Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
File: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json)
Hash identifier: XHeUbcyCaU0KMeHYrvCu+arGdp417+/vZb4iUoET0j4=
Subject key identifier: 4A:7E:D0:70:6C:DC:56:08:D0:F8:83:1D:AA:D7:20:96:CF:80:3B:54
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial: 0199C4FBEC4885546E45C80332907F416CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
Manifest number: 0477
Signing time: Wed 08 Oct 2025 18:01:08 +0000
Manifest this update: Wed 08 Oct 2025 18:01:08 +0000
Manifest next update: Thu 09 Oct 2025 18:01:08 +0000
Files and hashes: 1: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: lT5GH+o0ECFTA3MSoIpPU62OoNHOkxdbP5+n5t7YmrU=)
2: Xn4-KL-8Bh82Qe59kVWTId-xaSI.roa (hash: 1/y3ci5YILrRiLZoHOXKAtyVkEFrCH3iPpKqyxJyCYI=)
3: YYLnpiOtsdNraYy3ykCP3me9_d0.roa (hash: Z2+aG3QOGufBHYy7yM6ZHwElru6zT5L16YKUTxlePLo=)
4: fE9SL4lgGLEucOlyvk7fngTw64k.roa (hash: TGIMqMFtt0hwRVhPYaYtgV4OglJO1aoAg/NqO7iMJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:ec:48:85:54:6e:45:c8:03:32:90:7f:41:6c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Validity
Not Before: Oct 8 18:01:08 2025 GMT
Not After : Oct 9 18:01:08 2025 GMT
Subject: CN=4a7ed0706cdc5608d0f8831daad72096cf803b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:07:36:90:ed:25:aa:21:e0:e8:be:d0:02:
76:da:cf:08:ba:2d:da:ed:0e:80:b2:99:41:6f:b7:
aa:4b:58:f1:c5:b9:a1:e5:61:3c:49:fc:36:9a:0b:
91:cc:7d:26:f4:24:f1:b3:54:d5:0c:1a:97:10:95:
e5:97:62:a8:04:ca:77:26:f7:fe:fa:6c:6e:71:30:
11:fe:95:9e:0b:37:3d:99:5c:97:3d:0b:0d:f6:a3:
90:03:ab:ed:3d:e6:b7:40:1b:d3:63:06:8f:e8:43:
e3:40:d0:ce:13:b4:a7:84:e6:8c:d1:fe:50:b6:db:
52:0a:ec:4d:43:22:1f:f1:c6:0e:66:49:fa:90:9a:
00:a6:e2:91:d0:d5:ce:2c:51:b1:5b:a3:ee:8f:90:
65:7d:91:f3:52:c7:d2:95:d7:f5:8c:de:d8:62:41:
60:6c:1b:0c:e0:d1:12:0a:ec:40:cc:97:d7:2e:4b:
65:91:c9:df:8c:1c:42:e1:0f:b7:bf:5a:42:c1:60:
95:d6:5b:a5:1b:47:c2:d4:fc:66:ee:68:c3:5d:f7:
43:56:93:3e:c5:46:6b:df:95:bd:20:98:7f:2a:0a:
b6:b7:b0:4b:a9:7f:75:ff:d4:88:84:0e:c0:49:84:
c7:48:da:ec:5a:c1:6e:55:b1:fa:dd:7f:8f:d7:92:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:D0:70:6C:DC:56:08:D0:F8:83:1D:AA:D7:20:96:CF:80:3B:54
X509v3 Authority Key Identifier:
keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a3:85:ea:f6:16:cd:e4:61:82:90:75:c0:52:83:8b:0f:68:
88:b2:b1:1d:8f:12:31:3d:86:2a:46:6d:c1:63:f2:6b:ff:f2:
4b:c3:3b:99:0a:dd:cb:c0:c3:13:39:0e:12:4c:42:9d:99:ee:
70:b3:10:d2:56:92:cd:a2:8d:15:7b:0f:60:89:f8:0d:49:87:
49:12:52:00:98:43:94:1f:31:c0:e9:9c:73:44:36:2c:fa:cc:
fa:89:06:e5:d4:ed:65:da:f5:5b:12:f7:2c:ac:ad:50:fb:21:
d4:b9:18:34:f7:ff:66:39:48:e6:45:8a:3b:7a:91:ca:3d:d6:
f5:36:5a:bf:cd:d0:fa:03:c7:1f:a2:e4:f4:b2:63:65:13:11:
28:b2:2c:de:0d:d3:0a:ea:eb:9b:75:71:41:09:d9:4e:8d:b4:
dc:57:36:0d:57:5c:7d:0f:1f:91:53:05:d3:74:ca:72:13:a0:
80:ba:19:0b:1f:9f:50:36:63:e7:c8:d3:4b:b2:e8:9a:6b:12:
58:07:84:35:07:c6:d1:70:bd:4d:56:1d:fc:0b:b3:d6:ed:95:
8a:32:ed:bb:15:b0:bf:77:59:e6:5d:d0:4d:69:f5:8e:d4:60:
98:63:1b:d7:59:30:98:d6:ce:6f:ae:75:f7:6d:cf:01:2a:0b:
51:30:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:46 2025 by rpki-client