Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: 3cyfjWwsfxzoAI6Le8x2a/9tVYlGp3ALh0z0u0Ydu9A=
Subject key identifier: E0:95:E4:51:4C:12:67:39:FC:18:ED:97:DA:6B:E9:10:A3:12:15:28
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 019A51F5C4C18F15DE89204EBB33FBEE72DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 05D3
Signing time: Wed 05 Nov 2025 03:00:52 +0000
Manifest this update: Wed 05 Nov 2025 03:00:52 +0000
Manifest next update: Thu 06 Nov 2025 03:00:52 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: f9pY61vtt+mW/loplnnF90aDR0vsHZMV207HQAH/crQ=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:c4:c1:8f:15:de:89:20:4e:bb:33:fb:ee:72:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Nov 5 03:00:52 2025 GMT
Not After : Nov 6 03:00:52 2025 GMT
Subject: CN=e095e4514c126739fc18ed97da6be910a3121528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:78:84:44:68:96:d0:0c:f6:90:ee:81:09:
41:35:75:70:86:58:7a:80:18:1b:93:19:6c:a2:d6:
3d:04:b3:fe:5c:c8:cc:76:b5:85:a3:57:de:b7:b1:
65:01:21:3c:4a:91:f1:7f:40:0a:f2:29:ed:35:4c:
ca:24:61:66:8b:c7:fe:bf:e6:c0:06:e6:74:40:2f:
9f:e7:7a:5e:75:c6:f5:05:e5:98:37:71:fd:a8:68:
46:dc:d9:3c:b8:15:6d:fd:0f:26:eb:a4:ea:ac:9b:
0e:ea:a6:26:ae:30:d8:19:0b:c0:36:dd:1a:7d:3f:
61:16:dc:d2:30:35:26:0a:af:d2:27:df:b0:70:65:
ed:70:e3:c7:9d:97:9d:6b:e4:e3:a7:69:72:de:ae:
8d:fb:dd:a3:87:83:d8:cd:bd:06:f4:cd:46:73:c5:
76:8d:6f:44:3b:07:59:b7:79:10:a3:42:15:6a:1f:
25:65:40:e1:f4:15:02:65:6b:99:4e:a0:f6:a4:e0:
b8:6d:25:0b:96:7e:54:e3:a5:8f:84:d4:6a:ec:a9:
4f:d3:39:47:a5:c2:03:bb:fc:c7:f1:20:76:f2:a6:
fa:07:e3:f9:f3:89:20:8c:09:db:6b:ad:3e:82:a9:
0d:87:80:68:c9:8b:b9:8e:92:4c:a4:cd:55:5b:c9:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:E4:51:4C:12:67:39:FC:18:ED:97:DA:6B:E9:10:A3:12:15:28
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:28:03:d6:17:e3:54:25:b7:a3:e8:f1:09:f8:06:d3:38:b5:
e6:9c:bb:a6:a5:30:47:22:e8:72:eb:41:63:fd:17:f4:c1:d6:
9a:f2:62:cb:11:14:af:f0:e9:c8:5a:77:e3:95:0e:0a:2e:b0:
48:33:99:c7:7a:3a:a8:b4:7d:70:da:2a:b7:77:1e:f2:48:4c:
70:67:8a:fe:a8:f4:d7:69:d2:b6:a1:52:16:ad:51:19:7b:98:
dd:4a:31:fd:e3:88:1e:de:77:5b:62:68:55:d3:a8:ed:55:81:
8a:df:92:8d:2f:0f:8e:7e:8b:07:05:2d:b8:32:be:ae:c0:fe:
12:5e:6c:ff:c7:5a:a9:60:18:b7:c5:83:51:16:b1:a2:cc:1a:
aa:07:8c:e2:50:03:c9:c1:fd:a5:80:3a:02:3e:b6:40:59:f9:
a4:a7:4c:a6:fa:49:37:e2:ac:38:b6:81:01:92:d5:0e:7b:3b:
32:18:47:b1:22:f9:08:d1:b4:8a:21:df:eb:1a:ac:a1:d5:a7:
53:14:de:f4:22:80:d2:3a:05:4a:12:19:96:79:9b:7d:77:06:
09:7d:04:b1:8b:73:6b:cb:fd:ae:ba:c2:f0:5d:c5:b6:c5:7c:
ea:47:40:19:c2:d5:3b:c0:26:64:6b:29:5b:4c:82:8e:be:49:
2d:e8:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:56 2025 by rpki-client