Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: EXQQaaOXuK3yPYpv/pDpu8eAzzpdkQRkwuO+MPR5rQk=
Subject key identifier: 83:19:CB:0F:6A:1E:BD:31:76:30:E9:63:99:CD:15:79:B3:A3:CB:55
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019A714996BC2278CCE53E4A3EC5ED78C759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:39 +0000
Manifest this update: Tue 11 Nov 2025 05:00:39 +0000
Manifest next update: Wed 12 Nov 2025 05:00:39 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: RTZ0X5u/Fi8mBZMCAf5DFbWdWHflissteRIfg5B07vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:96:bc:22:78:cc:e5:3e:4a:3e:c5:ed:78:c7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Nov 11 05:00:39 2025 GMT
Not After : Nov 12 05:00:39 2025 GMT
Subject: CN=8319cb0f6a1ebd317630e96399cd1579b3a3cb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:34:c1:8d:1b:a1:01:55:87:83:00:ca:28:
ae:6b:5e:d6:1a:78:c0:ac:60:65:f7:a5:da:82:e0:
47:7a:8f:23:c2:a9:ff:8a:30:8f:24:31:a0:79:bf:
8e:32:b4:12:bb:7b:a4:7b:13:8b:e7:45:54:87:3b:
0d:7c:08:3a:ce:df:24:20:03:46:d0:b5:c0:46:72:
a3:5d:47:2e:cc:ad:41:d5:26:f5:04:5c:18:85:8c:
0b:96:24:6c:29:22:f5:c5:f8:75:f3:61:47:68:32:
45:a5:7a:66:d1:32:df:6c:31:6f:de:b3:57:8d:56:
e5:ad:43:db:0e:40:a1:f9:dd:26:d3:4c:3d:e4:09:
b8:e3:35:c8:af:b9:da:11:a6:33:06:e7:2a:93:b7:
43:b1:e9:ca:3d:c0:31:f2:81:38:2a:a6:45:bb:89:
f5:fe:a0:d5:f5:e1:43:11:51:d7:82:1e:cb:b9:02:
0f:d8:42:02:56:3b:cf:17:d7:ec:37:29:17:fd:26:
d7:6a:21:f3:5b:34:7e:67:7e:d7:ee:a5:7d:6f:99:
a8:00:0c:ce:16:39:7a:b8:4c:fd:fd:d0:a3:90:3d:
cd:d8:61:a2:ef:f1:ca:57:56:06:01:3b:66:94:33:
f4:58:b2:9f:f0:22:cd:a2:0e:2a:c9:35:12:c7:f7:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:19:CB:0F:6A:1E:BD:31:76:30:E9:63:99:CD:15:79:B3:A3:CB:55
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ed:a7:d4:f4:f3:38:94:fc:46:41:5e:df:2c:2c:20:fc:51:
af:4d:eb:a5:79:0c:6b:03:3b:74:97:b6:4e:ab:ba:67:c6:97:
aa:a0:f3:ad:ac:30:e1:6e:c5:a8:ea:96:47:96:f1:07:20:73:
4a:d3:d2:de:45:ca:bb:72:5b:6a:14:22:38:7a:f1:37:30:35:
93:e0:6e:09:3f:4f:51:40:56:63:10:64:b7:e2:5b:73:d3:96:
bb:64:4b:af:93:e0:37:af:bb:f4:32:df:01:93:37:02:c7:21:
61:aa:f0:c1:be:53:54:72:55:ff:7d:3f:c5:37:87:01:a6:9f:
e6:6a:25:6b:95:db:85:53:8e:7c:b3:4b:8c:7d:17:cc:75:1b:
ad:68:fc:d7:6c:de:b1:5e:06:ed:8f:6c:0c:f1:0f:7b:b0:22:
da:68:a3:db:dd:c1:77:24:f5:e2:c9:1c:1d:87:3c:2c:f5:6e:
f4:eb:31:24:5f:ad:a3:14:79:c2:54:fe:65:4b:7a:72:61:0f:
dd:c0:19:03:b5:8a:c8:f7:53:d1:d4:f1:75:8f:6a:5a:2b:b8:
a2:73:8a:38:27:a7:f3:ba:6b:0e:69:f2:f9:d1:51:75:a3:31:
4d:e3:67:a0:ff:0a:ac:9a:a0:c1:63:7a:84:a6:c7:ab:10:53:
67:00:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:06 2025 by rpki-client