Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: +xoXPXPNsX/DoOZqXLZuYeCutLKjscwMW4O/7XwK9dQ=
Subject key identifier: 10:D3:75:32:54:04:3A:75:7B:76:21:AF:1B:BE:2D:AF:92:65:60:38
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 019A4F98E8DCF5E3F49DE079C8CE8D0DE990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0786
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: N7u45HLIPi8VbSrWqbF-D_zaDHU.roa (hash: z/94ODpbSObkF9ntbta3SuHsuUOHDHZTonhHShc7nzU=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: L9xxzsXd6MXruOfQPT8yt1DA+0HTbwgFCBu40EE0iGo=)
3: XhwSMGIs-RJh42PHFXzltSHF5Po.roa (hash: fV4yfjd+EyERI+gquZwyYz9nAML4bAM6ZOC3xmM9+8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e8:dc:f5:e3:f4:9d:e0:79:c8:ce:8d:0d:e9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=10d3753254043a757b7621af1bbe2daf92656038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:06:d4:d1:9e:d3:bf:41:88:dd:4e:b2:44:
5b:21:62:10:20:36:34:cc:18:eb:28:4d:78:21:1b:
0f:90:fe:8c:1e:ef:8e:50:c2:19:ef:1a:5c:c4:02:
7d:c2:5e:c1:cb:ac:0a:41:7e:5e:13:ea:43:2c:6c:
52:ec:f1:ce:63:3a:31:07:fb:a9:6a:fb:bf:1d:7e:
82:b7:ac:fe:f5:82:5e:54:5c:6a:5b:cb:4b:41:e7:
7e:10:53:61:d7:87:d9:51:d2:fd:b8:d6:1d:09:45:
56:10:01:60:d2:cc:c8:38:7e:7b:a8:54:c0:91:f9:
21:c3:fe:94:a9:cc:e8:3e:e9:8a:9a:25:36:0f:d5:
0d:c1:0c:da:09:a3:9b:8c:19:f5:c6:5f:23:c6:96:
89:25:03:4a:a7:da:55:c0:67:35:ad:fb:db:ce:8d:
16:a6:a6:61:38:a8:96:3f:6a:e2:20:ee:e7:cc:42:
7e:62:8c:fe:a1:65:97:21:7e:49:b6:73:e4:59:fd:
00:2b:30:eb:eb:3d:93:b5:6f:26:7b:fa:6d:b8:fc:
7e:db:70:72:13:3e:d0:87:1c:d9:9e:37:31:03:8d:
ed:0f:19:b2:68:17:e7:47:5a:52:16:4a:0c:e9:34:
ea:64:8d:c3:3b:51:06:bc:ee:a5:ea:bc:3d:3d:b2:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D3:75:32:54:04:3A:75:7B:76:21:AF:1B:BE:2D:AF:92:65:60:38
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e8:b7:8c:1e:9d:29:fe:ac:c8:fb:85:78:e2:1c:15:06:24:
72:bb:7c:db:51:5e:f0:b2:dd:00:7f:15:c9:29:a1:71:dc:33:
a2:4a:6c:08:4b:ab:f5:a1:c1:db:54:bc:48:e3:37:b0:71:ef:
a0:1d:5a:ac:59:bf:55:f3:d2:2a:e5:1f:de:16:4e:bd:99:4a:
47:dd:44:36:20:d2:5d:b0:ac:ad:d6:de:a0:90:2b:f1:bb:0e:
42:c2:d3:2d:e1:f8:7f:d7:0e:10:3e:b7:b3:cb:a6:2c:78:b9:
bd:6d:7d:63:82:e6:4f:31:da:e2:ab:f2:04:12:28:56:fe:b6:
0a:1c:6a:30:cc:c6:2e:00:d4:9e:50:6b:00:72:b0:63:33:70:
1c:07:07:8b:c0:29:8d:44:80:87:13:b2:a3:ae:aa:fa:48:d2:
60:6d:c4:f3:71:97:ec:53:39:18:6d:14:41:cd:05:c0:fa:7c:
f1:a9:e8:4d:d4:dd:7d:d5:6b:5d:67:17:eb:a8:91:6f:b2:39:
a9:1a:c4:2c:cb:72:19:17:d6:68:12:ff:63:2b:68:f5:4b:f6:
2f:0a:03:db:0a:bb:28:58:2b:15:e9:67:3f:39:73:75:cd:1e:
28:fe:11:03:d2:af:a1:59:0f:f7:7c:84:9e:18:21:7d:47:23:
1b:dd:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:06:51 2025 by rpki-client