Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: l++1uMACE4nlTvkox56cIJ5WA5Y4OpFEWU5cgfpJAvA=
Subject key identifier: 90:0F:86:AC:3F:BF:A1:A2:EC:23:F9:D0:D7:73:24:D7:73:C9:A5:D1
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019A5187E0A7A4E9C4BD83F6828AAAB4FE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1457
Signing time: Wed 05 Nov 2025 01:00:50 +0000
Manifest this update: Wed 05 Nov 2025 01:00:50 +0000
Manifest next update: Thu 06 Nov 2025 01:00:50 +0000
Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: JefGgcEOn6J85lXhb/XGP6tyUVLv53sjatdjx/uzSy0=)
3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e0:a7:a4:e9:c4:bd:83:f6:82:8a:aa:b4:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Nov 5 01:00:50 2025 GMT
Not After : Nov 6 01:00:50 2025 GMT
Subject: CN=900f86ac3fbfa1a2ec23f9d0d77324d773c9a5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:9d:4b:2a:68:20:23:77:fe:e1:f6:aa:e0:
45:29:2b:b6:da:4a:e1:e7:f4:94:29:00:ff:f6:cb:
22:72:30:4d:9b:80:bf:c3:e3:77:24:72:81:44:7d:
c5:da:e6:e1:1b:27:40:b9:3d:96:9f:19:4f:dd:6e:
a7:d5:f0:90:2c:af:f1:7d:9f:0b:55:72:cf:fb:f0:
43:be:60:e0:9b:dc:c5:73:02:68:da:5f:da:65:a1:
16:80:7c:bf:7a:61:53:26:86:86:1f:80:b7:cb:a1:
7d:d6:ed:fa:46:60:03:c1:bd:70:aa:fb:a7:f4:d1:
56:7a:d4:86:94:ff:a2:47:2b:c6:b3:89:d3:01:af:
5d:2e:b8:86:1a:2d:ab:7e:a5:7c:3f:6a:0c:41:87:
06:aa:7d:9b:67:11:45:67:b4:b8:0a:b7:f7:85:72:
a8:59:73:48:a8:9e:ec:0d:ce:c0:98:df:d2:b3:47:
31:9b:e7:ea:3f:0b:c3:54:8c:07:0b:70:85:d3:61:
78:a9:20:e3:bb:60:78:d5:99:c3:0e:46:17:75:96:
d7:cd:82:3a:e2:5c:85:d2:47:5b:44:3c:ac:86:74:
79:f7:fd:8a:f1:da:92:6e:db:e1:79:f3:f0:44:e9:
ed:e5:b8:1f:19:cc:79:27:58:47:9f:4e:53:54:54:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0F:86:AC:3F:BF:A1:A2:EC:23:F9:D0:D7:73:24:D7:73:C9:A5:D1
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0c:74:73:16:46:d4:e0:28:01:56:a5:f5:ff:b8:6e:02:2f:
fa:7f:c7:90:c0:da:b4:dd:59:ec:fe:05:0f:0a:98:54:e6:32:
80:f3:ce:12:ce:c4:4c:f5:03:7f:49:62:06:3f:45:72:79:c5:
ad:69:71:f0:7e:b0:96:44:74:1e:84:76:f4:98:ce:0f:29:a2:
f9:7f:18:40:d2:79:dc:e5:1e:c7:eb:ec:63:61:51:c6:a0:00:
2d:44:5f:79:f2:28:d3:87:cd:e7:2b:b0:58:bf:e7:99:2d:7c:
76:13:b5:67:7b:8b:2e:78:25:1e:8e:53:54:32:06:e3:dc:1f:
02:e1:2d:f4:67:f0:69:4f:93:d8:72:80:59:62:8e:f2:96:48:
f5:88:86:fb:e8:e2:08:29:88:b3:2a:58:f6:3e:07:62:c3:0e:
bd:73:db:89:ec:04:da:a2:f6:25:b1:8c:dd:9f:09:e9:f1:89:
8a:f1:e5:18:99:df:da:36:d5:7e:cf:64:54:1a:e1:81:78:2c:
6d:c5:3f:bc:ab:39:c2:e4:1b:28:48:14:5c:a0:3e:69:24:98:
0c:b3:b9:26:58:f0:51:5d:2c:b1:16:71:f2:50:dd:f0:31:6f:
c2:6a:9c:fd:45:95:18:db:8c:28:5f:6d:b0:0c:65:c2:46:91:
a4:a5:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:03:03 2025 by rpki-client