Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: MCaWlLNuvlwBrpIN6J/XJM/ixD5Qi8zW9PFI5MTQBGI=
Subject key identifier: BF:03:6D:4C:0C:FE:85:37:09:48:68:9F:A5:7E:4B:8E:3B:A9:14:7E
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 019A511975E433114AE3C7F3863819EF6037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0C3B
Signing time: Tue 04 Nov 2025 23:00:14 +0000
Manifest this update: Tue 04 Nov 2025 23:00:14 +0000
Manifest next update: Wed 05 Nov 2025 23:00:14 +0000
Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: Ej+pwsH+PffLfyKdpcjHOwWMeS2XCw+0Tfyq4lfFg+c=)
2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:75:e4:33:11:4a:e3:c7:f3:86:38:19:ef:60:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Nov 4 23:00:14 2025 GMT
Not After : Nov 5 23:00:14 2025 GMT
Subject: CN=bf036d4c0cfe85370948689fa57e4b8e3ba9147e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:47:47:b9:13:31:0e:97:93:30:53:b1:8b:
5f:fc:85:9c:6b:14:19:94:3d:ad:73:d9:36:9e:8c:
0b:da:5c:b1:aa:eb:ff:cb:36:5c:2d:34:39:e0:4b:
52:00:d4:2e:ce:2a:79:43:8d:ed:9d:6a:54:5e:f3:
41:46:65:3a:f2:5a:5c:5b:94:26:cc:66:dc:62:34:
3c:0d:98:4f:9a:9c:7d:c6:eb:62:1c:11:d6:38:cb:
69:46:d5:48:dd:e4:9f:31:e5:7d:0f:fc:c0:30:69:
19:45:d9:64:9a:01:e1:8e:ca:13:42:2c:a2:55:cb:
e4:ab:c1:43:b8:54:d7:54:a3:0a:9b:5b:15:96:dd:
6b:41:bc:4c:a6:d7:90:89:0e:c6:6f:71:5a:ed:7d:
50:74:de:45:7f:9f:6c:3e:c6:bf:b9:2c:e8:0a:c9:
71:92:fc:1b:86:a4:46:61:7e:97:98:50:02:90:26:
bb:f5:1e:82:c5:0c:2e:8e:76:d8:66:23:93:9c:59:
6a:31:02:dd:90:9a:a9:12:68:d4:f6:f4:3d:3a:7a:
21:d4:6d:a2:35:d2:7a:3c:db:e2:63:cf:98:c0:80:
de:05:ba:c3:85:39:a2:dc:83:90:c0:ec:82:66:d8:
6d:46:9e:39:47:c8:ce:04:46:85:4d:a0:19:ed:c9:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:6D:4C:0C:FE:85:37:09:48:68:9F:A5:7E:4B:8E:3B:A9:14:7E
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8a:93:42:90:2e:ed:06:20:ef:99:d9:ef:25:2e:87:66:83:
4e:1e:eb:65:ec:e0:b8:00:d2:b1:df:9b:3e:53:25:61:78:cb:
ab:3b:40:24:7b:2a:c2:1f:22:20:b0:c8:13:3f:41:ce:cb:cb:
79:ae:44:a4:92:83:42:83:63:90:1d:11:9a:56:11:d6:4d:7d:
24:e1:b7:1a:5a:d3:03:b3:0a:73:06:89:75:4f:f6:4b:f9:47:
6f:ee:ee:7b:df:ea:b0:5d:7b:9e:4b:5b:7f:d9:57:3b:61:02:
8d:cc:3a:68:61:6d:4e:03:17:cc:af:95:0f:66:df:8e:59:64:
b8:4c:68:0c:f5:15:9d:f9:51:1c:a0:6a:fa:e3:3b:15:ef:14:
57:82:bc:70:bc:c8:bb:96:9e:0b:f2:bf:8c:f8:d4:f2:05:56:
45:1c:f9:3b:58:af:54:75:f9:ce:a9:30:f8:d6:40:9c:42:4a:
5a:78:03:0d:dd:6c:91:a7:a7:8c:d4:d8:7c:0f:1c:82:db:84:
a8:a9:ce:84:57:8c:31:85:2f:04:16:40:42:96:9c:01:d2:3a:
dd:ee:b2:99:ac:ee:cf:33:21:f4:d6:30:75:bd:2e:e6:32:a7:
97:cd:0d:b9:53:1d:e1:d5:ea:e9:60:01:76:4c:d5:15:99:d5:
7b:6e:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:25:11 2025 by rpki-client