Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: zuKHI2nZ13zaWSmagg7lvuiGwQ8g6C1zFz114PS9NZ4=
Subject key identifier: E3:52:D9:70:15:23:EE:3D:BE:A2:63:6C:34:38:4B:ED:36:5A:F9:A0
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 019A71B821234A875A223BC0AD7C781C081D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 091C
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: PnctU2OH/rx+UehUigfiW+CsJyd31VnhHiZObIXXhB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:21:23:4a:87:5a:22:3b:c0:ad:7c:78:1c:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=e352d9701523ee3dbea2636c34384bed365af9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:d5:63:5d:a6:a5:73:55:bb:a5:62:a1:81:
6d:50:fa:a0:0f:44:e5:11:5e:d4:45:32:e2:46:35:
52:ac:cb:51:d6:8d:90:b5:af:06:8b:77:4c:c1:4f:
0f:95:5e:6f:08:f9:16:b5:fa:48:d5:0b:8f:33:03:
9d:82:0f:97:d6:3f:71:a8:6f:30:fe:89:ea:a3:3f:
06:99:63:5d:9a:c8:62:75:4f:2d:22:66:a8:f0:06:
ff:1c:f9:fe:13:9a:60:fe:e6:6f:b5:9e:5d:dd:21:
98:b2:a0:87:a5:fc:98:c2:aa:aa:4c:b1:d7:82:90:
af:bc:6b:65:b7:fd:39:e3:79:28:d9:d3:55:d0:28:
ee:36:76:61:17:96:17:fe:ce:e9:34:8d:44:e4:d4:
97:fd:21:4c:73:79:4b:33:ac:01:52:e6:bf:47:39:
d7:99:5b:6e:56:29:00:e2:03:50:7b:01:e4:39:f0:
c5:71:88:1f:44:4b:96:72:1f:bb:90:82:41:84:36:
84:c8:98:19:8f:57:1c:70:cd:4a:14:92:37:3a:6b:
ef:85:28:c8:21:f2:de:34:b6:5b:e1:30:55:1a:e1:
5c:7d:7f:37:ec:b0:91:b3:15:16:27:fd:15:9d:cd:
dd:24:3b:6a:0c:67:b1:0b:fd:eb:64:55:81:b0:c9:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:52:D9:70:15:23:EE:3D:BE:A2:63:6C:34:38:4B:ED:36:5A:F9:A0
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:60:5a:fd:13:9e:af:39:f3:ae:ff:90:0f:b2:b8:3f:d5:ab:
66:35:f9:58:5e:9a:c1:69:bb:a1:75:37:62:8c:d7:2b:2a:0f:
ca:ee:d7:e5:7b:ca:64:b0:c1:52:08:18:74:e3:81:41:b0:d7:
bf:09:11:17:df:39:9f:8d:14:e5:80:45:61:44:73:10:23:b9:
42:36:b5:ca:da:53:c8:a4:df:cc:04:66:ce:bb:55:04:01:ae:
1b:71:b0:70:d3:6c:35:34:62:c6:85:b1:70:18:7b:7c:fc:2b:
99:e9:2d:f2:93:85:15:c4:4a:ff:41:a0:6b:5e:c3:cc:55:ba:
d5:f2:79:14:cd:eb:96:d4:9b:d1:14:90:bb:a1:03:2e:b7:fc:
98:1a:3e:21:41:d7:81:1b:16:f8:7f:9c:3f:09:b0:13:96:2a:
29:7f:38:3c:e4:31:ff:29:01:38:d8:84:bc:3f:a1:a0:53:13:
18:c4:29:50:95:0c:07:92:01:e2:6c:d3:66:84:21:a4:dc:c7:
de:0f:af:49:d0:e1:f2:85:ec:4e:15:61:6f:47:17:ff:55:00:
1a:4b:98:51:7a:4e:81:73:20:cc:4e:dd:09:d2:fe:6d:ff:92:
b1:b6:66:e7:ef:df:8b:90:6d:4f:0b:71:c1:85:d3:cd:e8:69:
7d:20:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:58 2025 by rpki-client