Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
File: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft (raw, json)
Hash identifier: 8saCwSigCK07pNEdp7CNaAfnV1lhhk1fBBOZsmjmVNM=
Subject key identifier: 28:15:4D:63:55:64:19:F1:50:A5:95:91:63:33:65:8A:79:6D:77:96
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 019A4EBD5645E575A2A9C3FA30BC0BA187DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
Manifest number: 122B
Signing time: Tue 04 Nov 2025 12:00:22 +0000
Manifest this update: Tue 04 Nov 2025 12:00:22 +0000
Manifest next update: Wed 05 Nov 2025 12:00:22 +0000
Files and hashes: 1: 2K91_HI3yRMddEE3CCdohZUgZwo.roa (hash: L2hHrr+jKFFMceiT1hMQ07sIlZ5+5KK9MtoxNrnP1Sc=)
2: H2RF39UMeGnrnH4hABvhDfDQDsY.roa (hash: Vk4ntYI2atEB2b8/hcEiIs2GfEy58IxLj9FRg/PgQG0=)
3: o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl (hash: t8EqQVSTBK/fB4QGbMSC4HNQZ2P4kb8rbUFRd9Q3ufc=)
4: syr1WAsKdpbK3B-2acqa83QBouY.roa (hash: 7AhmNgpdXoA3dOcpljZ7vHI4I+47jOSplCREprRNiXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:56:45:e5:75:a2:a9:c3:fa:30:bc:0b:a1:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Nov 4 12:00:22 2025 GMT
Not After : Nov 5 12:00:22 2025 GMT
Subject: CN=28154d63556419f150a595916333658a796d7796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:f1:98:ad:99:1a:15:6d:69:43:2f:ae:95:
9a:17:31:59:6a:59:c2:9d:c3:1e:49:6b:38:69:d5:
f3:a8:46:82:b8:90:6a:a2:50:a3:57:59:c7:91:a7:
40:5a:49:3f:a4:57:18:b8:1e:b0:27:60:12:27:75:
21:4f:51:84:9a:70:2a:16:70:06:79:51:45:14:47:
41:5b:b7:08:38:5a:33:97:1d:1d:ee:e2:2c:af:be:
7f:57:94:e3:e3:7b:5a:80:23:a1:73:7b:5c:95:33:
52:98:51:ad:a2:f5:45:14:ad:b8:bd:92:2b:65:2c:
c2:7c:2d:5f:12:88:5b:7c:b3:53:90:ab:f4:50:d1:
c0:96:da:0c:eb:0b:79:37:58:c8:1c:31:f6:59:6b:
c8:e1:6b:8e:b7:6c:5a:84:a3:1d:14:a0:69:79:e8:
0d:9f:bb:5f:67:74:0a:48:2e:83:91:b3:29:94:2f:
4c:2f:39:80:da:c4:19:9c:30:28:65:5a:e3:4a:4a:
5f:4d:f0:1d:44:bd:a3:6c:01:b0:ab:e8:2b:b1:86:
ed:f7:5c:6f:fc:43:c5:da:50:19:ed:f5:0a:ed:d9:
0c:1c:c2:22:39:1b:77:6d:02:ce:b0:6c:60:9e:3c:
25:37:8a:cf:fe:24:52:b4:9b:bb:2b:d5:3a:7a:a0:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:15:4D:63:55:64:19:F1:50:A5:95:91:63:33:65:8A:79:6D:77:96
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d9:1a:5e:f5:85:91:8a:68:95:36:1e:dd:dd:a4:7d:31:a8:
ec:e5:f4:41:4a:58:8b:93:e2:95:c2:31:97:c4:44:4f:ff:77:
f7:c5:98:5b:da:62:75:20:3b:9d:88:79:3e:01:74:d2:12:02:
89:bb:fe:92:06:25:f6:31:6c:bb:2f:3e:eb:a7:21:6b:d3:f5:
3f:2c:14:d9:10:e7:dd:60:ce:ab:c0:39:cb:e2:c1:72:d6:ed:
34:b0:89:51:5e:2f:ae:c6:f1:68:d2:44:35:f9:e3:0c:42:ac:
fa:a5:64:0b:89:74:3c:ec:8e:69:4f:71:91:92:c1:a9:52:a3:
3d:97:22:d9:b1:dd:f8:b4:07:fd:38:2f:a3:51:6d:85:71:65:
50:c3:f5:8f:05:25:2f:e8:59:08:59:25:1c:1c:75:64:34:16:
ec:ac:97:cc:61:cf:46:46:e2:c5:33:c5:d5:c9:5a:cd:a2:a7:
bc:d3:7c:fe:7b:98:6c:66:72:8d:63:6d:0b:c3:e9:73:44:46:
8a:57:af:6c:fe:10:7d:7b:4a:32:41:9f:ab:05:9b:9b:e3:27:
3d:0e:46:1c:a6:2a:71:a3:50:a1:f7:a5:75:44:d9:a6:ed:1f:
1d:5c:89:d9:f9:bb:ce:6d:d8:ac:56:d3:fa:c0:93:3b:71:21:
86:b1:96:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:33 2025 by rpki-client