Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: l+vJqdqI/gzDYMphjOeLbcAe5hy78qhPgvt8nn/pTTc=
Subject key identifier: 89:77:BD:97:C8:A5:8A:73:F1:D1:AC:A3:4C:81:72:4C:4F:65:9F:54
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 019A71EED617A943BABE18D4B6A2B6D2F30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: ILMozjsPL3qe5yRU5IUfFkpbuLT/1nfQDucATCIGyKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d6:17:a9:43:ba:be:18:d4:b6:a2:b6:d2:f3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=8977bd97c8a58a73f1d1aca34c81724c4f659f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:a1:5e:c8:b9:1f:29:82:2e:cd:1c:37:d2:
4f:a1:5e:b5:22:10:fd:86:94:c2:02:8a:fb:86:bd:
fe:0c:41:a3:86:2d:ad:41:3d:f1:8c:7b:b5:5e:1f:
d0:fd:bd:62:eb:a2:7a:dd:bc:c9:d5:64:7d:22:5d:
61:2e:99:03:76:51:4b:ee:77:c7:cb:dd:64:a9:06:
b0:46:f0:96:e2:42:f0:f9:e0:4a:08:e8:1d:ff:89:
20:fd:98:1e:02:aa:e5:d1:ef:c4:a5:06:32:2e:18:
43:f6:3d:66:e8:ef:83:3a:42:08:05:5d:7d:68:43:
9c:3e:c3:94:f9:76:d4:97:ba:56:80:5e:19:8f:a0:
72:4d:d5:a9:68:1c:50:9b:c8:f1:bd:f0:d3:52:2d:
2a:3a:85:32:33:2b:af:30:1e:ac:f6:e6:fd:da:b3:
19:9a:b8:43:54:88:3b:ce:43:8c:6b:84:ee:b9:7d:
e9:1f:20:54:89:84:1b:78:5e:22:da:95:c9:b1:1c:
b0:0f:eb:14:b0:f4:7b:10:69:56:e6:86:85:09:06:
29:e7:b7:89:95:d0:0e:77:11:78:68:06:a6:5e:fc:
7b:f7:fb:41:e1:02:29:c2:b5:df:f0:29:07:6d:72:
a0:0e:09:23:a6:74:68:56:e9:20:b8:63:61:85:ab:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:77:BD:97:C8:A5:8A:73:F1:D1:AC:A3:4C:81:72:4C:4F:65:9F:54
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:b0:17:e2:99:a0:c4:f0:c4:b1:87:86:a0:ed:0c:fb:e1:
7f:f7:4f:e6:00:98:df:40:92:15:ab:dc:a2:04:78:7f:76:a1:
fc:22:a0:29:3e:88:50:a3:52:dd:d5:68:ea:4f:d0:65:9d:c8:
54:8a:2b:76:ae:b7:97:92:11:9a:57:49:b4:77:4d:38:43:37:
77:2f:37:ab:e0:51:c0:cd:5a:5a:2d:56:48:cc:7d:38:2b:ce:
c4:ff:7e:eb:6c:cd:3d:ef:df:b5:6e:c7:9a:ba:13:f2:2a:67:
59:2e:a5:1e:b7:a0:7d:7e:2d:31:7e:36:1b:aa:0d:cb:f9:e8:
2c:18:f2:66:83:14:95:06:a3:13:1c:8b:87:7a:7a:a8:15:6f:
24:ba:b2:c4:c0:ba:2e:7c:29:88:20:98:4c:96:6c:3a:86:a5:
e4:9e:f8:3d:64:72:66:fc:7b:f0:d0:2f:52:84:51:06:4d:4d:
63:73:17:8e:9b:c2:d5:8e:ac:16:9c:ff:2b:00:d0:54:9e:52:
83:04:0f:ef:d8:7a:e2:73:b5:b3:3c:f9:02:31:d7:a7:08:76:
f5:5a:a9:59:d8:4f:c5:d5:9a:ea:35:5e:0c:03:62:04:90:dd:
e2:1d:c7:5a:7d:3a:47:9d:89:77:d9:45:07:8d:ed:6a:93:6e:
47:ca:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:27 2025 by rpki-client