 4 05:00:30 2025 GMT
Not After : Nov 5 05:00:30 2025 GMT
Subject: CN=e882f6506973223fbb30ca77d1a88c3ac625b2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:41:64:c1:e9:72:eb:d8:db:bf:58:ba:12:
83:a4:40:67:1e:b6:de:01:9b:9f:5f:7f:70:20:50:
96:f0:ce:b4:2b:58:03:aa:48:f9:e1:7a:47:e9:5c:
f1:f6:cc:ab:00:c4:07:2c:c9:ba:e1:10:0e:22:26:
4e:e5:03:73:d4:d7:76:4f:3c:62:2a:5c:ba:ba:e7:
c7:5c:d3:79:32:5d:f6:61:be:33:c9:32:46:b7:c5:
e3:e5:73:ac:e0:2c:35:58:b1:64:9e:54:ad:de:40:
24:14:75:17:91:54:3c:9c:7a:80:15:d9:0b:8d:f8:
e9:36:bb:4a:b0:84:4d:85:f8:3e:cc:20:b9:70:e3:
7d:d1:4a:ab:32:07:5f:50:ea:b6:75:75:d0:82:22:
12:f2:78:e9:8e:23:da:ab:5c:01:b9:99:d4:d1:ce:
3d:7d:25:d9:ad:c6:d1:e5:4f:f9:30:0a:85:9e:2b:
de:85:e8:49:9a:72:21:c3:e5:32:9d:5d:44:80:a9:
7a:22:77:4d:d4:b6:ec:f8:94:d8:27:da:82:57:98:
ee:a9:94:39:81:94:a6:4c:1f:9c:a3:46:9a:36:07:
06:8e:22:cf:b0:ca:2b:c8:a2:25:e8:75:47:a5:dd:
c4:6e:52:79:ed:fe:90:c8:f5:2a:ba:4b:05:14:37:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:F6:50:69:73:22:3F:BB:30:CA:77:D1:A8:8C:3A:C6:25:B2:B9
X509v3 Authority Key Identifier:
keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e0:b5:0a:c4:65:23:ae:d8:c7:93:cd:3e:ef:43:24:0e:72:
b0:ea:6a:c6:85:27:8a:9e:26:c4:5f:53:84:e4:54:cb:60:20:
a3:a4:61:89:04:0c:84:39:e6:f0:f9:d3:5e:e9:ad:33:c6:0a:
c9:e5:10:7a:f7:c3:82:54:ec:80:15:b9:ab:6b:18:1e:8d:9f:
6e:8c:e4:5f:34:08:44:c7:a1:64:c5:a6:f1:53:8d:49:7a:78:
88:ff:b7:3b:8d:e6:63:39:23:c0:a2:41:33:8c:b5:d1:60:1a:
88:0d:9c:68:a5:52:59:a7:63:33:45:65:92:d4:be:6f:3f:1b:
29:f8:4f:09:97:23:90:ab:88:08:62:bb:20:9b:2c:ca:61:81:
1e:98:d9:fc:5f:64:1f:d5:64:7a:81:16:b4:96:6d:dc:33:21:
6d:ea:a7:c0:9a:ef:fc:ef:be:44:0f:f6:00:5f:93:cb:65:d9:
e7:31:7c:04:22:59:90:64:37:eb:8d:51:f4:f5:27:30:2c:d5:
e9:96:9b:52:8e:a8:19:15:c3:bf:28:0d:93:f9:ce:29:f1:3e:
e8:4d:c7:47:e8:0d:b9:c0:7d:11:97:0e:94:ac:ff:ef:43:f1:
61:3a:de:2c:cd:be:51:7b:fe:75:82:bb:03:e3:e3:5d:26:d6:
2a:ee:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:03 2025 by rpki-client