Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier: bIW2wQmwkp6ku16nr4Y7XkYrRbUzfnXUHuAsG2gRgUo=
Subject key identifier: 3D:86:CC:00:42:C8:6F:E6:EF:29:7B:7C:66:92:09:99:72:26:F6:15
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial: 019A72265DD4B8B17C62D4770DCBE4245D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number: 0ECA
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: AgxlM4Emu6P5uWq/fygaqIyIeUrbSfRypK/Kszx/e74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5d:d4:b8:b1:7c:62:d4:77:0d:cb:e4:24:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=3d86cc0042c86fe6ef297b7c669209997226f615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:2c:46:7a:58:df:23:e1:90:cc:26:05:63:
ff:86:83:5b:d3:1c:08:8e:62:8b:c8:80:c8:d2:9d:
e9:46:6c:3f:97:5d:ec:ae:c3:5e:cf:86:15:86:e1:
13:fb:ac:72:9d:03:c0:41:0c:0c:6e:c4:15:d8:92:
f4:24:20:d8:04:ce:56:56:33:60:84:68:16:a1:ce:
94:32:5e:a8:af:3c:bc:87:d7:ca:56:7a:69:73:70:
cd:57:11:68:79:55:fe:5c:fe:53:b5:96:fd:de:58:
bb:5c:db:c9:f6:4f:18:85:db:9b:0e:fe:2e:33:ea:
be:41:ec:a8:f9:a1:90:90:a6:a1:17:62:99:fe:6a:
3b:81:34:c4:6a:99:db:90:54:4b:5f:96:6d:e3:86:
a9:d3:25:ec:c9:01:7a:ea:03:d7:27:7d:15:77:dc:
50:0b:7f:eb:03:70:5f:55:90:07:d0:06:5f:9e:14:
16:ca:d5:69:c7:7e:0f:9f:48:77:66:a4:36:40:82:
c1:89:de:12:2c:63:6b:ba:8d:5b:bd:b0:c0:ab:d5:
fc:4c:32:6e:da:f1:17:e4:6a:18:73:5b:b6:da:bb:
86:f5:6a:3f:a0:4d:c0:36:2e:c0:32:cd:a1:19:ee:
73:0a:c6:76:5a:8c:18:c5:3f:27:eb:57:a9:f6:41:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:86:CC:00:42:C8:6F:E6:EF:29:7B:7C:66:92:09:99:72:26:F6:15
X509v3 Authority Key Identifier:
keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9a:b4:c4:ec:a5:e3:ee:03:2b:82:8b:60:3a:70:dd:49:23:
e4:87:62:92:60:ee:87:bf:98:b8:f4:c2:07:cd:58:58:a1:8e:
00:5a:8a:15:d9:56:2a:22:f4:0f:1c:e5:62:1e:84:73:98:eb:
55:7a:8e:22:83:65:a8:d4:a8:3f:fd:86:ce:07:c9:d8:ba:4c:
2f:e8:0b:5d:1d:c9:48:dc:39:ee:05:67:a4:23:71:38:48:2b:
20:f5:54:a2:a5:63:87:2e:70:b9:58:45:74:da:06:36:59:7f:
81:02:b5:29:77:ff:ad:02:98:11:03:c2:34:af:cb:3d:06:23:
c6:d3:81:51:c2:5a:21:b3:c4:58:cc:75:8e:06:92:2a:35:af:
85:51:c2:5d:ea:80:08:ec:17:69:31:f3:92:da:86:35:8a:a8:
5d:32:c2:05:41:1c:3f:94:ef:69:f7:46:12:c7:2c:e2:a7:82:
be:f3:13:dd:b0:43:6f:2d:1d:56:2d:c5:a6:96:ce:6b:f3:1a:
1d:fe:e5:c9:66:83:3b:b7:b0:1d:26:54:1e:8d:8e:ae:c9:93:
f7:fb:0b:62:c0:fd:01:a6:64:2c:76:1e:c4:13:7e:80:ac:f5:
d7:1c:08:77:12:bb:68:a4:65:ce:08:7d:88:3f:58:25:c7:11:
13:37:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:22 2025 by rpki-client