Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 1lUc41FCSHSwsLCZc8lgMLDJHp3KXxPQt4PC+0x5BqI=
Subject key identifier: 90:DD:58:E2:8D:DF:0C:73:CD:DA:4C:D7:F7:BD:7C:EA:7B:5C:4D:87
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019A71B7E05C48DA09924ECCF773042AB7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0CAB
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: d4pAeMOiSWpkTRzaTUoGbT8i+OYe13eq054KJtARRyI=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e0:5c:48:da:09:92:4e:cc:f7:73:04:2a:b7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=90dd58e28ddf0c73cdda4cd7f7bd7cea7b5c4d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:f1:13:2c:c6:23:7b:44:a7:43:81:8f:e2:
10:88:00:02:2f:5a:d6:9c:f2:36:bb:6c:12:4e:89:
89:63:f4:de:ac:f4:6f:49:c3:6e:72:a1:9b:1f:0a:
17:e4:0a:57:93:00:1f:25:09:a1:69:19:ae:30:17:
24:a3:d0:79:c8:09:b9:b2:43:d0:a7:7f:1b:09:f6:
cc:df:fd:f5:fa:24:95:fe:f1:3b:26:56:75:e2:33:
c0:68:f0:21:ca:16:45:9d:9a:20:e6:65:84:94:61:
93:b7:e0:55:d1:9f:a7:c4:d8:84:41:e0:fa:e2:f2:
5c:da:29:c1:43:cc:cb:23:18:c5:ea:44:af:64:46:
27:02:0a:e3:9c:cc:3d:aa:62:64:f1:06:fe:02:60:
70:3c:88:33:c9:8a:5a:a9:d5:6d:f2:a3:72:61:9b:
ee:14:d3:b4:d7:fc:38:fe:14:79:b8:48:84:83:69:
a7:32:82:cf:5f:38:0e:b8:fb:e2:a1:52:52:e8:29:
d5:fc:bc:b9:fc:fa:0f:19:fb:be:73:5d:e3:54:c0:
47:54:30:35:7c:ce:b8:a4:63:28:38:2b:a6:3c:b9:
a1:3b:a0:cb:e0:d8:77:a8:e4:51:56:58:f4:40:6f:
3b:1f:e3:00:78:3e:96:a8:9c:f6:90:f2:88:9d:68:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DD:58:E2:8D:DF:0C:73:CD:DA:4C:D7:F7:BD:7C:EA:7B:5C:4D:87
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:3e:f2:c0:6b:22:24:1b:ab:3e:5f:d6:f0:f9:30:11:f9:
87:44:53:ba:6d:46:f2:66:9d:2e:1b:30:df:79:80:89:39:c7:
bd:84:84:cc:4f:90:91:28:a1:c7:15:53:f3:18:98:e7:d5:49:
da:58:f0:9a:10:ff:c4:1d:42:75:0e:b8:7b:ec:dc:d8:9e:9a:
8b:52:80:e5:79:f3:d1:c4:ec:e0:61:2a:28:1a:9e:ff:4f:62:
2b:22:af:e3:07:8d:83:4e:28:05:08:a5:1d:6c:4c:b5:29:3e:
87:42:c6:ca:7e:c8:14:41:53:d2:17:b3:b2:09:30:9d:fe:07:
b7:52:71:73:3c:8a:50:38:4d:43:68:c0:7a:95:fb:b4:5a:b0:
51:7c:1d:c7:58:5e:b4:6f:3f:bb:16:f9:f0:93:e6:3f:c3:11:
00:6d:df:50:9f:ae:36:ed:c9:64:87:b2:09:f2:b4:f2:98:ba:
b0:d7:a2:71:b0:81:dd:8c:b9:85:5a:0a:f1:14:5b:e5:bb:ac:
09:2d:7d:a8:aa:38:b2:2a:70:47:8d:82:e6:55:84:3d:ca:f2:
62:63:69:d8:66:ae:21:a7:3d:9e:69:e2:c6:9b:5f:91:dc:89:
a5:5a:8a:7b:c1:72:bd:85:2c:20:3a:a4:d6:3d:b8:7f:7d:e2:
36:d0:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:45 2025 by rpki-client