Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
File: o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft (raw, json)
Hash identifier: BBqFPOfarumW8VIzTZ3o/RGoxMbN3/wvkyRPfL+EzHI=
Subject key identifier: 1D:88:0A:4A:90:7D:7E:FD:4F:9D:0D:AA:79:70:48:13:F9:B2:2F:22
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Certificate issuer: /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial: 019A511990A0208B857D3DFA09F33BB82EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
Manifest number: 086C
Signing time: Tue 04 Nov 2025 23:00:21 +0000
Manifest this update: Tue 04 Nov 2025 23:00:21 +0000
Manifest next update: Wed 05 Nov 2025 23:00:21 +0000
Files and hashes: 1: borZkxzd7Q70fU1OWvln2Q1-HRc.roa (hash: WT5cBwBGRYqcO3GRfgSJfVkJ2Niz57/GzD/KCZQzgos=)
2: o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl (hash: G5WRSPT/XIJz4VTYPqUX2z5v4CP3ohKY5ruQ7AiCads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:90:a0:20:8b:85:7d:3d:fa:09:f3:3b:b8:2e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Validity
Not Before: Nov 4 23:00:21 2025 GMT
Not After : Nov 5 23:00:21 2025 GMT
Subject: CN=1d880a4a907d7efd4f9d0daa79704813f9b22f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:31:65:a7:fc:61:51:94:23:3c:68:ef:c5:
78:b0:5c:7e:bb:1a:b9:8d:1a:89:b8:33:42:fb:ca:
63:62:a5:69:55:c9:b1:8c:11:a7:83:6f:78:47:4e:
0c:2c:c1:a5:20:a9:41:ef:fa:9b:cf:52:09:84:0b:
6a:09:8a:0b:13:d6:1c:90:f3:db:33:6f:75:cc:83:
30:df:ce:69:16:e7:6d:03:a2:0d:10:8c:e5:2e:84:
a8:39:9e:07:be:e2:b1:8b:3e:89:71:60:bc:f8:e0:
37:d1:94:7c:77:57:18:5f:c8:9b:be:f2:47:d2:23:
b6:1e:e2:37:35:3e:67:35:7f:ed:89:1c:a7:d6:8c:
f7:94:f4:e9:bf:36:5c:a0:b7:4f:5b:81:5f:e0:2d:
59:ba:f5:32:ce:56:49:45:14:b3:80:97:52:38:9a:
05:a7:90:4d:9b:ae:81:13:42:af:da:dc:70:38:b4:
31:44:06:cb:25:31:0e:b2:14:ef:8c:8b:0f:f9:f9:
db:19:f9:b7:b9:43:9e:e2:10:c2:ca:fc:73:84:c5:
44:de:75:4f:7b:37:b3:6f:7e:77:8d:f2:39:bc:72:
5b:8a:c2:cc:97:2a:1a:f2:01:30:5c:90:27:1a:63:
27:ab:6e:71:e6:31:d6:41:46:6f:30:52:2b:eb:f9:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:0A:4A:90:7D:7E:FD:4F:9D:0D:AA:79:70:48:13:F9:B2:2F:22
X509v3 Authority Key Identifier:
keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d0:63:e9:6b:a7:ac:29:af:0b:85:19:9f:ea:03:b8:07:88:
65:27:0d:0b:3c:6b:1a:7d:27:cd:1d:86:9e:2c:aa:97:27:a8:
1e:79:33:5a:25:35:e9:8a:b4:f3:5d:4d:0d:a1:14:ff:cf:38:
df:b1:65:ce:ed:95:c8:a5:5d:cd:25:eb:f9:92:40:eb:46:39:
19:b2:9e:3e:a7:09:04:50:1e:09:b2:a9:3f:6e:a6:90:2d:a9:
b2:d3:db:1a:b6:fc:5a:74:0a:3b:45:39:8a:db:3a:dd:8f:25:
38:b6:45:2d:32:e4:4b:3e:6d:5f:fe:d2:1f:0b:17:7b:34:8c:
11:95:33:bb:5a:1d:ea:ac:77:f8:75:cc:4b:1d:a0:fe:07:88:
19:fb:ce:58:0f:5d:66:a2:ca:a8:ad:ca:69:78:cf:46:fb:e5:
3c:a9:3c:e0:1f:f7:f7:0b:8f:e6:aa:98:9d:c3:2f:3d:a2:0e:
b0:8d:87:cb:07:2d:c8:ba:b4:ea:ca:cd:5f:17:7a:2e:b7:21:
35:4b:f3:b0:62:9a:e0:a7:b4:b7:2e:6b:fc:04:a2:d2:06:77:
10:b5:35:e1:65:3d:85:5c:3f:86:7c:0a:6d:89:28:a2:ec:df:
a7:55:61:29:a4:da:88:4f:58:d8:e4:cd:88:6b:1a:6c:bd:dd:
ab:ff:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:28:17 2025 by rpki-client