Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: +DrXOr45RaRjB4bKBHpxpMwVACQzQLT6HNkG8mAqhE4=
Subject key identifier: E5:25:96:3D:77:29:51:45:00:04:91:B6:7F:41:FB:BA:27:71:5D:8D
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 019A70A502C124EFA31DD3AE686A0F1BE5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0C76
Signing time: Tue 11 Nov 2025 02:00:53 +0000
Manifest this update: Tue 11 Nov 2025 02:00:53 +0000
Manifest next update: Wed 12 Nov 2025 02:00:53 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: gAXghFaVj0+HSqFQfXl4UGZlZcFjlUfCwI712pWPz+4=)
2: PiONgyQtYCxtAKel6AwlToYS7WY.roa (hash: GhuVBG356WKiZheC0jkKfbw1tCMHk61qHlrUSlnDnIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:02:c1:24:ef:a3:1d:d3:ae:68:6a:0f:1b:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Nov 11 02:00:53 2025 GMT
Not After : Nov 12 02:00:53 2025 GMT
Subject: CN=e525963d77295145000491b67f41fbba27715d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:85:e2:63:c4:df:03:ec:41:09:18:79:f4:
73:da:f4:85:fd:52:fe:04:ba:22:19:61:c0:ed:f8:
b9:34:29:80:f3:d0:ae:76:9c:06:ac:ef:5c:ad:e1:
c3:29:2b:b4:9c:b8:26:a5:7a:b3:35:75:db:d5:32:
fd:ad:14:ad:98:18:ec:ae:ab:7a:73:05:7c:0d:89:
aa:83:42:24:30:92:90:2c:9d:ad:c7:98:8e:dd:f0:
68:22:58:c6:cb:80:08:b9:7b:f9:b7:27:23:b7:68:
d9:5e:2f:23:c4:0e:92:96:da:e1:31:43:c5:01:ff:
f4:01:12:88:55:44:41:d9:dc:69:e8:7c:13:dd:a5:
25:9b:02:bc:73:83:5a:9e:f0:50:e3:a9:35:c9:85:
18:eb:ed:fc:82:e8:f7:76:46:ac:60:33:21:49:25:
8a:c5:bc:dc:8f:22:08:4d:d9:eb:24:97:bc:c1:4e:
aa:4b:9d:27:d3:a6:6d:a7:3b:1c:04:96:cf:2a:3c:
fa:8f:82:ec:c1:04:1e:f5:d2:d2:ff:ec:b4:7d:0f:
60:cc:f3:d3:bf:24:69:a4:b8:fb:4d:f5:43:94:fe:
c4:5b:a3:15:24:b0:a0:78:d6:15:54:06:e6:05:0d:
95:85:de:da:45:14:a2:e6:6c:78:1c:6d:63:5c:2c:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:25:96:3D:77:29:51:45:00:04:91:B6:7F:41:FB:BA:27:71:5D:8D
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bf:d6:13:5d:43:ed:e6:f8:75:74:65:65:ae:30:7c:1e:6c:
75:e6:4e:8d:fe:47:d0:db:ce:e4:e5:69:3a:0a:3c:cd:f5:50:
7c:96:1b:5e:ce:6b:b5:c0:26:7c:4b:26:19:af:fa:63:d6:ea:
ed:0f:40:a6:a1:8d:45:fb:70:44:0e:e6:a1:07:7e:46:61:ce:
9c:fb:f1:f7:54:1b:25:48:2b:74:dd:fd:fd:12:14:64:20:0a:
53:f8:36:80:17:2f:f2:78:32:6a:cc:70:e9:54:9e:f1:32:98:
7b:e0:3e:98:ea:2e:df:14:51:d2:49:5f:e4:0d:5a:00:5d:cf:
01:d4:7a:d4:9f:a8:f5:7b:93:18:08:f2:3b:d5:c5:ec:ae:fe:
03:df:d2:b4:37:82:e0:e9:77:ca:35:07:35:cc:da:36:f5:19:
c5:ca:22:79:65:38:5c:7b:44:33:2d:74:13:95:92:af:17:c8:
9c:d7:53:4a:50:5a:a2:bd:06:e7:2f:46:93:5d:ca:07:ac:c5:
44:41:54:e3:93:50:54:f0:42:13:a2:71:80:9d:85:d2:c6:8d:
b5:65:5a:96:22:1e:df:dc:95:4d:63:94:50:c3:7c:07:b9:cf:
f3:41:df:44:48:8c:80:64:ce:5f:1c:14:e9:3f:dd:7c:26:df:
d3:31:d2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:16 2025 by rpki-client