Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier: yoJOrncD+xQnSJMbWtbKdCou+SdJ3YRKtMti9wB5kcs=
Subject key identifier: 5A:D9:E4:7E:8F:AF:70:FA:48:20:7E:E0:AD:E5:CB:3A:34:99:F4:00
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial: 019A500779514EA6E0A30A8F8F3D89C854F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number: 05FE
Signing time: Tue 04 Nov 2025 18:00:58 +0000
Manifest this update: Tue 04 Nov 2025 18:00:58 +0000
Manifest next update: Wed 05 Nov 2025 18:00:58 +0000
Files and hashes: 1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=)
2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: KI22ocn8e4GgnRH2ztKdaqA2PfY0KPi+CELV3B0YDeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:79:51:4e:a6:e0:a3:0a:8f:8f:3d:89:c8:54:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Validity
Not Before: Nov 4 18:00:58 2025 GMT
Not After : Nov 5 18:00:58 2025 GMT
Subject: CN=5ad9e47e8faf70fa48207ee0ade5cb3a3499f400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:d1:02:51:15:de:28:cc:98:c3:6e:da:e1:
91:51:b4:02:ae:48:6a:9e:dc:80:7a:f9:5e:bd:c4:
a7:0f:ac:0a:fb:4a:69:ce:49:c4:e3:a0:0e:3b:1a:
cb:2b:9e:aa:6e:64:75:f9:b1:d1:30:09:1a:e9:71:
34:ee:50:b7:9e:bd:d8:50:97:40:8e:a7:43:af:92:
b6:15:38:b2:68:87:af:e8:2c:7c:52:1d:7a:38:33:
47:48:5a:98:f5:93:f2:3d:20:70:f5:8e:28:e6:84:
5a:d4:d2:5b:07:de:cb:c9:20:7c:80:08:74:11:bf:
e5:7c:df:1d:f7:82:09:4e:98:37:21:ef:a6:80:bf:
9c:de:ab:4e:74:47:f4:c1:bb:99:f6:bd:82:b2:ea:
4a:79:f7:78:f9:ee:be:12:9a:9f:ca:0d:c4:56:6c:
78:ed:dd:e1:a3:8c:e2:f8:b6:15:5e:27:53:4b:d8:
63:88:fe:74:1f:e4:5e:d1:e8:59:d5:27:92:45:88:
48:b6:3e:03:b0:6b:36:38:a1:35:9a:cf:07:b2:6f:
c1:d0:74:f0:31:15:ba:4d:55:be:9c:c4:aa:41:35:
99:82:f3:f1:d6:62:bb:76:d4:0f:cd:de:6b:4f:c5:
64:2d:1b:a1:9e:77:a3:24:f7:a0:3d:0f:b8:62:13:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D9:E4:7E:8F:AF:70:FA:48:20:7E:E0:AD:E5:CB:3A:34:99:F4:00
X509v3 Authority Key Identifier:
keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:88:9d:20:2e:c7:e2:8f:e3:b0:d1:8a:98:4a:71:e5:65:
88:8e:c0:0e:54:1d:d5:88:16:95:aa:63:b7:3b:9e:e2:7a:df:
2f:19:7e:4a:4b:0c:59:71:74:f6:4e:6b:35:2d:0e:a7:4a:d6:
a2:5d:0c:25:e9:31:a2:6c:8f:c1:e1:a8:2a:c6:f0:90:29:29:
1f:c5:4c:96:e9:ba:d4:fc:c5:19:86:ec:d9:98:17:83:b8:9b:
9b:6d:53:f2:09:98:fb:89:81:61:4b:a2:94:03:eb:62:59:7e:
ed:7b:ca:15:54:71:be:1a:f8:70:91:22:db:cd:6d:99:7e:df:
c1:26:c5:36:39:0e:77:4a:49:55:a1:40:3b:a5:ae:07:f4:ed:
fd:92:06:78:17:af:6e:16:92:9d:0e:43:ce:54:42:47:63:2c:
24:05:51:22:d5:56:98:a1:88:d1:5e:3b:a1:15:f5:8c:ab:c5:
04:bd:26:f9:35:e2:a2:80:c4:7f:dd:a8:2a:2f:a9:d7:47:9e:
24:90:b1:df:d8:4f:8b:9f:d0:ff:c0:c9:6c:34:1d:ce:88:42:
4b:e5:d5:14:1f:ce:00:6b:0f:f5:31:cd:cf:5b:21:c3:d2:36:
8d:dd:0e:8b:8b:bd:1c:03:6c:b1:eb:7f:9c:79:93:2e:b0:12:
32:60:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:28 2025 by rpki-client