Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: ClqadjUOwGH3r+jCp8X5qYu8PsseNqqK9zBkMgzck5Y=
Subject key identifier: BF:18:64:4F:2F:50:18:28:D2:AD:75:5D:88:0D:6A:4D:09:25:6F:3B
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 019A4D7449DE7E12B37A2266D8BF58720A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:57 +0000
Manifest this update: Tue 04 Nov 2025 06:00:57 +0000
Manifest next update: Wed 05 Nov 2025 06:00:57 +0000
Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: +8KMOftOVqVebkhRYu0gUhfvjKKvdvx5bni0lANMLp8=)
4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:49:de:7e:12:b3:7a:22:66:d8:bf:58:72:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Nov 4 06:00:57 2025 GMT
Not After : Nov 5 06:00:57 2025 GMT
Subject: CN=bf18644f2f501828d2ad755d880d6a4d09256f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:60:07:7b:a0:f6:ca:bd:96:6d:44:3f:64:
9a:f1:58:7f:3c:8f:27:9f:51:6f:b1:e3:5a:7a:99:
9c:7b:7e:80:10:1b:94:66:6e:64:0a:d8:e1:df:e7:
ac:53:b0:0d:c6:c7:15:56:1b:8d:59:2f:ff:6f:ae:
b7:12:f7:e1:31:a6:44:21:dd:88:ed:4b:2f:80:63:
36:a7:58:54:2e:e7:bf:d6:9c:07:9a:93:73:af:31:
65:81:d0:49:5f:41:99:ab:cf:17:3b:1a:ae:79:2b:
f2:73:97:79:48:b9:2b:ac:26:09:49:7e:64:b9:72:
9c:bf:ac:dc:b9:af:45:de:bf:63:c9:a2:d2:9d:45:
eb:76:30:73:5f:e4:b1:88:bf:a7:a3:3c:4a:2d:4f:
c3:9f:5b:7d:06:e4:31:f9:2d:4f:6c:3a:05:16:20:
2e:86:ec:66:f6:a5:e3:f8:37:d7:08:a1:57:66:e1:
ce:66:a1:f0:09:f7:5c:98:30:0d:db:ea:d5:20:0c:
40:07:f7:fb:83:1a:61:51:64:08:c1:39:06:0e:f0:
9f:8b:f9:c3:9a:cc:8a:3e:68:05:ef:80:a6:60:d3:
a8:01:97:fd:86:77:05:b8:be:b2:22:66:78:c3:d2:
cb:c8:bf:e1:77:8d:23:8f:1f:54:77:60:60:ab:eb:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:18:64:4F:2F:50:18:28:D2:AD:75:5D:88:0D:6A:4D:09:25:6F:3B
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6b:af:47:1d:63:43:15:60:45:6a:3b:ef:31:bf:68:a8:e5:
19:07:11:e8:2e:2e:f6:ac:a4:ef:e9:5c:50:96:b6:23:7c:ba:
b8:34:7f:0a:04:62:7d:69:fc:b3:36:41:a8:e1:02:fc:bb:f5:
c4:11:cc:0d:1a:df:0b:dd:59:4a:4f:9e:62:17:55:86:b0:e3:
20:e0:87:dc:3f:35:fe:9c:94:4f:05:d4:f5:cf:bd:e2:fd:ec:
c5:b8:26:d3:f5:fa:5a:74:2d:f3:0a:cb:b9:5a:ae:65:11:df:
e2:84:a4:8e:81:58:49:56:66:39:cf:de:da:44:ab:67:a9:92:
a2:86:0e:27:ad:3f:59:96:a9:6f:18:4b:c3:08:24:1f:c3:03:
6d:9b:cc:bd:0e:eb:54:de:e5:58:d6:4a:04:73:a6:d5:49:ac:
65:ab:5a:91:30:ee:55:ff:58:c4:f5:d2:5d:ed:0c:d4:ef:bd:
42:af:e0:2a:31:9a:1d:38:d1:1a:1e:60:b7:16:b5:e7:f4:d3:
de:6b:e3:a1:97:f5:29:b7:ef:ca:d4:76:bd:1e:dc:e5:d1:af:
2a:7c:cc:6a:02:1b:a9:bc:a3:2a:1d:3c:ef:23:15:2b:88:53:
8c:c8:2e:a6:24:b0:19:28:a1:0f:83:f3:b8:63:5d:a3:35:a8:
c3:e5:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:30 2025 by rpki-client