Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier: cCovIuTfwwBp2Z0OJiAAxwBj6yVcezep2HDxVqMAGJ8=
Subject key identifier: 66:07:B2:BA:A3:F6:F5:3B:D1:50:4D:20:26:B1:9B:48:5C:B6:2C:04
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial: 019A71B8DCF2C7CA9CB8138D5BF79A553346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number: 0DA6
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: /70qnDlLlTisjl6zU8EuQLlHsw4n+JzAYm9JF4aAuvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:dc:f2:c7:ca:9c:b8:13:8d:5b:f7:9a:55:33:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=6607b2baa3f6f53bd1504d2026b19b485cb62c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:d1:02:18:a6:b2:6b:ad:0c:ae:b5:05:89:
1f:93:a2:b8:e7:ae:f5:cd:2b:38:bc:54:0c:a4:f8:
86:29:9a:31:ff:f9:a3:e8:f8:b1:71:d4:25:30:22:
4a:33:d5:a9:b9:f7:5b:57:99:5f:f8:62:c1:7c:6e:
34:8b:35:01:d5:45:94:d2:fd:99:9a:b5:e4:7e:fa:
43:7f:e2:62:6c:d3:b2:1c:95:40:2b:9b:4a:e6:dd:
44:fa:a7:77:e2:55:92:cb:bd:aa:56:20:a3:06:73:
a9:d5:43:8c:1d:f5:48:1f:d8:ed:b4:e5:69:f8:e0:
c0:19:1c:bb:31:8f:9a:84:56:84:4b:ff:39:c9:32:
d4:c5:12:31:15:f7:5d:2c:3a:25:89:be:1d:9b:bd:
a1:4f:cc:fb:14:4f:9b:69:ae:84:11:52:c5:e1:7a:
07:67:ae:5e:d1:9d:8d:24:0d:96:da:70:46:e7:85:
b3:66:ce:ef:43:2a:34:88:89:a3:c4:f7:eb:21:12:
fe:f6:cf:ef:46:ff:82:0e:a1:9c:01:0f:25:1f:9b:
08:42:fb:27:fe:ec:85:a7:19:11:46:f4:cf:f5:94:
a1:1d:99:a3:24:23:d9:eb:99:85:89:c8:74:8a:1e:
8b:e9:d7:cf:a3:20:88:87:dd:8f:2a:7e:9d:ec:80:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:B2:BA:A3:F6:F5:3B:D1:50:4D:20:26:B1:9B:48:5C:B6:2C:04
X509v3 Authority Key Identifier:
keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0d:be:25:49:66:d4:ca:be:0b:66:f7:67:48:b8:30:66:e3:
6e:38:3b:5e:1a:40:50:43:ac:c6:e7:78:3f:fa:d6:26:e8:95:
9d:5a:87:57:74:53:a5:ac:d6:50:46:fa:49:73:3b:69:aa:b1:
f0:f5:59:bf:c1:d7:34:a6:85:e8:fb:47:d0:05:31:e3:8f:05:
bc:1d:2a:28:8f:44:f6:f1:d0:ec:f5:25:2e:9c:eb:b7:a2:19:
29:ec:a9:b8:fc:66:50:00:15:f3:a2:5e:9c:93:5a:49:1a:9f:
5c:87:89:5c:0a:d1:61:8a:ff:82:e3:0e:77:48:ea:f5:b9:23:
e0:09:d8:9d:7f:5e:01:62:8b:1c:cf:1f:b6:3a:be:46:84:72:
d4:5c:e0:1c:fa:a4:7f:d6:75:4c:ed:b9:ff:04:e3:77:6c:90:
41:fc:8d:80:e9:40:c2:6c:24:88:05:ee:0b:4e:c2:e5:48:b6:
91:22:8c:a9:98:27:45:b8:f8:80:bc:b5:e4:af:e7:cb:68:07:
9b:89:aa:12:1f:10:48:8a:ec:14:33:50:c5:43:62:2a:63:31:
1d:2b:e0:13:d5:ba:3e:d9:4d:8a:5d:99:e3:c0:4b:81:85:5c:
2d:39:17:34:a7:f3:08:69:7a:2c:76:b2:f0:ef:be:80:38:9e:
ed:dd:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:19 2025 by rpki-client