Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: 94FkBcQ46z8ZIuI8sUjlkTRN47BSs8H/niRhh/7JgfY=
Subject key identifier: 76:AC:FD:B9:EA:3B:95:17:27:6C:C3:D9:0B:C2:96:9E:35:5F:0F:87
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 019A15E0B8142375848E08F51EDD4E633943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 14AE
Signing time: Fri 24 Oct 2025 11:00:39 +0000
Manifest this update: Fri 24 Oct 2025 11:00:39 +0000
Manifest next update: Sat 25 Oct 2025 11:00:39 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: W9LSduhohVJ2Wh+wjAiMc9NT7CRBDqAKwPMVbjoo42s=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:b8:14:23:75:84:8e:08:f5:1e:dd:4e:63:39:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Oct 24 11:00:39 2025 GMT
Not After : Oct 25 11:00:39 2025 GMT
Subject: CN=76acfdb9ea3b9517276cc3d90bc2969e355f0f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:8d:12:c7:58:da:2b:b8:62:2f:39:49:03:
d4:11:e3:a3:8c:0c:10:8a:f8:e7:00:8a:73:3f:2f:
ee:28:10:29:d7:72:b5:f5:d9:aa:16:f4:6d:64:c4:
7d:eb:ce:0c:76:12:87:e6:17:21:02:f3:df:d5:23:
53:73:35:52:db:f8:1f:73:22:ca:e0:cc:73:1b:ff:
94:6b:0a:97:a9:1a:4c:53:c4:de:ef:db:46:48:6f:
5a:48:b3:0c:fd:0a:36:49:33:73:72:fd:c8:ee:f9:
b5:33:83:fd:a9:51:54:9e:4b:90:91:5b:5b:74:08:
d4:e1:27:6b:f1:69:6d:21:fd:90:67:88:20:d1:f7:
6a:ed:e4:57:3a:d3:38:54:7e:84:fa:fd:9e:2b:ce:
ec:55:d7:a2:b8:4e:cd:63:a5:a2:b6:80:6c:5e:56:
68:5f:b9:48:29:df:f2:9b:36:c1:42:7d:0e:2f:52:
af:53:6a:b8:d3:fe:6a:67:75:0c:b4:f4:bb:1c:7a:
c1:05:05:8e:0f:13:03:06:fc:78:cb:83:dd:d0:c5:
5b:42:30:06:3f:b2:98:d8:e5:c7:7a:9e:8e:4e:b7:
21:fc:54:7d:72:5c:1f:51:2c:01:17:01:89:6d:68:
24:ba:dc:d7:a2:d2:c6:14:7f:d4:ad:bd:a2:03:56:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AC:FD:B9:EA:3B:95:17:27:6C:C3:D9:0B:C2:96:9E:35:5F:0F:87
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:17:a2:14:6a:ab:52:0a:ec:11:03:cc:7f:b9:56:66:b2:19:
08:39:3d:94:1d:05:1c:75:95:79:75:af:e6:2b:a1:8c:da:b8:
9a:b4:a5:ba:10:83:99:21:9d:38:5c:bf:61:a5:de:a3:44:ce:
36:8b:ce:1e:8b:0a:6d:57:0f:79:45:40:53:7d:77:43:6a:b2:
d4:68:7d:69:07:74:81:c7:51:57:45:5c:13:d2:a5:3c:72:7a:
f9:cd:93:f9:17:e0:3f:d5:2a:b9:5b:ac:40:96:9b:4b:0b:bb:
b5:e9:89:1d:e1:c5:aa:4d:79:72:a8:95:34:aa:36:c9:48:e7:
6b:38:6b:bb:29:e9:a7:3f:43:da:ea:8b:18:46:e8:e1:24:f1:
38:d3:85:60:73:d7:b6:6f:64:ce:76:98:68:f8:be:a1:26:8f:
1a:b8:9a:a1:de:23:42:8d:8b:cc:24:d9:38:eb:de:a9:7d:75:
33:13:9b:b8:3d:f4:3a:3a:88:2a:07:08:ad:f4:cd:6f:7f:74:
a5:0b:dd:a9:a2:7e:82:56:c1:44:3a:a4:cb:d8:a4:cf:dc:d7:
7f:24:77:c4:6e:ca:1a:37:42:45:45:b2:48:c0:d5:fa:9c:50:
de:c0:a7:86:47:48:72:9b:a1:ee:01:12:b5:d7:61:91:a5:27:
a2:3a:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 16:50:32 2025 by rpki-client