Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: mfWBGvx6FUMUUGYHIeLpdNX0nWanMkjoDBpqTefbV+s=
Subject key identifier: 22:BD:01:54:DE:75:D4:E8:AD:75:E0:37:7E:FB:A1:A2:33:08:2F:A5
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019A533FB297D58B22DE412934E97FB4A9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 171F
Signing time: Wed 05 Nov 2025 09:01:14 +0000
Manifest this update: Wed 05 Nov 2025 09:01:14 +0000
Manifest next update: Thu 06 Nov 2025 09:01:14 +0000
Files and hashes: 1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: YC2NgL9+9QrLMujLghCH0so5z3MN0Kp2SQPVsZR/8LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:b2:97:d5:8b:22:de:41:29:34:e9:7f:b4:a9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Nov 5 09:01:14 2025 GMT
Not After : Nov 6 09:01:14 2025 GMT
Subject: CN=22bd0154de75d4e8ad75e0377efba1a233082fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:25:7a:d7:d8:f3:90:2f:39:44:b4:32:28:
47:9a:5b:25:ab:33:1f:33:16:f0:53:9d:83:b7:bc:
3c:7c:2b:43:86:e7:05:21:c8:38:2a:67:38:5b:1a:
9e:6f:df:d2:19:25:39:f3:43:dd:23:e6:17:3a:43:
cf:24:59:6f:07:2f:37:db:3b:21:2c:82:cb:85:9e:
a1:e6:09:1b:c4:a4:e2:6d:f8:bd:2c:9b:24:4e:b7:
be:28:81:0b:fb:3f:d6:8c:6b:a1:47:a3:87:d2:4d:
6e:fe:05:23:bb:d3:4e:56:fe:6f:7a:06:49:ff:75:
5d:29:7e:f4:28:f5:8d:b3:55:05:6e:a4:89:1e:50:
a0:89:71:d5:c0:fb:f2:f6:e2:37:4a:7b:2c:44:76:
4d:8d:a1:3a:11:73:32:0e:b6:6b:1a:f4:c9:80:52:
26:5d:30:8b:52:74:0f:2f:53:51:45:d3:b2:e8:bd:
c0:89:02:f8:c2:d7:b4:5b:1e:77:63:92:ec:59:9b:
4f:9e:02:b5:4b:c0:c3:ec:de:cd:0e:0a:f5:53:93:
95:57:3f:03:2e:ca:06:e4:2e:d5:6e:3c:a6:b9:d6:
45:89:ca:6d:c7:18:9b:ae:ae:b9:b3:40:b1:0e:62:
f9:98:43:a7:6b:35:a2:47:fe:2a:48:3b:fc:e6:a2:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BD:01:54:DE:75:D4:E8:AD:75:E0:37:7E:FB:A1:A2:33:08:2F:A5
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:76:71:dd:b9:70:a6:ee:74:f9:ba:3c:d1:57:28:27:c5:a4:
54:97:c3:9e:73:8e:69:1b:6b:a5:1f:74:ce:3c:75:41:89:e8:
b1:d8:5d:5a:06:56:b5:ce:ff:11:44:89:6c:ef:2a:ed:10:09:
1c:f7:75:33:70:4c:f9:d4:e2:7b:bf:4e:d8:2c:21:b8:42:ce:
8d:94:7b:78:ef:f9:85:f0:44:c3:ad:51:64:c7:0a:9a:07:32:
4a:e4:bf:81:b3:c0:96:c7:5e:ad:30:39:a7:04:0c:c4:88:15:
b9:e0:89:e1:af:16:e6:d6:19:bf:23:0b:7b:72:a6:7c:4e:fd:
da:24:64:3c:4f:66:44:1b:47:ef:48:54:17:99:26:03:d9:3e:
54:db:6b:79:33:6d:bc:db:b2:e0:0d:e5:2b:d9:eb:6f:dd:1b:
bd:74:1e:8e:2b:b2:e9:d6:21:e2:6a:6f:7f:7b:13:2c:9d:44:
bf:71:c9:69:7b:90:53:fa:5d:73:4b:b6:5c:bc:90:2f:3e:a9:
2c:8f:61:f4:df:b9:cd:1c:24:e9:b2:fd:1e:9b:a8:63:d6:71:
d0:6c:bf:cb:92:bc:5d:67:a2:c5:62:c7:68:63:ee:a1:88:62:
19:e6:9d:7d:a4:22:be:2b:06:fe:df:78:78:98:f3:a9:35:c9:
94:0f:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:18 2025 by rpki-client