Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: bWbkLpbOVYKt/E55P62K2QpYTxJdgWque6zi9FvteYQ=
Subject key identifier: 00:21:EC:07:B9:18:EB:EB:15:C1:5D:06:26:EA:47:7B:73:1F:4A:5E
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 019A4EF4C2F682D768A4DE176B79413D6BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0C57
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: xWfy7J8/FPTDdfP7gWXuQGd6qRIzvFk8TWwjtsL0Bzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c2:f6:82:d7:68:a4:de:17:6b:79:41:3d:6b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=0021ec07b918ebeb15c15d0626ea477b731f4a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:69:02:68:e9:8e:23:3c:ea:63:02:1d:c3:
2e:da:95:8d:0c:cb:01:19:92:70:9d:2d:19:a1:bb:
5b:50:85:4c:6d:c5:07:27:45:09:f2:1f:16:12:ff:
23:30:11:23:53:5a:81:32:aa:a5:c9:b6:5b:f4:84:
b6:8f:5a:cc:7c:27:8c:42:99:fb:f0:e3:ce:4e:ec:
a9:7c:df:45:3a:e8:cb:5a:e4:f2:61:d1:f2:8d:ed:
49:64:66:bb:12:f3:a3:a6:c1:ac:b2:fc:74:9d:0b:
fc:4d:17:88:0e:db:5f:e7:02:65:ff:e1:3c:4a:d0:
c3:72:d6:6a:89:e5:e0:d1:b3:fe:ad:c2:6b:3c:d2:
dd:74:eb:5b:73:5b:81:aa:b6:f9:fc:36:f4:72:22:
fe:6b:e4:aa:18:50:03:61:c8:78:1b:19:f4:cb:8f:
d2:e6:02:27:17:e0:42:dd:39:c1:78:e3:85:87:62:
56:46:aa:c2:22:3b:ae:0b:5d:1d:dc:c2:37:a9:76:
1e:7f:de:14:e1:41:9d:0a:10:40:b6:ab:c5:21:ed:
ea:e5:bc:48:35:a1:cc:49:eb:0b:06:cb:48:e6:8b:
fc:21:e3:97:dd:33:47:88:04:a5:76:d4:8a:e9:0f:
a7:20:7b:72:78:81:2b:75:58:cd:3e:a1:86:6a:cc:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:EC:07:B9:18:EB:EB:15:C1:5D:06:26:EA:47:7B:73:1F:4A:5E
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2e:2a:59:48:49:0b:4b:35:da:f7:b2:eb:71:66:10:17:5b:
27:4b:5e:be:20:39:c9:d1:a0:66:f5:e1:99:0f:9e:31:09:a9:
2a:7d:06:96:8c:a4:27:ec:d0:a3:98:b8:39:1a:aa:32:25:40:
db:f3:90:fe:8e:85:4b:5f:e8:5c:5f:6c:cd:82:3d:14:63:bf:
c1:4a:a4:5f:03:96:a2:e3:74:90:3a:25:d0:7f:c8:af:6c:f9:
27:e1:f5:00:75:26:2f:6a:ec:37:eb:69:8c:71:86:23:4e:31:
49:85:29:dc:d0:46:a5:c4:23:4c:7a:51:a3:6d:29:d6:ee:a9:
8f:cd:ff:32:73:02:e9:c5:ce:e5:5d:7a:c1:93:be:94:1e:e9:
c0:f3:2a:25:33:62:3d:85:c2:27:e6:f4:ed:43:50:11:53:96:
12:ae:4c:6b:fa:42:f3:dc:96:a9:c6:9e:74:95:c3:07:cb:a3:
87:0f:54:68:e6:a4:d0:aa:79:36:8e:cc:56:9a:13:da:d3:6f:
d7:30:7e:74:3c:15:43:10:f5:35:a2:c5:0f:bd:86:37:27:fb:
51:02:86:0d:f2:67:c6:73:bb:6b:84:f6:c5:6b:6e:8a:e3:d3:
9e:47:08:b9:cb:1d:68:65:3b:61:27:13:14:06:49:c5:1c:63:
fc:8a:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:40 2025 by rpki-client