Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: 9T6Gl5bQheHh8ZwfCmHZqss2ipsZ/DWxFlD9BDfNZd0=
Subject key identifier: 2C:10:CB:EE:F4:A0:E3:75:58:EE:1C:19:75:9B:C7:5B:01:94:61:6F
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 019A4EF58165D0E55CF61BC4E45126E26AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: 8oPfnAPjBxKDbtyIN+ntVLFDwnnDS1tXVhzxgGQdlmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:81:65:d0:e5:5c:f6:1b:c4:e4:51:26:e2:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=2c10cbeef4a0e37558ee1c19759bc75b0194616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:d6:7c:82:28:75:95:6b:a9:a1:4b:8c:af:
fc:b8:1d:d1:c9:f7:14:23:11:1a:3e:58:0b:1c:a2:
6d:f2:1f:55:7b:04:45:be:38:05:09:5e:da:5a:91:
13:02:e7:e0:09:06:fe:af:54:f4:5f:7d:7e:a7:38:
35:43:da:ca:32:45:9e:87:39:27:01:68:42:99:4a:
6b:5d:c7:48:c3:fc:b5:94:f4:ba:63:8e:83:fc:f6:
49:5f:4c:01:9f:0e:4a:76:1d:9f:51:a3:5c:8d:95:
b0:e1:29:a5:2f:79:c6:be:27:d3:11:00:1d:f9:7d:
a5:ea:8f:a5:e8:5c:1d:0b:7d:3b:85:81:e7:50:48:
66:87:b4:a9:65:04:be:e6:52:a9:79:bc:9f:92:50:
ba:67:c7:7b:23:9f:ec:0d:4c:34:ee:45:eb:d0:40:
12:af:9f:57:ea:9a:86:6b:c9:29:a3:0a:06:15:b0:
c9:22:ee:99:cc:a0:86:2c:89:6b:54:50:a8:0f:88:
c2:03:54:59:65:3f:e0:6e:eb:86:f1:64:1d:f3:c3:
90:e1:4e:a7:bc:d5:7a:f9:75:83:f1:9d:95:6c:0e:
ee:2f:a3:d3:64:ed:d9:59:93:6f:e2:67:9c:6f:76:
29:29:f0:be:b0:8d:0b:c4:3a:5c:5a:e1:93:72:ba:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:CB:EE:F4:A0:E3:75:58:EE:1C:19:75:9B:C7:5B:01:94:61:6F
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:a2:0e:f6:00:47:85:6c:94:18:a1:c5:ce:1f:c0:c4:e0:
1b:5a:39:40:b3:56:7a:dc:77:c2:42:23:96:a8:83:ef:2c:f6:
e3:bb:15:32:83:1f:18:9a:47:52:01:46:51:70:8c:9d:80:ca:
90:03:7a:43:bb:d5:74:80:fd:95:d8:5e:e0:06:24:a2:f4:48:
39:24:6b:00:dd:0e:5e:7e:2e:72:ee:1e:76:e1:a6:0f:7a:92:
98:4a:ea:e7:11:cf:57:93:a3:ac:94:c5:96:5a:5c:e0:ad:45:
ac:d3:ec:fa:e5:1b:4a:a6:b9:f6:9b:f0:e1:1e:64:68:b8:52:
10:5f:83:ad:2c:5a:ce:64:5f:5d:cf:74:ff:c0:4d:72:64:dd:
51:53:da:02:25:16:c9:30:ac:8f:4c:63:9d:a0:57:54:40:f1:
bd:ef:b7:02:bf:26:1d:08:6c:f3:8d:91:60:0b:ca:25:d8:be:
66:9e:3c:39:10:21:29:c1:82:31:81:e8:e8:ff:b1:ec:a6:e4:
e0:8b:8a:fa:eb:e5:8b:78:ef:2c:5f:ce:74:39:a1:1d:12:29:
bb:f9:cd:0f:4c:f0:01:9b:33:ed:0e:fc:64:4d:e4:01:eb:1f:
c0:9f:5a:0d:68:f1:f4:88:92:4a:9a:e5:4b:f8:af:54:37:06:
a8:1a:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:44 2025 by rpki-client