Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: zYSe+ppPC1BPo09kpEo0H40wCCdiLHum0+vWAG5h1uE=
Subject key identifier: 3D:4D:8B:F0:0A:6A:7D:0C:13:74:E1:A6:AF:82:94:47:83:4E:F1:48
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019A4470E3DC920CB03882D4E7C84AB6A681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0D27
Signing time: Sun 02 Nov 2025 12:00:40 +0000
Manifest this update: Sun 02 Nov 2025 12:00:40 +0000
Manifest next update: Mon 03 Nov 2025 12:00:40 +0000
Files and hashes: 1: NHS8j6EfVj264WhBn5T1VNURnZU.roa (hash: P/iSzsFsvUYBkA3ydPqEWpaij0XyTRk/Canb/Yb7R7Y=)
2: fIdqinVlM-emfKkFTuMAeFZWmCs.roa (hash: rnaMpG7xsrNu9zokKGiqTHsnd94QdkVoigfpLdS9fYI=)
3: lySFZGvCqX3_-M45mN4bsMvAYak.roa (hash: /9sPAKQwJv/tHPhsxo8W1GUR2Wva7vFyZnyLH4prJws=)
4: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: pNC8u9eT4X481NwhilGXigDxS7qwRyaQL0ucprcpxYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:70:e3:dc:92:0c:b0:38:82:d4:e7:c8:4a:b6:a6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Nov 2 12:00:40 2025 GMT
Not After : Nov 3 12:00:40 2025 GMT
Subject: CN=3d4d8bf00a6a7d0c1374e1a6af829447834ef148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:bf:28:6d:03:36:5a:d5:38:93:30:6f:9f:
57:e7:d4:b1:c9:cf:21:ed:3e:50:1b:72:0f:12:5a:
e4:30:82:f2:b2:5d:21:fd:aa:bd:b9:42:f6:1b:be:
e1:5b:1e:00:13:12:4b:40:42:51:58:1c:39:03:1d:
7e:5b:be:b6:f8:c9:1e:a9:f4:b5:2f:e0:db:24:e0:
da:95:69:27:db:37:4d:4c:e2:c9:d1:48:50:f4:c0:
86:7d:b7:2d:27:d5:21:df:3a:a5:9b:df:de:26:8f:
94:97:fc:b8:bb:c7:8d:0d:5a:eb:2d:6b:e2:a0:bb:
82:d2:7d:8c:10:58:46:ce:19:b7:7d:c9:fb:dc:c3:
8d:c7:35:47:c6:c4:ee:f7:b1:9b:8a:f9:22:e3:8b:
0f:59:34:2b:5b:e8:5b:f8:68:d7:5f:2e:d9:b5:6f:
4c:41:d7:ff:15:64:82:2e:c2:8f:f7:7e:2a:13:73:
72:16:43:ed:c6:60:4e:36:eb:d1:3b:af:bd:47:8b:
2f:7d:bf:cc:e7:83:88:2d:19:67:e4:07:be:d5:20:
a4:0b:02:62:cb:f7:09:fe:79:f9:da:dc:90:be:6b:
34:87:e9:f8:b1:ea:6c:c4:99:3e:1c:d1:60:d6:c4:
08:3d:9f:1d:cf:9f:24:e1:87:93:c5:f4:42:3d:b1:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:8B:F0:0A:6A:7D:0C:13:74:E1:A6:AF:82:94:47:83:4E:F1:48
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:08:a3:3b:c5:0a:0d:3b:8d:9e:97:cf:8a:c0:11:63:43:ad:
09:cf:6b:91:a5:78:6a:3b:08:2b:05:2e:d8:98:a3:e9:cf:a1:
a2:06:83:2a:58:d6:83:bd:a7:0e:e5:82:ac:ef:a0:16:49:33:
eb:89:78:c9:94:4d:b7:01:8b:4c:3e:15:38:30:4c:b7:d0:91:
3e:77:25:32:6d:b4:c2:2d:7f:b1:7f:b8:a4:ac:03:9e:0f:81:
ce:08:4a:11:c0:35:9c:d1:ec:03:56:8c:a6:d8:59:9f:ee:be:
83:ba:7f:74:24:02:40:cc:df:d3:71:f8:ae:eb:c4:25:bd:39:
b5:90:99:1f:df:6b:4d:1d:3e:bf:3c:ac:b9:4d:32:3e:5f:f6:
ed:27:ba:0b:94:2f:db:7b:9e:18:dd:89:0c:e9:f6:c2:25:5c:
f0:84:cd:b9:94:18:9e:a0:ea:0f:78:0e:a1:02:fa:2c:f5:73:
7c:b5:0c:2f:32:3d:55:8b:2c:23:81:6d:9f:0d:3a:13:d2:55:
51:43:b3:94:74:c5:8e:4f:94:5a:e5:b0:48:24:fc:97:70:e3:
b7:80:e8:89:a5:c9:a4:d2:32:f6:fb:f0:d6:4d:fa:1a:0c:b8:
41:dd:03:43:66:c5:e1:8f:d9:f7:2c:14:f9:c9:da:f2:59:c5:
cd:85:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 19:06:53 2025 by rpki-client