Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: KFNEFHRQ6lp+uvMZlCnl5bTY0z5ctOYOT6p8J9Re4ds=
Subject key identifier: 52:42:91:8A:12:E1:97:E8:EE:CC:1F:AA:E3:D2:5E:94:6C:A5:5C:F5
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019A5E30C684FDE89E525AB8715519E37989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 0102
Signing time: Fri 07 Nov 2025 12:00:46 +0000
Manifest this update: Fri 07 Nov 2025 12:00:46 +0000
Manifest next update: Sat 08 Nov 2025 12:00:46 +0000
Files and hashes: 1: iZ5NdmCFL2KJkofQQF0JS-Yd9_o.roa (hash: B8ZarSuY+q0UuVgF85bF6OWHBT26B3wpaZ1iEoRwKdI=)
2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: ePvwzfa7WKkoppEZfzEnbLB64qkyLH7QrzTZHGMVduw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:30:c6:84:fd:e8:9e:52:5a:b8:71:55:19:e3:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Nov 7 12:00:46 2025 GMT
Not After : Nov 8 12:00:46 2025 GMT
Subject: CN=5242918a12e197e8eecc1faae3d25e946ca55cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:71:30:d4:c5:6d:52:cc:af:55:a3:07:36:
33:a5:bc:98:5b:01:3c:5d:99:4d:dc:5e:d6:a1:cc:
aa:06:fe:cf:df:57:a1:70:3e:1c:69:f7:21:0d:5c:
3d:3d:8f:dc:b7:fe:89:d4:ae:c3:d7:d3:92:fd:7c:
f0:5f:6e:53:36:b1:3d:de:f8:92:a7:a5:a6:71:c3:
05:f7:6a:83:95:95:f0:e1:af:8a:84:4b:a0:c4:2c:
96:0a:1e:bb:40:14:87:62:8d:1b:9e:4c:44:34:e9:
e7:40:c3:7d:66:95:f0:1a:98:f1:f5:f0:ed:de:5a:
03:e0:1b:17:5b:fe:9f:f0:fa:11:4c:62:54:8a:ad:
e6:f0:fb:2a:40:3e:d3:fa:4e:bb:e7:2a:0b:3c:0c:
56:ca:ea:fc:78:84:a4:b7:43:ea:69:48:c8:47:7a:
d2:62:25:f0:ab:c0:d7:41:dd:4c:db:dd:15:c1:47:
29:b7:de:1c:20:a1:95:73:58:41:2d:b1:d4:0c:39:
d2:d4:58:39:92:ca:bd:85:9c:80:aa:08:ff:22:37:
e0:d0:e3:1f:3e:57:20:d4:b2:4e:17:47:17:9e:86:
c1:e2:0a:0b:0d:bd:b8:eb:1c:c6:26:b6:a9:de:e9:
e3:cd:b3:27:05:9f:4e:7c:38:3d:ee:75:25:76:0b:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:42:91:8A:12:E1:97:E8:EE:CC:1F:AA:E3:D2:5E:94:6C:A5:5C:F5
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:24:0d:8e:fb:49:95:a6:b7:e2:68:e3:97:96:01:d8:ff:a5:
db:47:b7:79:e8:97:02:70:10:0f:d6:86:47:1c:1d:ec:2d:0d:
9e:dc:20:9f:aa:96:8e:e5:6d:51:e4:e2:23:4f:40:26:41:50:
48:b6:2a:da:9c:f1:02:2b:74:b6:1d:b6:b2:54:88:80:b5:83:
f2:85:09:66:ee:e7:a6:8c:8c:c1:74:81:e4:d6:a9:c8:bf:72:
e1:07:e6:a0:f4:40:c5:be:17:a5:20:26:78:f7:c0:9c:de:18:
8e:8b:1d:60:21:d7:b0:d5:02:8f:65:f5:50:f3:8b:ce:ea:af:
76:6f:06:51:84:f7:ca:57:94:3b:5b:c5:e9:fa:a7:68:2e:7f:
3c:4d:28:86:ba:c2:cc:41:d4:aa:8d:52:49:9d:1a:80:34:77:
f9:19:60:a7:6c:e5:eb:c4:9e:c8:93:84:88:76:58:6f:b1:dc:
3d:e5:cb:c9:73:6a:62:ce:98:f2:3f:e9:87:16:3b:0a:89:77:
ea:68:79:c6:f5:3e:90:d0:64:50:3e:35:cd:65:3e:28:12:73:
33:f9:98:78:5a:6a:9a:1c:4e:f5:8a:8c:46:02:30:05:3e:f4:
9c:60:97:c2:5a:45:6d:33:63:e8:1e:95:fd:61:d8:91:be:43:
73:e7:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 16:17:21 2025 by rpki-client