Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: OO6xmzIEW+48kQ7dEd4cApjRpigdQ8XacIpBHSucIa8=
Subject key identifier: 41:05:D1:50:7E:79:DA:CF:8D:B9:EE:00:E0:45:D7:EA:86:D6:5C:6C
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 019A7301210D7F80CA715EFECE9E2F2CF7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 1424
Signing time: Tue 11 Nov 2025 13:00:45 +0000
Manifest this update: Tue 11 Nov 2025 13:00:45 +0000
Manifest next update: Wed 12 Nov 2025 13:00:45 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: /oU+JGN3GyuXTnS+mjfGd63Dtaf0RfxgBwsJL17tw9w=)
2: hv7umvI_Ed2T9Pd9d7RaxMNZ_A4.roa (hash: JaoBtJPnKetAcsAKSYzZugD1L/s0rkCRonZhSkC43s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:21:0d:7f:80:ca:71:5e:fe:ce:9e:2f:2c:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Nov 11 13:00:45 2025 GMT
Not After : Nov 12 13:00:45 2025 GMT
Subject: CN=4105d1507e79dacf8db9ee00e045d7ea86d65c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:af:eb:db:cf:e0:1a:d2:fb:03:a4:8a:9e:
c8:36:6d:e5:e5:41:97:e9:37:39:fc:2e:25:7f:e0:
94:68:e7:c0:a8:07:97:e0:cf:f2:92:bc:92:64:49:
44:92:f5:a9:25:72:e0:3a:59:8e:b3:66:b6:07:1a:
6e:08:a9:48:2b:ec:6a:b1:04:a7:31:c9:e1:54:97:
9e:70:ff:e9:60:4b:79:c1:9c:69:2e:99:b2:fb:de:
28:5b:1e:21:b9:e7:4a:23:b3:75:a2:56:74:20:67:
03:83:4b:e9:7b:47:e9:5d:07:84:94:cb:11:44:73:
85:f0:13:58:b9:fb:eb:49:5a:1e:51:6d:69:11:e4:
37:c0:81:b7:16:04:62:0b:dd:5c:b2:cc:32:9e:f9:
f4:85:04:f3:5e:65:4d:6e:45:88:64:4e:b0:5a:34:
6a:1f:e6:24:bf:66:a6:18:7e:80:7e:0b:37:e5:c3:
9e:5d:38:ca:50:03:ee:db:4d:8f:aa:61:13:07:f2:
8f:cc:5e:9c:0c:fd:32:a2:ea:f4:21:4e:6d:f1:95:
db:18:19:c6:64:aa:02:ce:e2:78:1e:88:b4:4c:6c:
be:7f:6f:ec:44:b4:c2:5a:1c:6b:2a:d0:10:e7:48:
af:a5:c2:37:65:2a:4e:7f:4d:2f:73:c7:84:ae:50:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:D1:50:7E:79:DA:CF:8D:B9:EE:00:E0:45:D7:EA:86:D6:5C:6C
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:00:42:ea:26:6a:74:58:c3:20:5b:b5:26:de:eb:e3:dd:51:
28:72:74:63:58:16:38:bf:9b:a1:5f:cb:84:46:8f:45:35:6d:
cd:ca:69:5b:4d:23:7d:96:8f:8a:9b:41:36:89:69:7b:df:8d:
ba:34:27:38:22:63:e8:e2:8a:64:5d:be:9c:dc:23:be:d7:e1:
29:ba:64:55:37:34:bf:24:ed:e5:48:8a:02:a4:69:2e:4c:6a:
0f:ca:63:70:29:57:73:da:b1:1d:84:6a:43:88:31:fa:07:3d:
46:04:2c:21:a9:61:22:e3:34:03:40:f0:4e:e8:6c:a6:99:f5:
a0:8f:4b:a5:7c:38:1e:d2:e8:52:32:cc:f8:cb:a7:9b:3e:e2:
2d:ee:2c:c8:6a:9c:66:ba:b9:31:ae:c0:37:56:34:52:08:7a:
18:ab:0f:22:95:de:7a:d1:d8:b4:c1:f0:5f:f2:2b:44:55:61:
67:cd:71:f9:a0:3e:20:2e:81:e1:db:94:cc:0d:36:69:ef:75:
e8:ba:97:22:11:df:fe:67:65:c5:77:3b:0d:bb:fd:e4:a6:2b:
7f:cc:32:88:d2:07:13:3e:d9:db:2f:a4:78:8a:1f:df:a4:03:
a7:d2:de:40:43:c9:7c:44:ce:69:4f:80:ed:de:1f:7b:1c:1b:
b4:5f:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:00 2025 by rpki-client