Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: 8T4NWSPZ+JSsMrZ/ItBRWmk4LtLyWZHWmIlDnbADA04=
Subject key identifier: 47:C0:18:FC:E6:67:B3:EF:99:F7:92:38:46:DA:D7:CD:1E:19:EA:ED
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 019A4C980BA7C3BD97E1A04FBCA1FFB35E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 0562
Signing time: Tue 04 Nov 2025 02:00:24 +0000
Manifest this update: Tue 04 Nov 2025 02:00:24 +0000
Manifest next update: Wed 05 Nov 2025 02:00:24 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: 8z7xiquhHLBjunsyG10BV4Zfqtarw4ukMRgyAwjH4qg=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:0b:a7:c3:bd:97:e1:a0:4f:bc:a1:ff:b3:5e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Nov 4 02:00:24 2025 GMT
Not After : Nov 5 02:00:24 2025 GMT
Subject: CN=47c018fce667b3ef99f7923846dad7cd1e19eaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:76:02:08:fc:d8:47:4e:e9:0b:ba:62:4f:
33:86:13:64:b7:43:e7:d4:6a:93:5a:00:69:ab:c2:
09:27:9b:e4:9e:af:aa:4a:79:79:4a:70:68:2c:09:
0e:ca:e3:e2:dc:43:b0:2d:40:a7:0b:34:b7:c3:5a:
c8:f1:b5:c4:55:96:cf:03:90:22:fb:f1:df:43:87:
bb:77:d4:42:a8:61:62:01:35:24:5b:94:6b:fd:4d:
27:07:02:06:6b:90:bc:25:ad:6a:7c:a2:92:f6:b4:
e7:e4:c6:c6:fc:a3:a4:e9:07:d2:22:27:f9:24:5f:
1f:b1:12:16:2b:d9:f2:71:92:2d:bf:a2:6d:b6:ef:
7d:0f:b1:61:f6:ab:1e:8d:b5:34:6f:b2:a7:55:5a:
2a:66:67:bf:10:02:56:b6:fa:ed:14:7a:23:95:e6:
eb:19:e1:c5:d6:4d:ac:1a:47:58:82:82:f2:98:93:
c8:f9:2b:56:c8:07:83:9b:67:c8:a9:f9:6e:c5:9a:
81:54:c7:d9:a5:6f:95:ac:3a:e1:b3:d5:06:7c:88:
d9:58:c6:e8:80:03:ba:a7:44:ca:0a:ec:d3:50:65:
1d:e7:4a:ea:f6:a0:70:fa:22:cc:53:e7:07:fe:25:
73:04:b7:3b:3d:04:d2:fb:01:aa:ed:0b:c6:e1:04:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:18:FC:E6:67:B3:EF:99:F7:92:38:46:DA:D7:CD:1E:19:EA:ED
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:61:9d:8d:ce:90:ed:41:00:dd:38:b0:ea:c2:fd:43:6c:0d:
ea:7c:d6:b6:86:d9:27:84:72:f8:a3:8d:48:aa:f7:29:4e:2c:
24:bf:eb:0e:2a:ea:32:90:f0:dd:92:11:1c:92:8b:2e:fd:75:
61:e4:35:db:60:30:f6:04:86:3e:42:0d:93:7e:2c:93:4d:3d:
4a:d3:21:02:c5:c8:7b:a3:c7:31:8f:ae:59:e9:a4:00:93:d5:
fd:40:44:cb:8b:cd:ad:84:4f:7a:79:94:69:c5:c0:b8:83:1e:
e8:c1:6f:4e:97:37:68:28:d1:8f:8b:0f:4a:86:28:08:78:cc:
a6:91:ab:8e:c7:64:91:7a:7b:b9:fa:6a:95:8d:64:b8:fc:f2:
ac:79:f7:ae:87:23:28:7c:bd:90:45:fc:41:59:82:62:26:4c:
8f:eb:0f:4f:52:cb:f8:d1:5d:f3:bb:44:2e:bb:b5:5f:72:99:
7b:f4:fa:40:a0:6e:21:48:9c:60:a9:66:7e:86:54:98:7b:53:
4c:de:42:3a:8b:05:43:93:5f:89:44:86:86:5a:d8:f3:a8:e8:
65:43:66:a8:c4:e2:a0:82:d5:7d:b9:56:08:15:65:aa:78:39:
4d:dd:74:e3:be:56:86:e3:57:36:d0:a4:30:a0:6c:62:6f:6c:
c6:bf:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:50 2025 by rpki-client