Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: cil/HU+GvJfnjdYHf+b3EFlJjluGCCg5+9RPwkuYhmg=
Subject key identifier: F9:4A:AE:4A:52:AF:EA:96:5C:82:DF:AA:6E:65:B8:C5:F7:78:94:24
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019A71135E4BD2DEBC4EF3948C39E147D5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:26 +0000
Manifest this update: Tue 11 Nov 2025 04:01:26 +0000
Manifest next update: Wed 12 Nov 2025 04:01:26 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: QR6gCb09g4S/H+D1VpJ9WE5rkM43+jqbs02TjACueaM=)
2: d0vd09ijftZxQ36MggmGV19KbF8.roa (hash: qQnSCjOjuDvlDGOH0RwUYDIFq1N35gmrsquQwH69sXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5e:4b:d2:de:bc:4e:f3:94:8c:39:e1:47:d5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Nov 11 04:01:26 2025 GMT
Not After : Nov 12 04:01:26 2025 GMT
Subject: CN=f94aae4a52afea965c82dfaa6e65b8c5f7789424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:17:5c:e7:1b:0e:7c:a3:08:44:11:56:46:
ca:ce:b2:48:26:b9:f0:c7:c4:d4:aa:6e:00:e5:ab:
39:93:df:7d:9a:c4:5c:38:70:d6:0c:bd:e9:ca:37:
dd:c3:f1:41:3e:b3:51:99:d7:26:13:ec:bc:46:88:
7a:3b:48:56:04:7a:22:0a:46:17:37:40:ed:26:b3:
fa:fc:63:8f:37:f0:31:0d:a3:b2:bb:4d:fa:7e:92:
7d:8a:af:13:37:5b:43:1c:c9:51:32:cd:05:82:3e:
b7:74:b4:37:b5:0d:c3:19:68:64:18:83:0e:ca:c2:
45:fb:bd:d5:7d:a2:c5:4e:75:52:f3:89:22:3b:ac:
20:f6:f4:60:d2:a3:ae:06:ac:9b:8a:07:5c:c0:27:
5f:3f:0c:12:dc:c4:7d:84:b1:17:9b:25:27:82:a1:
6a:bf:cf:e8:f9:8b:3a:c3:90:81:00:a7:9a:44:42:
55:0d:7b:a9:13:49:53:71:ab:4b:76:14:21:90:42:
ac:8a:90:d4:ff:5b:4c:83:95:35:35:ca:e2:16:4a:
36:74:3b:3c:21:3f:97:64:27:93:fb:11:f6:28:af:
16:c2:c9:aa:63:a8:fd:06:57:58:0c:7e:62:bb:40:
4c:91:ae:88:2d:d9:50:3a:de:cd:49:43:b1:4e:f1:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:AE:4A:52:AF:EA:96:5C:82:DF:AA:6E:65:B8:C5:F7:78:94:24
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0a:44:70:bd:cf:ff:55:02:59:38:16:dd:d5:62:da:8f:62:
9c:f7:00:46:7a:9d:fd:1d:08:c5:10:c2:31:39:3e:71:08:76:
f8:d8:eb:0d:d8:56:91:87:37:e3:6c:c6:a1:cf:60:7a:f9:6b:
7b:3c:48:41:92:ff:f6:0f:dd:71:2b:61:f6:f3:60:73:1c:da:
94:f9:0c:30:93:99:af:80:df:95:f8:86:0e:9d:92:81:13:82:
13:f2:5a:ef:34:61:30:30:e3:3d:9c:17:64:2e:81:ac:76:05:
b9:b6:4a:19:5f:c6:99:8c:5c:83:e3:5a:cd:c2:e7:4a:11:89:
6e:02:21:34:de:88:36:95:c2:74:14:2a:9c:b5:39:ed:a1:1a:
01:d3:20:d3:93:8f:ea:e9:cf:4a:64:4e:09:23:b2:b5:2b:d4:
2c:ea:95:60:54:86:fd:e1:2a:d5:f2:4a:63:09:be:2e:49:91:
f0:73:cc:7e:3b:08:8d:43:35:ce:0f:16:73:88:c1:ce:12:4a:
50:5c:ca:a1:5e:ff:cf:16:07:e7:64:e8:6c:3f:0c:27:c0:20:
a8:4b:5f:06:9a:02:ba:a6:6f:03:5b:ac:dd:04:ee:31:27:cb:
aa:98:1f:e4:b0:00:98:cd:6b:ff:6e:34:bf:7b:3e:91:93:6b:
3f:3b:cb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:10 2025 by rpki-client