Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: YoEhv13naVob3evxef6Vf26b1yro6W4BIU4w2RtWytM=
Subject key identifier: A7:F8:27:20:EF:FC:22:69:4C:7E:89:8D:E9:E9:02:32:7B:C5:66:F1
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 019A53E3FFA900809E3324BDE7B288A4480E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 3F
Signing time: Wed 05 Nov 2025 12:00:42 +0000
Manifest this update: Wed 05 Nov 2025 12:00:42 +0000
Manifest next update: Thu 06 Nov 2025 12:00:42 +0000
Files and hashes: 1: cErth6LGJ37Tdtl1lcefLoJD4nM.roa (hash: OoCTZM3oJW/h0+9oZEB+kSNNGcZqSaTzGyAN+23CU/M=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: 7SBwz8VhYD9SdKHD+lEi6nOsKIxKuvV20yxnP+fhwCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:ff:a9:00:80:9e:33:24:bd:e7:b2:88:a4:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Nov 5 12:00:42 2025 GMT
Not After : Nov 6 12:00:42 2025 GMT
Subject: CN=a7f82720effc22694c7e898de9e902327bc566f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:c6:c3:ac:4e:dd:c7:f9:22:7b:94:c8:3f:
79:c6:15:fc:6f:72:86:8c:10:c2:a2:ca:7a:c1:39:
1c:24:c9:b9:8e:cb:93:71:4b:c1:f4:91:13:57:35:
25:80:53:a4:af:4b:06:d6:35:0d:6a:4c:98:37:4c:
62:cc:a5:34:12:aa:a3:5d:23:bb:a5:15:69:ca:d9:
3e:6f:1a:e6:97:cd:f4:0b:de:9a:6d:f3:66:54:7e:
b2:0f:7b:48:b5:6f:1b:d0:6c:47:5a:04:b8:d8:c9:
de:cf:b3:2e:a9:21:de:45:f3:b3:52:80:97:92:79:
e0:02:27:33:3e:94:bf:96:35:df:7d:13:ca:3a:3b:
f6:e9:ef:14:da:91:ec:95:00:01:ef:3b:7c:05:f4:
c8:ff:b8:40:77:02:2c:bb:57:0d:11:b2:e6:16:44:
42:1d:05:9e:4e:00:33:85:be:8b:24:0f:90:90:56:
ff:e8:0b:3a:c6:6f:f1:06:d4:54:10:c5:08:6d:2e:
61:fe:f8:26:4b:f3:a3:09:7f:e4:57:6b:f0:2f:7b:
d2:a3:43:b5:d8:1d:24:ff:03:c8:40:26:1e:e1:73:
80:72:31:db:31:5e:b6:8b:e6:26:22:a8:21:e8:ce:
e7:1c:ba:7a:99:a1:6b:b4:7f:af:a1:91:b4:c6:23:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:27:20:EF:FC:22:69:4C:7E:89:8D:E9:E9:02:32:7B:C5:66:F1
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:26:21:99:ba:ec:a4:78:9d:65:a5:df:e2:0a:b5:9c:e4:3f:
e9:48:e2:73:af:69:be:b7:0f:e9:59:c1:a9:30:bb:90:65:4a:
21:00:e2:fb:49:88:b8:c2:ee:ec:1e:95:9b:21:13:ca:e9:ad:
ea:88:de:02:3f:56:18:5c:41:fe:a7:64:03:48:16:c8:57:a9:
b4:9f:27:30:1a:91:22:7d:9f:32:74:f7:72:09:89:d9:6a:a4:
7c:dc:ec:28:11:0d:a4:54:32:a3:43:46:f3:45:c5:85:f7:fc:
dc:12:b7:29:35:88:ad:0e:62:6d:19:84:85:4c:db:c5:44:7a:
19:c8:18:97:45:ce:e6:c6:f5:42:57:c4:bc:d0:f2:0b:00:3b:
fb:e5:a5:cc:d1:8a:37:cf:33:c1:af:16:01:d4:58:27:48:0b:
ff:0d:5b:81:63:85:2b:20:c7:8f:c3:7f:2b:93:dc:f5:96:3b:
0e:f5:83:35:31:6c:c4:89:7d:1c:64:2c:fb:47:e7:9d:8a:aa:
43:a9:fd:fd:e9:b6:a7:31:d0:c2:29:ab:c1:c5:aa:4a:c6:e1:
24:94:40:23:c1:d5:34:17:f1:25:88:34:b2:a0:1a:04:e4:e7:
3c:ed:fd:94:e4:af:37:af:78:45:0f:17:f2:08:90:d6:1d:81:
ec:e3:85:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:57:25 2025 by rpki-client