Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: J7+xrXjYwxJUjqOmwWqp7+AvO11PvY6jrShD1Gif2gI=
Subject key identifier: 9A:6A:4E:9F:01:28:5E:7F:99:85:C3:D0:30:6B:5B:7A:B6:66:A4:10
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 019A4E86D9368555167B041704278183CFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 145C
Signing time: Tue 04 Nov 2025 11:00:51 +0000
Manifest this update: Tue 04 Nov 2025 11:00:51 +0000
Manifest next update: Wed 05 Nov 2025 11:00:51 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: X1h0QA9vDhZa8A91mGyx/nO08AQocc34Id5oUyogWdw=)
2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d9:36:85:55:16:7b:04:17:04:27:81:83:cf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Nov 4 11:00:51 2025 GMT
Not After : Nov 5 11:00:51 2025 GMT
Subject: CN=9a6a4e9f01285e7f9985c3d0306b5b7ab666a410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:f3:c6:74:b2:d7:39:df:03:61:a8:51:3f:
a3:59:ad:6e:d6:63:64:8a:f8:81:d6:e8:86:c0:1f:
2a:2a:f5:f3:f3:10:54:f4:be:4c:2a:03:f1:e5:e6:
c7:a3:3c:0b:eb:31:d0:fd:dd:f5:eb:f6:65:50:37:
59:b2:c9:c6:24:bb:38:ab:86:ac:2f:ec:ea:00:6c:
43:e0:4d:7d:8e:04:f0:34:d2:75:b0:29:4e:37:9d:
83:08:40:3d:f4:b6:d2:11:26:37:f7:64:85:c9:46:
f1:72:c5:90:2b:cb:2a:9c:24:1f:a9:dc:c9:f2:89:
74:e1:62:bc:1f:7d:2a:f6:0d:55:06:55:0d:58:2e:
da:aa:59:d9:86:d4:d2:65:9a:bb:c4:80:80:25:1a:
05:ce:30:3c:c3:5d:33:45:2f:3b:93:74:d3:10:8b:
b2:13:f5:37:d3:e5:15:42:ad:3a:96:cf:66:db:46:
f7:ce:5f:30:d6:81:a8:26:97:33:7f:fe:b2:d4:77:
91:ce:34:82:36:c6:3b:a1:c0:dc:57:5f:fd:cc:db:
19:3a:b2:b4:59:5e:10:d6:bf:d3:02:c8:07:13:db:
45:7d:8a:de:83:6c:dc:aa:e1:fe:cd:f8:2c:42:66:
9b:6f:f4:b6:ff:40:4e:92:24:8d:3a:c6:53:3c:bc:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6A:4E:9F:01:28:5E:7F:99:85:C3:D0:30:6B:5B:7A:B6:66:A4:10
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c7:09:9f:4d:d5:7b:ce:c7:bd:1d:e0:5b:7d:d9:ba:0c:ba:
1b:d7:00:63:c5:fa:a5:78:c2:3c:83:81:79:bd:5c:aa:d7:39:
1f:6c:4b:7c:83:88:0c:0b:a1:54:b5:07:17:67:d8:d4:06:04:
cb:37:4c:6e:3b:2d:ab:07:59:80:c4:79:b2:84:80:07:2d:be:
63:b6:69:08:00:65:bc:5f:8f:ef:f4:f5:72:ff:e6:dd:3c:64:
e0:37:2c:71:83:dc:5b:10:91:2e:ef:39:64:1d:00:ec:67:b3:
73:1e:25:0b:7e:ac:08:00:a9:9b:ab:8c:83:8f:10:75:0f:d4:
90:53:c4:32:a1:d8:24:6b:c2:93:85:65:7c:b1:20:b1:82:84:
58:12:a7:df:1a:5c:b1:b0:99:21:2e:2b:78:1a:5a:bb:3a:de:
1b:a6:b4:3c:70:68:41:55:8c:ea:95:68:61:bb:63:a9:20:42:
3a:4d:21:ac:78:ee:c9:60:78:ee:44:06:bb:29:88:89:74:9b:
cb:c0:a0:de:bf:62:e1:2e:58:17:35:65:32:aa:c9:64:20:64:
30:59:9c:21:01:6e:80:b6:c8:a4:3b:5c:21:03:e5:66:7d:4b:
18:1a:b1:64:45:6f:68:86:5e:11:80:35:3b:72:a5:f6:13:eb:
09:cf:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:33 2025 by rpki-client