Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: ypw+zOocF+Ah4mAHu/JtuMWxkEEn8Q/lj2/Noma7iGE=
Subject key identifier: 83:7B:34:F0:2A:85:88:EE:62:1F:C3:9B:53:25:2C:A2:F2:9E:9C:F3
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019A4DAAB948AD825D3840923A51312D6C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 1350
Signing time: Tue 04 Nov 2025 07:00:25 +0000
Manifest this update: Tue 04 Nov 2025 07:00:25 +0000
Manifest next update: Wed 05 Nov 2025 07:00:25 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: dQfWUv8QvBCvBMAvlo8gtQdNjg1S7NXs/EgBvte1Bhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b9:48:ad:82:5d:38:40:92:3a:51:31:2d:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Nov 4 07:00:25 2025 GMT
Not After : Nov 5 07:00:25 2025 GMT
Subject: CN=837b34f02a8588ee621fc39b53252ca2f29e9cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:77:8b:70:98:80:6f:69:01:8c:0c:1a:cb:
01:1c:fc:0f:b5:2c:ef:7d:15:0b:ab:a5:22:84:31:
81:17:1c:31:87:ee:2e:fc:e0:3c:8c:05:9d:99:ab:
f4:87:49:41:42:3d:a4:f8:70:2b:0a:aa:8d:49:f6:
77:f3:0e:7c:cf:ba:41:96:70:dd:5c:b4:ca:1b:cc:
bb:ea:ee:64:34:dd:03:6e:1a:3f:c1:a3:57:d8:23:
eb:c5:cb:3c:42:57:5f:c1:b3:29:30:4b:8d:fd:7a:
65:d6:4f:15:c5:fb:00:c6:35:10:dd:8c:c7:c9:5d:
6c:8e:f5:25:3a:ca:98:70:b5:7c:7a:73:8c:2b:e6:
42:52:7d:ef:83:ec:9b:7e:f1:69:d0:31:61:56:f5:
6e:72:00:06:91:00:2b:7c:dc:8e:b1:9f:97:0c:a2:
88:b4:bb:62:11:ad:76:c5:a2:67:62:95:55:2b:3c:
b8:a3:fb:b9:cc:2c:28:e2:32:fd:11:5f:f3:e2:ba:
ac:4a:f8:f6:8c:a9:c1:dc:49:02:d9:40:71:8b:c3:
59:6d:d1:da:1f:9f:c8:8a:15:fb:b6:77:5c:ae:ca:
f3:d2:60:74:11:e6:77:0f:28:08:6f:b2:98:73:99:
82:f7:81:ae:61:ce:03:bd:71:51:cc:31:d1:98:42:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:34:F0:2A:85:88:EE:62:1F:C3:9B:53:25:2C:A2:F2:9E:9C:F3
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:52:21:0d:7f:dd:a2:fc:bc:b1:e0:66:96:e1:c9:47:8d:ba:
3a:eb:f8:ac:c1:12:bf:38:d3:35:d1:22:2b:34:84:e2:c1:ae:
75:3a:7a:34:f9:a6:61:e4:08:52:bb:1a:88:65:d2:ca:9b:b7:
a8:f4:b1:a3:e3:86:19:9b:e9:66:03:01:68:d1:94:78:8f:b3:
32:e9:51:b0:d1:df:73:e7:7e:a7:54:cf:37:fb:a2:cc:d3:29:
44:be:80:2a:be:03:dd:74:b8:93:16:87:f9:b1:5c:c0:aa:cb:
af:d1:1f:cb:1d:ef:73:ac:77:78:fe:2e:ad:fa:40:24:a1:e3:
53:15:cc:ef:ad:b6:ca:5e:75:9c:66:c5:1c:30:0e:0e:5c:c9:
02:ff:ae:dc:98:f2:12:61:27:1a:07:cc:d9:95:27:56:85:0b:
95:13:6d:2c:a2:bc:4e:01:e2:ed:5a:12:15:9f:74:54:0e:be:
38:7b:74:11:58:ec:18:b3:2d:2d:32:ff:ab:6b:98:18:ed:76:
64:8c:cf:c2:b0:12:91:5a:c5:98:00:ac:f9:a4:2b:d5:4f:45:
f8:ad:ef:3a:0a:97:c5:d9:ed:15:a0:40:9b:fb:7d:c2:f0:8d:
69:68:d2:44:59:e5:8e:b8:fb:f1:c0:c4:af:f4:49:7f:cb:a1:
0a:81:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:10 2025 by rpki-client