Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: 0sv6qFGFfA/D9t/jK04OIYi/eUWERn7kERWWDPOJoxU=
Subject key identifier: AC:2C:A1:68:5C:2D:CF:37:D3:B1:DA:89:53:58:E4:7A:B4:0D:10:59
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 019A23D3144B8F75D0F8602906C9B47704D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 04:00:27 +0000
Manifest this update: Mon 27 Oct 2025 04:00:27 +0000
Manifest next update: Tue 28 Oct 2025 04:00:27 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: mgKKbE3MtdGAv7oX7n6HMq28F+/RAN9Xxm1Sgn4VxEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:14:4b:8f:75:d0:f8:60:29:06:c9:b4:77:04:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Oct 27 04:00:27 2025 GMT
Not After : Oct 28 04:00:27 2025 GMT
Subject: CN=ac2ca1685c2dcf37d3b1da895358e47ab40d1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:08:4d:40:f3:8c:f0:79:44:a6:4d:c6:7a:
62:bf:8a:a4:c1:77:9e:b9:cb:ff:6d:0b:4d:b9:05:
72:08:fb:48:4f:43:ad:fb:a3:81:7f:f1:a9:f6:ce:
76:9e:f2:ba:35:1b:09:e4:05:61:eb:bf:4b:8d:9c:
84:59:07:df:b5:d3:f5:2b:86:c9:10:12:53:46:45:
1d:22:49:1e:7e:e5:3d:f6:53:05:db:fc:f4:bc:c5:
f0:f6:95:f9:df:f7:fb:56:df:61:8e:76:88:7e:48:
8e:a9:dc:f2:03:5c:02:b6:a9:4c:eb:f7:1e:76:92:
1e:52:23:76:1b:cd:4d:ca:3c:db:ff:93:60:53:7f:
a5:90:52:65:9d:eb:07:9b:47:e6:2d:9f:10:20:4f:
49:9b:d8:62:f2:1a:a2:fd:48:05:8a:ac:bb:dc:a2:
4f:26:a5:ea:08:a1:40:a7:d7:3f:4d:21:27:9b:df:
62:8f:ec:e3:b6:be:3e:4a:ab:f4:f1:ec:b0:12:e1:
2f:a1:79:9b:1e:73:36:82:ee:d9:b0:50:0a:3c:25:
53:ef:e9:90:be:45:42:19:20:ff:6e:d2:0f:85:1a:
43:1a:65:ac:dc:50:da:43:e9:23:02:44:6a:fb:ff:
10:ae:d5:9f:f9:4e:f8:dd:70:ee:0c:80:71:b6:22:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:A1:68:5C:2D:CF:37:D3:B1:DA:89:53:58:E4:7A:B4:0D:10:59
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:34:ff:61:be:25:b6:8d:bd:da:79:69:c5:c4:f7:58:fb:53:
45:3c:f1:f4:0a:39:b5:2d:75:85:a1:27:a6:2d:8f:ef:7f:a0:
fc:f8:16:3e:23:73:c4:11:19:99:f0:7a:2e:77:f4:9f:c8:26:
92:f8:9c:b2:68:b5:61:bb:03:6b:9d:16:91:a2:cd:ed:2e:37:
c1:44:67:05:05:00:ee:2e:b7:11:be:71:3c:40:76:0f:68:87:
f2:88:6e:11:d0:fc:63:28:5c:04:d2:e7:9e:6f:8a:0d:1f:15:
84:29:2f:1a:44:e5:cd:b7:cc:b0:e0:3c:74:58:38:18:22:76:
2f:70:43:72:c8:2f:b4:89:8d:81:32:88:36:de:25:34:60:e5:
a1:89:f9:4e:f2:8f:d1:bc:64:ed:5c:45:18:44:be:dc:ff:9d:
98:74:a9:43:25:52:e7:5c:ab:74:65:8d:4c:6b:8b:eb:67:05:
1b:88:3c:ec:ae:1b:ee:9a:6f:00:3d:af:31:52:6f:39:3d:04:
2b:6a:a6:e3:14:15:dd:08:40:2c:96:c5:19:58:f5:20:bb:e9:
6d:a5:9a:45:73:47:19:85:33:85:12:92:f1:21:59:14:fa:fc:
85:26:15:7d:af:1a:54:c5:d1:02:78:c8:c1:4b:39:87:31:e3:
74:75:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:50:03 2025 by rpki-client