Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: hM6g5rIacSRP9Qj6iT8KP4SdKfaqYJbd+vnazdtFlI4=
Subject key identifier: 07:18:04:3E:6B:16:70:1C:81:AA:2B:EB:10:91:DC:70:1F:4F:B6:D6
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 019A25F86698878B8E72E60702BF61061139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1346
Signing time: Mon 27 Oct 2025 14:00:27 +0000
Manifest this update: Mon 27 Oct 2025 14:00:27 +0000
Manifest next update: Tue 28 Oct 2025 14:00:27 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: Dj2+apjacdu0VbUBhLSI7eloc3wmGBo9KzirTDrVoeM=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:66:98:87:8b:8e:72:e6:07:02:bf:61:06:11:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Oct 27 14:00:27 2025 GMT
Not After : Oct 28 14:00:27 2025 GMT
Subject: CN=0718043e6b16701c81aa2beb1091dc701f4fb6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:ed:7d:e8:d6:d4:95:58:3e:16:43:e9:26:
95:5c:b9:b3:10:fd:85:a7:2e:d3:7b:a8:ff:e4:42:
3d:1d:f6:2a:54:74:0e:9a:d9:94:46:a7:89:4d:a1:
a8:79:7c:82:f6:bd:0d:00:d1:b6:9c:8f:00:03:4d:
47:7c:49:07:a2:3b:08:b4:8b:cb:c4:b6:c8:1c:14:
7a:f9:0c:f7:99:44:83:07:99:4a:98:f3:90:b4:bb:
89:cb:54:b2:ba:9a:c0:6b:b3:be:6a:c8:77:10:23:
be:5a:db:22:e8:4d:46:26:f0:5d:66:15:67:8d:b9:
08:47:c2:6c:ef:3f:de:bd:ac:0c:77:5c:5d:ee:9d:
ab:d9:56:5f:b4:98:7a:91:f4:4c:8b:42:86:4b:4b:
57:09:4b:d4:6e:3d:41:12:23:c3:43:03:2e:21:f3:
ef:29:cf:3f:00:c9:ea:ed:99:65:94:bc:d9:fc:a3:
fd:2d:90:6f:c9:13:92:72:51:aa:52:8b:01:f6:af:
f5:ea:a0:8d:98:30:ef:06:b8:77:49:7b:40:64:47:
02:8e:86:fd:e2:19:0e:b0:33:19:01:e9:b7:36:20:
8e:ae:82:56:27:a5:65:61:f1:8d:ad:e2:d2:06:98:
8a:51:4b:54:0f:d9:8e:28:86:18:cb:49:f9:45:9d:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:18:04:3E:6B:16:70:1C:81:AA:2B:EB:10:91:DC:70:1F:4F:B6:D6
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:dd:ff:8e:25:d5:84:c1:76:7c:6d:4d:dd:c9:ee:4c:43:40:
f3:e7:7f:b7:ca:37:ec:88:58:9f:bf:9b:38:67:52:fb:d8:22:
0f:91:67:e1:2c:dd:7a:a4:d5:cf:73:5d:ff:02:a2:31:9e:26:
02:6d:2b:88:8a:44:37:16:99:fa:04:5f:95:ec:f8:1f:97:43:
7e:00:7b:f9:3d:54:3c:ee:f8:2d:de:81:1c:68:1c:7d:ff:b2:
03:52:77:42:8f:7c:91:21:97:71:bb:5d:f7:b5:0c:14:6e:3a:
93:28:cf:93:82:10:81:9f:e2:3e:a9:78:99:df:7c:d6:45:cd:
1a:f0:d8:e8:51:3d:2d:d5:21:21:81:bc:9d:c2:38:51:c3:39:
4e:de:ec:fb:69:43:e3:f9:cd:2f:1c:b4:6e:3f:3c:95:9e:7a:
14:89:0f:67:7f:65:8a:26:fa:de:6f:43:34:53:3c:89:0d:76:
b9:a3:05:da:29:1e:3d:9f:ee:21:39:fa:ab:e4:21:a8:8b:78:
db:f2:1f:7c:ff:e0:00:24:0f:c4:a6:3d:69:6a:bd:aa:71:4d:
76:64:03:23:24:2f:ec:b6:ac:59:ad:87:19:0b:d2:d4:99:d0:
74:a2:64:e0:58:cb:d5:38:7c:24:14:86:e3:14:7d:08:a0:e7:
27:9d:08:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:28:01 2025 by rpki-client