Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: CHyJ0oq2idOF10Kija7st9PVjadPXfI6aIxskb4XWCQ=
Subject key identifier: A3:7E:F1:40:56:74:FE:B6:9F:8F:CC:8D:D7:89:89:CA:30:8C:4D:AE
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 019A2FA04689E1D92D2206F5EDC6EE7606E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 043C
Signing time: Wed 29 Oct 2025 11:00:24 +0000
Manifest this update: Wed 29 Oct 2025 11:00:24 +0000
Manifest next update: Thu 30 Oct 2025 11:00:24 +0000
Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: /cyFgwMhc/AgtdyPTeIxsv8Kvk7jj1fOp8q0wVB25lU=)
2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:a0:46:89:e1:d9:2d:22:06:f5:ed:c6:ee:76:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Oct 29 11:00:24 2025 GMT
Not After : Oct 30 11:00:24 2025 GMT
Subject: CN=a37ef1405674feb69f8fcc8dd78989ca308c4dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:2c:0a:20:2c:72:0d:0c:3e:1c:6d:77:90:
05:e9:d7:b8:aa:a3:91:3a:52:55:10:8c:83:6f:88:
fc:ef:c9:8a:91:94:f4:26:41:55:e9:29:b5:79:e0:
b2:e9:a4:77:67:6b:ec:86:8e:e3:6b:d7:e6:79:16:
28:98:d9:ad:8b:e3:c2:0a:11:3a:af:f7:89:5a:3b:
26:41:73:45:06:58:d9:54:3e:9b:a9:9b:9e:66:58:
3a:ed:49:81:5d:e0:b8:00:8c:b7:d2:7e:e4:c0:de:
2b:5d:f2:26:1e:33:d5:41:01:67:3d:4e:27:b6:a5:
6d:94:6b:57:20:39:b5:86:a7:96:23:4e:0f:0c:a8:
4f:13:ca:c8:f8:c2:e0:8b:00:66:4c:3b:a9:89:85:
d6:9f:43:4e:e9:35:61:54:80:b5:7f:de:af:50:10:
62:72:3d:5e:9c:ae:3e:af:74:43:72:f0:e1:16:f7:
80:40:8c:e3:e2:0c:6a:53:1c:85:5b:ed:bf:ad:34:
d0:7d:c1:e5:58:5d:42:1e:24:c7:a3:ea:b0:92:0c:
3b:cc:04:09:56:60:53:ef:0b:af:f1:8d:e1:dc:7f:
20:5c:5e:1d:4f:c5:e6:40:2f:71:85:08:92:fb:e3:
72:9f:b7:fb:99:60:97:6e:88:e8:53:33:63:7e:24:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7E:F1:40:56:74:FE:B6:9F:8F:CC:8D:D7:89:89:CA:30:8C:4D:AE
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3c:91:58:bf:c7:37:c2:5c:4f:23:f6:c5:62:fa:d5:76:e9:
15:c6:42:89:c6:3f:ca:80:41:c4:05:59:5b:88:b7:04:21:04:
88:ef:e3:8e:f2:a5:c0:fa:f7:ca:bb:93:a4:6c:0f:09:1b:74:
4b:c5:62:88:54:a5:b9:07:a6:fc:3d:fe:08:bb:b7:cc:5f:2e:
d3:2a:0b:d4:5b:77:43:e9:67:6f:30:94:c3:5a:03:82:0e:ef:
f2:29:81:63:09:9f:2f:5c:76:f3:bc:8f:93:a3:8d:5f:ac:37:
66:12:ad:59:24:6e:0c:26:14:83:68:6c:2f:df:da:d5:18:e2:
20:b0:10:62:fd:f2:09:36:d2:21:a9:f1:43:f0:75:3e:87:a9:
38:3a:6e:ab:05:e6:e7:f0:ea:79:a9:b6:01:0e:13:87:c1:81:
ec:85:79:cc:79:51:32:62:fc:6d:b2:8a:5e:94:b7:22:e6:70:
72:d9:f7:a3:a9:aa:5c:32:48:de:47:e0:d9:43:85:4e:70:a7:
cc:5b:d0:0c:c0:37:c4:c1:1b:25:0b:f6:4c:ee:98:96:23:6d:
67:2e:31:d4:ee:5d:cd:b0:99:2a:f9:14:4b:df:54:90:32:cb:
22:69:1c:9b:f3:24:79:b0:ce:09:81:92:78:cd:b8:5a:eb:b7:
92:96:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 21:02:37 2025 by rpki-client