Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
File: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft (raw, json)
Hash identifier: M91NyrIcBFlPxCOEue84tc+vFjIcE2mUCvWkPBXXnn0=
Subject key identifier: 6F:8B:9F:2D:57:0C:22:F7:8B:FE:83:CE:8A:F2:6F:CA:91:DE:10:81
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Certificate issuer: /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial: 019A4E4FC4FAFE0D8999BFAD4BE305CE7D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
Manifest number: 0AA5
Signing time: Tue 04 Nov 2025 10:00:41 +0000
Manifest this update: Tue 04 Nov 2025 10:00:41 +0000
Manifest next update: Wed 05 Nov 2025 10:00:41 +0000
Files and hashes: 1: 7dGZOPsa1FU0C36WBDwIw7gL1Bo.roa (hash: 5etpC4MaJX7LndBCS5De3y9ecFGJX8+EfQl3ZBJ8rb8=)
2: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl (hash: /Taknnk2Vd02wGgo0zyMb920V9COqtRdRBZ32NCWfzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c4:fa:fe:0d:89:99:bf:ad:4b:e3:05:ce:7d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Validity
Not Before: Nov 4 10:00:41 2025 GMT
Not After : Nov 5 10:00:41 2025 GMT
Subject: CN=6f8b9f2d570c22f78bfe83ce8af26fca91de1081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:36:1d:a0:02:11:fd:86:68:7b:f0:96:a2:
38:63:89:2b:02:9c:0a:e6:2d:33:b3:d9:ac:83:f5:
25:95:bb:e5:a8:31:9a:36:86:04:08:ae:da:c3:e0:
8a:e6:ec:8c:1c:b9:86:4e:5b:89:01:f4:b2:4d:47:
9b:92:81:ff:2e:82:7e:cb:57:e2:f2:64:61:ef:5e:
35:55:c1:6e:28:33:50:63:8c:1e:8a:0e:b9:8e:e2:
07:b9:31:fe:e0:8c:c7:79:cf:90:07:2c:f4:c5:0e:
97:1c:e9:b0:d2:f1:b1:65:34:69:08:4a:83:24:c9:
29:41:07:a1:59:f8:51:b9:97:65:be:90:83:34:a8:
1e:ea:26:fc:97:49:f9:2f:02:22:01:64:d4:ab:58:
32:c9:0a:3a:7a:4a:2d:92:a3:28:a1:4a:25:74:f5:
3f:7e:34:6d:2a:56:72:fa:2f:ca:88:c8:6f:d5:92:
6e:f7:4d:fd:8f:ce:b0:f6:1b:90:11:54:8a:6c:fc:
fd:a6:43:02:ae:26:6d:c3:6b:6d:45:7f:b3:86:ed:
64:65:a9:7a:e3:05:42:b6:09:6d:92:32:0e:24:f4:
db:42:79:56:32:b2:ca:10:d6:38:6a:32:2f:ab:2a:
44:81:a5:5d:b1:1f:64:c1:24:02:98:f7:77:c4:a6:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8B:9F:2D:57:0C:22:F7:8B:FE:83:CE:8A:F2:6F:CA:91:DE:10:81
X509v3 Authority Key Identifier:
keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:58:6b:16:51:89:48:7c:3e:4f:2d:60:dc:de:46:ec:68:a3:
ac:49:dd:81:2f:81:e7:30:51:fc:f3:77:6d:a0:15:96:ab:e1:
d3:71:4c:fa:d9:cf:3d:f5:28:81:53:f9:5a:a0:a0:15:f8:19:
00:e9:1c:77:67:02:5a:c4:59:90:60:f3:e6:9a:08:fc:1c:17:
71:57:d2:1c:56:3f:3f:ba:11:0d:2e:7d:41:46:37:99:37:5a:
6e:73:b0:f2:a5:16:7b:27:47:13:67:12:59:02:e0:a7:a7:ae:
d4:bf:85:ac:9b:41:d7:09:00:bd:e7:38:87:57:5e:e5:82:84:
f5:28:f4:5a:fa:e0:42:c2:e3:2d:d0:bc:bf:b0:2f:ac:28:ea:
26:9f:2d:b1:b4:c3:b0:e2:a9:cb:91:d6:9d:c9:78:04:71:cc:
2f:bd:50:71:fa:8c:6a:9d:42:e1:f4:19:01:01:37:3f:50:56:
f2:34:60:2b:54:73:c7:95:9c:43:c9:09:89:51:dd:9b:22:6c:
65:94:fb:63:f9:42:4b:db:d0:2f:ef:e7:92:13:af:77:8e:9e:
5d:3e:9d:ad:d5:c5:79:4d:fb:b1:26:90:ea:19:45:50:b0:49:
1d:59:c0:96:b0:39:2d:be:86:4b:53:4e:d4:58:a3:cb:cb:68:
3d:55:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:26 2025 by rpki-client