Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: bRekHLNT4N9RocpcDErZ2Zz2PgRtOJRVV8XoUS0I1IM=
Subject key identifier: 51:E7:55:D2:3C:24:1E:19:40:EB:9A:25:5D:BF:72:D7:4A:AE:B8:65
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 019A70DBE23490B4D3E6015989A3935DA0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 03:00:49 +0000
Manifest this update: Tue 11 Nov 2025 03:00:49 +0000
Manifest next update: Wed 12 Nov 2025 03:00:49 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: uhOoCErFkAPPQ5V73NulTV0gYCf0uohRZHuaX19gkKE=)
2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e2:34:90:b4:d3:e6:01:59:89:a3:93:5d:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Nov 11 03:00:49 2025 GMT
Not After : Nov 12 03:00:49 2025 GMT
Subject: CN=51e755d23c241e1940eb9a255dbf72d74aaeb865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:57:bd:12:00:a9:60:a7:47:9c:aa:82:e5:03:
71:50:21:67:60:77:a0:fa:c2:b1:f3:08:bb:2d:f3:
7f:1c:61:71:2b:76:c6:fc:b3:25:26:fb:a2:11:15:
01:09:d1:74:35:31:c9:84:4a:af:a8:e6:18:88:9d:
a3:72:85:e1:b8:bf:e6:b5:c8:0d:d6:a8:af:79:02:
54:35:06:86:d6:73:e8:ce:c3:7c:90:cb:5b:60:2a:
cc:a4:d1:27:e5:97:71:37:cb:b2:fc:65:05:94:e4:
67:a4:b5:e5:05:ac:fb:07:d6:c9:16:63:8e:8a:97:
d5:2a:b0:81:a0:67:88:a8:39:3a:f0:54:c4:98:26:
bc:ef:4a:66:83:2f:ce:ab:f6:ca:c6:40:86:01:26:
cc:4c:7f:e5:be:94:ba:46:0a:a1:f2:44:3d:74:0b:
01:e8:c6:92:75:c7:46:48:19:ce:c5:21:76:7f:d3:
a9:4c:08:19:fd:5b:9e:57:1a:22:78:0c:19:1a:8d:
3b:79:f4:07:7e:2e:91:6b:db:ec:1f:00:5d:a7:66:
78:93:79:4b:c0:fd:15:c9:13:88:1c:da:75:9b:d0:
ab:6e:0b:d8:33:db:25:51:ad:e6:1d:1e:60:f8:07:
f5:a1:92:98:66:cd:f5:d1:0c:bd:8b:8b:bd:be:cd:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E7:55:D2:3C:24:1E:19:40:EB:9A:25:5D:BF:72:D7:4A:AE:B8:65
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b4:a1:4c:f3:f1:c9:6a:08:bc:f3:a0:13:20:56:04:4f:6b:
d6:86:54:75:d5:56:5f:6d:fc:ba:33:9a:fd:f8:76:37:60:b7:
9a:38:d6:99:24:42:bf:fb:33:02:70:40:8b:58:ca:fb:f8:c4:
50:76:3e:a3:45:da:19:43:7a:b3:04:33:1d:95:93:30:fb:6d:
16:d6:8f:1b:88:f6:f1:a9:82:ed:63:e6:5a:25:84:77:21:7d:
2b:00:8d:72:a5:95:45:0a:46:21:a4:dd:4b:03:b2:e5:f5:e8:
a3:c2:96:54:e1:fa:eb:f6:6f:d8:19:90:50:46:fe:a7:2e:ef:
c0:2f:ee:be:ef:31:27:01:bd:e2:a8:e7:33:5f:9b:90:29:ca:
1d:28:67:c1:7e:8d:23:e7:36:2e:df:d7:a5:4e:61:b5:9c:7b:
73:7f:95:aa:5f:e1:08:ac:09:58:1a:2a:91:ed:e3:b6:44:a5:
e1:48:86:f5:1f:44:30:49:7b:d7:ab:0a:8c:76:56:6f:e8:8f:
5b:f7:92:7f:01:65:2c:ec:b8:bc:60:4b:5c:7e:a0:69:2f:3e:
6f:4c:2b:ec:eb:41:63:4c:b9:63:09:5d:e8:24:22:60:22:77:
c7:ea:d1:5c:2e:b6:8d:b1:0c:a5:ff:95:cd:09:3c:94:1b:99:
22:a3:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:15 2025 by rpki-client