Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: Y3d53jpQk6wfHlYRAZ9QCEqS3s/nlRxG91mLyRR9bZ4=
Subject key identifier: 09:46:9C:B4:96:7B:DA:82:CE:4E:32:D7:95:FF:F4:B3:53:DF:84:73
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019A0F70B049E94F908BEAE18652E1B14272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 0722
Signing time: Thu 23 Oct 2025 05:00:34 +0000
Manifest this update: Thu 23 Oct 2025 05:00:34 +0000
Manifest next update: Fri 24 Oct 2025 05:00:34 +0000
Files and hashes: 1: 8072Aeh0vfDGSJ8vyXnId-hQKJc.roa (hash: 5j4g+dxrUkP8XBx9ZA5/gKCWYOvbCcLIrcUnkZa+hD0=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: e0JBA9Pdr/N1u9izWRIJvb9o5zytstBBKvTGr1SQhVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:70:b0:49:e9:4f:90:8b:ea:e1:86:52:e1:b1:42:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Oct 23 05:00:34 2025 GMT
Not After : Oct 24 05:00:34 2025 GMT
Subject: CN=09469cb4967bda82ce4e32d795fff4b353df8473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:92:58:4f:61:a6:53:72:4c:79:bf:4e:c4:
e8:d9:39:78:ef:82:51:22:cd:0a:b8:b0:47:07:91:
ec:f9:c3:34:73:06:0e:16:99:6a:f4:a4:38:3c:a3:
47:79:cc:8d:aa:61:cd:01:4b:78:8e:39:96:75:16:
76:6b:07:0e:a5:2b:e7:2f:f7:75:42:b4:1a:b5:21:
f5:ae:ea:1f:f6:16:3e:5e:dc:35:c4:4d:3a:71:7a:
08:aa:62:09:5c:b1:14:40:6f:b1:7f:72:6c:e3:71:
1b:5a:a1:5d:6a:4a:e3:28:e0:94:5c:3e:84:1f:b9:
be:c3:d4:61:e4:43:78:33:50:10:ef:e6:77:92:6a:
87:37:10:30:b0:f9:a3:ac:26:44:5c:8b:5f:e7:8d:
6c:b6:18:d2:fd:85:d4:d0:cd:e4:e6:47:63:00:ed:
da:98:57:17:71:8f:c9:80:20:b8:7f:d2:b9:a4:e3:
5e:68:31:96:00:5c:c1:8c:fb:1a:ce:3c:df:25:e6:
eb:b2:82:a4:bb:bd:27:11:ba:60:90:49:6b:0a:c2:
c6:37:ae:70:e4:c9:6d:ad:4d:78:38:16:3d:77:99:
de:04:96:93:2e:ca:c1:88:6f:2c:d1:3c:e1:03:8a:
71:2a:1e:74:93:bb:57:91:bf:c3:23:88:9a:14:06:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:46:9C:B4:96:7B:DA:82:CE:4E:32:D7:95:FF:F4:B3:53:DF:84:73
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:14:49:43:19:85:74:58:4b:0e:01:89:49:cc:70:b8:07:4b:
fd:5c:cf:12:93:ac:53:57:73:c7:53:c3:08:83:4e:d8:75:d1:
92:51:a0:d0:b9:dd:36:96:54:e4:7e:b1:09:0f:2e:9b:ea:f4:
d2:ea:64:36:47:ae:95:b1:94:f3:1e:c7:19:b1:3f:b4:c8:f2:
d6:e1:01:72:5d:66:d3:48:25:5d:04:11:77:ad:a1:fa:2b:3c:
21:84:8c:c6:c0:bc:2c:66:2a:f8:a9:6a:d2:e3:fb:db:b3:26:
63:8e:4f:05:54:57:b1:3b:47:ac:5d:ab:d1:04:d1:a0:b5:9d:
44:9d:cf:0c:7c:14:6d:0c:97:f9:b1:3d:cc:66:47:b4:58:d4:
8c:f8:08:9f:81:9d:58:16:3c:34:a8:5b:c8:32:bd:bc:98:af:
6e:a4:2d:45:27:36:d0:77:22:42:88:17:38:e3:c9:7f:4b:1b:
18:fe:3e:ed:cf:6d:69:45:4b:d5:5d:d7:30:49:a0:15:b0:82:
2b:94:0f:51:5b:82:8c:da:e0:58:c2:c9:85:fc:4e:08:d0:ac:
66:5d:cd:1c:3c:d9:17:a3:00:c9:0b:0a:13:c9:05:fe:e8:38:
bc:18:9a:48:ca:a4:fc:0f:42:b2:a2:1e:1e:4f:09:b2:3b:54:
e9:c1:6d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:22:33 2025 by rpki-client