Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: Dv+G7MYM3eNxMVZGKlE8vptEwe3wXzpt5nDhOjjrouA=
Subject key identifier: 89:BB:15:A6:8A:33:C9:B0:E5:19:FD:08:04:64:1C:1B:0F:DC:BE:86
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 019A70DC15BBEA78F58FDE2324DC5DB8E25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 05E3
Signing time: Tue 11 Nov 2025 03:01:02 +0000
Manifest this update: Tue 11 Nov 2025 03:01:02 +0000
Manifest next update: Wed 12 Nov 2025 03:01:02 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: 5aPa4zPdFHVS3XLK53cTXL0ALzSbnuIFCMJuf72oayU=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:15:bb:ea:78:f5:8f:de:23:24:dc:5d:b8:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Nov 11 03:01:02 2025 GMT
Not After : Nov 12 03:01:02 2025 GMT
Subject: CN=89bb15a68a33c9b0e519fd0804641c1b0fdcbe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:cf:79:32:72:bf:2d:02:22:59:59:ff:cb:
a6:8e:de:36:7e:69:0a:51:43:c6:42:83:04:01:61:
0b:3b:ff:87:8a:e1:02:cd:4f:aa:f1:45:ba:27:07:
4e:0f:98:ed:a9:62:ed:4c:54:fa:9e:c3:55:6f:2c:
24:2a:e6:aa:d8:24:f3:c3:7d:c0:e7:76:46:64:42:
52:1d:04:32:a8:56:d0:35:f6:7c:b9:27:b4:13:3d:
2e:b3:fd:82:ff:87:df:f4:fe:46:8b:4a:80:39:cf:
cf:de:e4:70:cb:11:d9:00:0f:9c:86:9c:05:8e:e9:
40:18:c7:47:af:9f:41:5d:9e:d9:6e:4e:82:38:af:
b5:c5:c5:5e:5a:0a:3d:a9:2f:20:3c:99:6e:25:27:
67:60:07:8b:f3:97:7a:1e:98:5d:f2:77:90:1f:09:
b1:80:ac:47:70:df:4d:36:cb:31:16:d1:0a:c8:89:
b8:d3:8f:6b:bd:f9:9c:3b:9f:c0:b9:16:a3:95:cc:
90:87:ba:94:f6:0e:63:ba:75:c0:17:95:16:ce:0c:
2c:78:b0:f2:57:27:0d:a8:0e:d5:dc:48:63:e2:c1:
1e:8b:98:79:4a:f4:1d:c5:fb:45:96:11:1d:84:cb:
bb:d9:8e:b6:f7:ba:f5:d5:a9:2d:43:75:a7:91:a8:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:15:A6:8A:33:C9:B0:E5:19:FD:08:04:64:1C:1B:0F:DC:BE:86
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6a:f6:f4:8d:35:42:73:6e:af:1b:d4:ad:89:27:f7:5a:71:
5c:a4:a1:b8:3f:85:cf:65:78:8b:00:ec:34:14:ae:1a:db:4a:
9b:07:85:85:60:d0:44:54:3b:71:80:9c:f8:a7:ee:45:39:b2:
65:92:55:d6:ea:6b:46:b6:cc:2a:c1:f7:d6:57:d4:f5:52:93:
db:ae:c9:12:d8:be:ba:ac:99:00:62:0f:14:c2:74:87:67:62:
17:4a:79:76:bc:d0:f6:c6:68:d2:fc:da:c5:d5:59:bf:c8:10:
fd:e5:15:b9:f9:e9:09:58:5c:7d:5b:6e:e9:6f:0a:4e:49:96:
df:aa:94:e5:91:09:14:de:65:1a:63:fa:ce:a4:e0:87:28:b6:
65:0f:66:62:eb:be:30:0f:b4:83:45:41:70:b3:52:89:f3:ca:
ce:c1:90:fa:54:8e:6d:f7:69:4e:11:6f:02:8a:fc:2a:ee:d8:
be:89:a5:06:4f:95:13:be:a9:66:49:50:70:13:e7:6e:2c:d4:
1f:31:ba:f7:bb:f9:7d:c5:35:bc:9a:62:2f:c7:e4:8e:aa:e4:
4f:81:6f:3e:45:4a:47:05:bd:4a:44:2d:ab:6b:a3:96:68:5b:
4f:c4:3a:c9:44:92:46:39:23:d9:8e:bf:5c:68:7a:64:67:6f:
af:12:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:21 2025 by rpki-client