Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: FuMtAJQwBdHBzDl0Kj83DJS5+UqEVTWbnZBQ5F9gHEE=
Subject key identifier: 8C:17:11:38:CD:95:7C:EA:33:67:00:28:00:9F:87:D9:0C:7C:0D:A9
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 0199C3E94F941DF09D7DCA5FFF1991B31123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0D6A
Signing time: Wed 08 Oct 2025 13:01:11 +0000
Manifest this update: Wed 08 Oct 2025 13:01:11 +0000
Manifest next update: Thu 09 Oct 2025 13:01:11 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: YiQeuv2OLxzrUyl1F+wKwLwID1v5c2n1AkoRVmupzz0=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:4f:94:1d:f0:9d:7d:ca:5f:ff:19:91:b3:11:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Oct 8 13:01:11 2025 GMT
Not After : Oct 9 13:01:11 2025 GMT
Subject: CN=8c171138cd957cea33670028009f87d90c7c0da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:b3:0d:46:03:c5:c3:4b:a8:6f:c1:09:07:
fb:ab:dd:4f:a9:3a:50:dd:61:61:63:03:7c:dd:8d:
a3:4f:51:67:12:5a:33:5d:aa:cf:af:80:57:76:48:
16:0a:d9:71:89:7e:50:56:5b:01:c5:a8:f1:a9:f0:
f5:c5:a9:51:65:9a:a6:30:4b:41:1a:f0:54:90:1d:
aa:bb:7b:ae:18:86:66:2a:c6:3e:8a:21:28:13:ba:
0d:46:56:b8:57:f9:55:a1:ca:bb:7c:e5:a6:fd:0d:
a9:b0:c0:00:bd:1d:38:c1:c8:ff:1f:15:0a:d7:63:
e3:c0:26:e2:ca:7c:0a:aa:4e:6c:0d:3d:23:bc:69:
78:20:32:16:8b:d7:63:35:26:3c:0c:ab:09:8e:97:
45:94:47:dc:90:d9:47:0c:9e:1f:eb:a1:45:ff:78:
3c:8a:c3:4e:9c:85:bc:1f:26:de:0b:61:71:06:8b:
41:89:df:2e:a1:e1:dc:ee:fb:b2:8b:27:d9:6b:9b:
46:c6:27:23:22:f5:9e:df:0a:78:39:9c:04:f1:ae:
ac:6d:d6:ce:31:52:f4:ab:84:26:4c:6e:f7:d2:59:
be:5b:3c:44:fa:26:f1:fb:68:e8:8a:68:db:a8:6d:
b5:03:34:f7:1e:c8:c7:63:f2:73:59:fe:61:61:7a:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:11:38:CD:95:7C:EA:33:67:00:28:00:9F:87:D9:0C:7C:0D:A9
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b2:c7:73:f9:b4:13:42:2a:79:6b:55:37:9d:23:63:8b:a6:
26:de:5a:c2:9a:93:67:d5:79:b7:1a:fc:22:e0:5e:32:3e:d5:
9b:fa:94:8c:da:f5:cd:35:91:f5:fc:26:ab:55:c5:3a:04:29:
20:4d:4f:bb:6d:a0:80:16:76:05:a4:be:a8:74:ee:93:1d:a8:
92:e3:36:08:a1:91:1b:e3:6f:a8:e7:15:36:fd:9b:1e:1d:ad:
da:c3:3d:e5:67:9d:5d:41:95:3f:0b:cf:3b:7b:7e:a5:d3:1a:
f4:4b:7f:1b:51:38:0b:d2:e5:15:ba:f5:0f:3f:54:47:05:3d:
71:8d:8a:d8:4a:50:52:ed:63:a7:2f:3f:0c:9a:55:de:82:2f:
8f:76:71:4f:a9:ca:b3:6b:fa:7a:21:76:ce:95:11:78:76:97:
e2:3b:9a:f2:47:40:24:0a:7e:4c:32:45:ca:7d:b3:1d:a2:2d:
ca:a4:57:87:2a:37:d0:66:e2:4a:f0:e0:87:69:9d:d1:ee:54:
db:bf:36:ce:31:c3:ff:72:07:3e:8b:d7:d2:78:4e:b0:78:77:
30:00:c8:1d:2c:66:ee:24:6c:c5:cf:dc:5b:cd:61:91:f6:dc:
cc:cc:b3:48:0a:57:49:b6:ce:48:fa:70:21:a4:8f:c4:d1:1b:
09:aa:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:08 2025 by rpki-client