Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: eZ1PwYNqHZuEiAAmoq92eITva4cdbDlJOOuUOEx6ryM=
Subject key identifier: 4E:9E:16:1A:31:EE:A8:6A:11:EA:1C:87:33:B8:19:2E:3E:A5:77:73
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 019A70DC1745CC63203E0C4EA5ACCE9D3389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0A33
Signing time: Tue 11 Nov 2025 03:01:03 +0000
Manifest this update: Tue 11 Nov 2025 03:01:03 +0000
Manifest next update: Wed 12 Nov 2025 03:01:03 +0000
Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: J2Ivzp2M0tP5nTEjzJJ1XGYrNLJpsezm4ZcWU2B33VA=)
2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:17:45:cc:63:20:3e:0c:4e:a5:ac:ce:9d:33:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Nov 11 03:01:03 2025 GMT
Not After : Nov 12 03:01:03 2025 GMT
Subject: CN=4e9e161a31eea86a11ea1c8733b8192e3ea57773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:c9:bd:c2:78:87:77:ed:e1:9f:2a:e0:f5:
6b:da:36:99:f0:ae:19:1a:8e:ea:79:0f:ae:14:22:
c8:25:31:1b:12:67:a7:6c:94:4a:10:86:c3:17:52:
30:e5:22:98:68:88:5a:da:07:b1:92:d8:31:ce:69:
95:15:95:fa:e8:42:ca:68:cd:00:ac:8c:b3:13:e7:
93:a5:bd:16:b7:dc:54:b0:17:d5:cd:0b:92:6d:78:
3f:86:42:7a:3f:e4:81:c0:2e:7a:de:d6:53:af:92:
20:c5:dd:0e:3f:5e:5e:8e:e5:08:31:91:3b:e9:a4:
20:24:6e:ce:5c:a7:6d:8a:00:15:4d:7b:c1:22:81:
a6:62:14:93:5f:9f:86:b1:dc:35:77:62:2d:d7:59:
70:0d:9e:03:ed:d7:d3:b3:80:86:0d:a2:d0:11:da:
11:8e:20:e3:31:d0:ab:56:3d:fc:aa:c6:47:d1:2a:
53:d2:f7:c6:e7:13:86:16:6a:a4:d8:ec:ea:84:f2:
b4:7e:2f:ac:90:c1:34:98:3c:69:1f:7f:f1:be:18:
3c:b8:50:e7:19:1b:4b:e8:9f:63:a4:03:7b:1c:af:
93:27:f0:b8:c2:73:aa:10:26:f6:70:22:03:49:50:
36:c3:07:0e:1f:6e:de:c0:ea:41:98:eb:30:c8:d7:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:16:1A:31:EE:A8:6A:11:EA:1C:87:33:B8:19:2E:3E:A5:77:73
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d6:0b:bf:75:16:16:58:92:8e:37:2e:b4:5d:3a:6e:36:96:
e5:e4:f8:6f:30:32:22:bc:e4:9b:19:ac:19:f9:82:00:b0:4b:
78:54:c8:29:c1:49:b8:49:d8:7e:e9:ee:9d:42:ba:79:29:a4:
e8:9f:e9:0b:a0:50:9f:c2:d1:1a:96:5d:39:94:5e:cc:d3:f8:
8d:37:f2:27:c5:29:bd:4f:b9:da:b3:cf:7f:d4:4b:d9:53:46:
b0:84:b6:b7:96:24:73:60:ff:ec:b0:30:39:e3:d1:60:ec:d2:
f0:30:a0:c1:a3:6a:a9:b8:59:16:54:53:8f:76:f5:37:c5:db:
a9:a8:25:16:57:20:7c:e5:d6:a1:ef:4d:de:28:00:44:14:5e:
db:b0:11:da:ec:8d:3c:6d:68:2c:eb:0f:1c:1c:83:e7:7e:11:
00:9f:a1:f1:59:d0:27:b8:59:ef:12:67:32:66:ca:80:7e:b8:
2e:98:b5:97:11:ee:23:dd:6a:2d:71:71:cd:d7:c3:6b:3d:b1:
57:8c:44:fd:98:e6:26:0c:ee:9d:7f:e3:20:a5:ee:48:f3:55:
14:bc:80:80:53:00:95:01:4a:c9:71:71:87:e7:47:b5:fa:58:
87:c3:74:70:b3:48:69:3e:58:8c:d9:9f:8b:d6:1d:bf:f4:e3:
00:fd:60:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:29 2025 by rpki-client