Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: sDH5M+jwM9xJZjTRwgEZwhXJ575swVAwjs3R0s975G4=
Subject key identifier: 5A:8C:82:07:D1:E1:E8:BD:00:51:F3:19:CE:7E:CB:74:63:D1:12:D2
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019A7112EC7AF9DFE112DB37C0B9261430D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 065D
Signing time: Tue 11 Nov 2025 04:00:56 +0000
Manifest this update: Tue 11 Nov 2025 04:00:56 +0000
Manifest next update: Wed 12 Nov 2025 04:00:56 +0000
Files and hashes: 1: UxDhbbGiLqhG0cjqvQTDDPyodT8.roa (hash: /jH4fHuxOiDmcdoWH8bkN08eFhE6HPAkApmfAQgC6ts=)
2: iV5FZuMGLlixAMw0jkwzk7P8BYc.roa (hash: C9ucIF2yO9TSTl7qwXNqjkxkNJQX9XDq0UvZWNrPjQU=)
3: inOwk0rr2hBBrYALexzKTS-HXaE.roa (hash: BGYPbxUWdEW8PUtIUA1rv4TAk1J/uLjxsHUKD6zhw0w=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: MyBaoy8ML0DAqomORQc148lRQQfOL4/xb6O7GsNjR7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ec:7a:f9:df:e1:12:db:37:c0:b9:26:14:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Nov 11 04:00:56 2025 GMT
Not After : Nov 12 04:00:56 2025 GMT
Subject: CN=5a8c8207d1e1e8bd0051f319ce7ecb7463d112d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:04:a2:a7:a4:00:3f:d2:42:e1:96:15:45:
0a:3b:ab:d8:ef:91:66:e0:eb:a6:18:d3:bd:a1:63:
e9:84:e7:72:4d:fd:1c:1f:39:e8:9a:7d:e5:0f:85:
aa:68:cf:3d:22:e7:60:b2:43:8f:9a:8f:50:72:93:
dd:49:55:9c:5b:96:29:24:b1:43:86:e4:23:f1:cc:
21:0b:0e:dc:04:f6:4f:bf:07:d2:ee:05:cb:84:3a:
e8:07:07:f3:86:dd:a9:47:63:bc:08:32:d2:63:b6:
69:42:e1:bc:5b:bd:a4:6e:89:9f:7a:f3:f2:7d:9d:
92:92:ff:32:4a:86:97:da:42:16:47:ff:7d:f7:cd:
52:6c:c5:a6:ea:83:43:07:20:97:04:20:bd:81:7a:
b7:16:95:8c:4d:a7:fc:8e:9b:52:3e:6c:58:a4:99:
1b:c5:2f:c5:b3:0b:be:c3:7f:74:4f:59:cd:e8:a9:
91:6d:6f:91:0a:f0:45:e7:e5:10:1d:57:c9:f5:40:
fb:bd:44:18:7b:64:64:ed:de:4f:d2:53:2a:67:c1:
b3:c2:c8:a1:19:be:91:7c:ee:e4:e0:91:82:8b:75:
22:71:7b:d0:74:16:95:07:58:8a:bb:6d:fd:f8:cb:
34:d3:49:9c:c7:7f:06:83:40:41:87:9d:0c:f5:0f:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:82:07:D1:E1:E8:BD:00:51:F3:19:CE:7E:CB:74:63:D1:12:D2
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:90:3e:3a:be:8f:83:04:a7:8b:3b:52:29:d8:19:a5:78:88:
99:cc:e0:fd:06:8b:b6:05:3a:47:08:59:21:e6:a1:fd:36:09:
d1:47:e7:a2:b7:f4:13:bc:11:10:9a:a9:ad:b3:6f:b9:13:a0:
0f:a5:9e:82:e7:a0:6a:67:3c:b5:4e:ea:60:eb:41:ed:b3:bd:
77:86:e2:36:b4:a7:29:6d:f6:f3:b3:e6:f1:3f:e5:72:05:ae:
0e:0f:d3:d7:ba:7c:4c:7b:7c:fc:e7:a4:91:fd:2c:9a:8f:d1:
a1:72:61:c1:2b:ad:86:d5:f3:55:83:48:ce:56:3d:b1:71:dc:
38:17:b0:6f:e1:2f:f2:ee:ad:b2:3f:64:6a:3c:14:fc:89:71:
cf:b8:b4:b3:33:72:66:6e:fa:04:6a:28:29:d3:ae:3c:a0:05:
ac:d6:58:df:cb:e9:42:56:e0:d7:e0:11:1c:bc:d0:52:08:b5:
44:9d:ee:95:51:f6:f5:39:f8:f7:b9:69:d3:6c:d8:5b:b3:3e:
5d:d5:cf:df:b3:9d:b2:04:5f:36:b8:5b:2c:d3:3c:25:bb:9d:
a1:3f:be:28:ce:36:2d:8c:70:57:1c:6e:4d:f7:99:cb:4a:ff:
5a:b7:21:04:7a:75:b6:8d:55:18:7c:7b:ea:e8:db:c3:38:4d:
19:17:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:17 2025 by rpki-client