Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: QbFN06pDT6i3LFg9qpRfWqi8OiA7nKZiS8zNpqjJ8u8=
Subject key identifier: F7:95:80:9F:C7:A2:75:92:90:51:0F:B6:AB:12:4D:44:CC:43:0B:9C
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 019A71EECB7877A8D092FB00C4DE5BFBE0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: bCPwmY88JKAuNQZnqnQjNENzd0P3oW9D5s0VnpwHkdY=)
2: uRY4YsG-mkWn6EhADkF8cpPULqs.roa (hash: Qt9rBAQIaFmfpIvgH469AcKJBVMoTOjxLXll5uI8QwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cb:78:77:a8:d0:92:fb:00:c4:de:5b:fb:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=f795809fc7a2759290510fb6ab124d44cc430b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:80:9b:35:e4:dc:07:fe:b0:5a:48:7e:3c:
67:c3:9c:08:f7:d4:14:3e:77:79:eb:46:d5:57:39:
55:53:d2:ae:8c:9c:41:25:56:76:f5:68:c7:9f:c0:
93:0a:43:7d:48:a0:e8:b7:c4:b8:10:14:0c:16:42:
ec:d5:6e:54:5c:68:13:6c:ee:d9:c2:ee:be:55:7b:
c9:b9:6b:d6:19:17:e2:99:91:b0:d8:96:d5:2e:dd:
fc:35:4e:57:a5:5a:3d:87:b1:23:4a:72:d4:28:a0:
1a:e6:b0:a8:74:c7:e0:d3:54:0c:05:49:ad:10:82:
94:a9:23:ea:65:dd:cd:a4:fd:c8:70:b5:a2:ef:7e:
a9:bb:f9:84:d2:68:3f:c7:da:2e:98:41:97:53:33:
7c:a0:47:1f:45:a8:f6:89:74:be:ab:61:94:83:99:
5d:ee:57:c9:d6:58:de:d9:f6:4a:2a:a3:1b:d4:00:
93:f9:0e:5b:ae:d4:f1:41:9a:f7:f6:11:73:a5:33:
b5:8b:14:45:d6:55:ed:ba:f7:af:a0:11:43:94:86:
e7:36:41:b0:06:42:10:88:8e:3b:e5:77:39:da:3a:
0d:52:39:57:57:f6:aa:dd:27:4b:f7:f9:39:3d:ac:
08:29:63:bb:dc:74:62:07:90:71:19:b6:25:95:f4:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:95:80:9F:C7:A2:75:92:90:51:0F:B6:AB:12:4D:44:CC:43:0B:9C
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:26:6c:e3:d6:30:94:43:f9:68:9f:df:d6:c9:05:00:8f:32:
e4:9c:4b:4f:b1:58:ad:ef:fb:75:92:09:47:75:32:29:b9:bf:
71:83:2a:c4:59:7c:3a:86:02:69:e3:d2:77:fe:bf:7a:17:80:
de:b9:44:fa:54:bb:12:59:a4:df:5d:0c:da:7b:6a:fb:6c:27:
52:1f:b3:e8:e9:cd:f9:4e:67:cc:7a:82:04:d9:a8:56:6d:b1:
a0:be:81:48:ac:be:7a:f5:eb:c0:02:34:ce:01:07:ce:1c:36:
06:53:c0:93:6e:1f:b4:91:cf:61:a1:2d:5c:76:c5:87:11:3f:
de:38:e3:50:33:20:f1:f9:a3:35:67:b2:60:80:8e:5b:8b:7f:
09:49:a7:d7:2d:64:a4:8d:f1:95:86:f2:88:07:05:09:9a:4d:
be:f8:84:9f:27:82:22:62:f9:5b:31:e3:78:cc:d3:78:ef:06:
d1:55:ac:79:fb:58:23:ba:9a:25:ba:b0:65:54:f2:88:f1:d8:
b7:61:0d:63:38:41:50:db:af:91:c0:50:82:81:c4:35:36:2f:
76:42:e2:a7:68:ea:35:0d:11:4e:15:ed:95:3e:10:08:ae:7b:
4d:29:7c:43:d9:84:31:85:94:f7:a3:b6:6f:86:9d:b1:5d:29:
63:c0:7c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:34 2025 by rpki-client