Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier: zHUJylYaR4FaueUkZJa9QgqXEvjJ2OW2xy60Mz0UUmw=
Subject key identifier: 1B:A8:22:C9:D8:45:2B:31:67:88:B7:8A:C9:35:31:72:8D:80:9F:48
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 019A50E385A7CD7C603185E898AD8FA4D6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number: 1303
Signing time: Tue 04 Nov 2025 22:01:19 +0000
Manifest this update: Tue 04 Nov 2025 22:01:19 +0000
Manifest next update: Wed 05 Nov 2025 22:01:19 +0000
Files and hashes: 1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=)
2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: rpGZCjpEAmpJbQxfYDRf22AEL3+0TpXD//dgrvIc2Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:85:a7:cd:7c:60:31:85:e8:98:ad:8f:a4:d6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Nov 4 22:01:19 2025 GMT
Not After : Nov 5 22:01:19 2025 GMT
Subject: CN=1ba822c9d8452b316788b78ac93531728d809f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:86:c4:19:e4:56:b0:f0:fb:34:ac:c3:89:
13:c9:35:7b:1c:b4:8f:07:26:74:62:b9:a1:c8:02:
b1:b4:16:ca:1d:90:9b:a5:da:13:ce:63:0a:c0:14:
53:de:5f:ed:28:a7:94:02:64:d9:76:5d:a5:ce:7b:
24:3d:be:01:73:de:8b:e3:89:1f:ed:37:1a:bb:92:
80:e6:bb:10:b7:4e:e1:d9:f3:ed:d9:1d:e3:07:77:
1f:9e:d9:2b:4c:75:0b:9d:6a:e0:dd:c2:a1:58:fe:
2a:d3:df:c9:d2:f3:ab:df:30:b3:c6:30:f4:0e:88:
1b:53:a9:ea:76:1a:b4:03:4f:9f:04:f5:82:1c:54:
7e:28:e1:45:56:86:53:1f:61:fd:be:9d:52:ce:48:
58:35:75:ca:ad:21:80:32:cc:a4:11:84:f4:fd:8f:
14:ee:b1:91:f4:7d:b5:28:f2:1d:00:18:c8:37:99:
49:39:2b:63:cf:cb:f1:75:50:a8:4d:6c:31:4c:18:
e9:e8:00:fa:43:a8:c1:20:20:2b:11:eb:2e:6a:7b:
d6:1f:f8:7b:a4:a7:fb:7d:02:c0:3a:77:7b:74:56:
58:f2:a0:0f:6b:a5:88:f3:d1:16:db:3e:11:01:77:
a0:7b:b6:93:92:7a:90:44:99:90:2c:7e:fc:94:64:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:22:C9:D8:45:2B:31:67:88:B7:8A:C9:35:31:72:8D:80:9F:48
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:66:aa:3c:6c:a0:96:41:1b:64:91:d7:02:c2:a1:33:4f:cd:
aa:68:08:52:8a:00:98:03:43:9b:49:f8:95:50:4b:9e:ff:89:
ea:14:6c:5a:e0:38:25:44:c8:9e:07:52:81:01:34:d3:47:66:
44:69:82:de:9b:0b:02:64:d6:d1:ee:d2:ef:36:59:45:cd:00:
e4:30:39:9a:61:46:84:f7:16:cb:a8:f4:55:6f:02:7e:49:2d:
83:47:5c:61:02:d3:99:ac:df:8e:90:c5:7b:7d:f0:d1:38:ac:
ba:64:00:b6:4a:d2:0c:e4:df:23:0c:62:44:8e:7f:07:6d:78:
10:f4:88:71:3a:ea:74:ba:2a:46:09:bb:ff:65:e8:70:31:f1:
bd:ea:a1:f5:39:7e:b1:cc:a3:6c:10:7a:f9:3f:79:4b:26:a6:
2f:7f:25:06:cc:12:84:05:09:c8:b8:af:14:c7:9d:f6:32:67:
c2:ed:80:11:8a:c3:1b:0c:c0:ff:04:da:9f:a6:a5:a2:8e:36:
ac:bc:cd:4b:40:91:1b:e7:a5:c7:4a:a1:96:e1:1b:70:da:c5:
45:af:51:1c:04:69:02:59:4c:ea:fb:ba:11:83:88:8f:5b:f0:
f5:29:bc:5c:e4:01:3d:bd:e7:84:72:6b:76:42:40:d7:ff:8d:
a9:b8:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:30 2025 by rpki-client