Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: mb3a2+8viW7Y8jgJV7982uMLjqhk3Bjc4vv3Cg8tJ5A=
Subject key identifier: 0E:33:73:65:5B:04:98:0E:56:3F:05:05:BD:91:7C:A0:F2:32:CF:FE
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 019A258A974020933581DD661BE9A5A72CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 0486
Signing time: Mon 27 Oct 2025 12:00:30 +0000
Manifest this update: Mon 27 Oct 2025 12:00:30 +0000
Manifest next update: Tue 28 Oct 2025 12:00:30 +0000
Files and hashes: 1: CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa (hash: EUyII4SPPS8NnneMNy5H1gGoK71/rhaPmoIV02VhFv0=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: 7xW0E9BJqZtCBCYzbR2xThXfUu9rdtXspXhcvG9rXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:97:40:20:93:35:81:dd:66:1b:e9:a5:a7:2c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Oct 27 12:00:30 2025 GMT
Not After : Oct 28 12:00:30 2025 GMT
Subject: CN=0e3373655b04980e563f0505bd917ca0f232cffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:d3:75:1d:fc:17:37:fc:cb:d6:70:50:25:
e0:81:dc:f0:98:c3:61:48:a9:15:b8:85:ca:79:b1:
4b:a9:6d:30:d3:07:8a:26:c5:a8:d4:99:c9:6e:0c:
99:c0:2b:82:11:a1:95:80:c8:0e:6b:9a:ad:ad:74:
74:2a:56:c3:19:16:3d:84:45:27:ba:8f:97:ae:ef:
1b:eb:2e:a7:5a:84:33:c9:7c:30:c1:6a:91:99:d9:
6e:a6:73:be:c9:65:7a:de:07:52:c5:6f:28:65:bd:
f2:1a:7c:45:a3:6e:f5:6f:f6:05:3a:2b:6f:56:0b:
92:51:c8:e5:e6:c1:10:15:61:dc:95:3d:94:4e:ae:
68:21:6a:61:29:39:08:2c:31:57:98:3b:d7:12:97:
5a:68:7e:43:34:0c:d2:fe:fc:5b:31:d4:d2:49:5c:
4a:1a:83:82:b2:25:1e:32:8d:a6:1e:7f:69:89:f5:
a4:c7:34:1e:7b:ad:59:6e:97:17:4b:62:2a:7e:92:
33:33:d6:f3:14:9b:0c:37:0e:f8:c5:27:0b:50:1c:
8d:09:9f:9a:b1:b2:0b:70:ce:a8:52:b7:9d:3d:bc:
23:fc:ee:57:7d:c7:cc:4a:6c:9b:ba:ca:22:b5:ce:
bd:05:d8:e5:db:1c:c7:f8:86:d9:58:5d:30:f2:70:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:73:65:5B:04:98:0E:56:3F:05:05:BD:91:7C:A0:F2:32:CF:FE
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:89:d7:b9:73:18:73:ba:39:3d:12:45:2b:f8:46:3c:a1:50:
7c:23:f8:5e:0e:5a:57:4c:f7:ae:27:6a:66:c6:44:a1:1b:b7:
07:f9:17:10:92:ab:a1:af:0b:a3:7d:42:aa:51:2c:cf:f1:ba:
96:29:54:b8:63:2d:8e:0d:24:79:e5:78:0c:8a:d7:4b:cd:77:
34:b3:ed:f5:b8:46:c1:a3:e5:ad:d8:23:f4:26:2d:d5:52:b2:
dc:6a:d5:b9:1c:d4:11:a3:e1:67:12:7c:60:19:f3:1b:af:b3:
e3:a5:39:e1:d1:33:fd:ac:35:7e:54:7c:fa:63:85:b2:79:a0:
4b:6a:67:5b:82:25:fc:22:79:92:8e:e1:12:a6:81:56:0c:d8:
94:75:ff:34:12:e7:b9:24:41:37:4b:08:f7:5b:71:9a:29:f1:
b1:05:15:0d:6a:16:c4:8b:2f:42:f1:6c:9e:91:a6:07:6b:1b:
3b:9c:29:4c:61:09:62:cd:90:fd:0d:bd:eb:65:4e:52:56:55:
73:f4:1b:ea:70:00:cd:19:23:66:37:54:99:0a:b8:66:95:e2:
9d:59:36:42:ef:1d:c3:5e:b8:b8:3d:6a:b9:21:0d:e7:63:5d:
24:fd:7e:aa:ff:bb:1e:d3:64:40:dc:45:4b:f8:f3:1a:de:ad:
cb:ef:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:39:47 2025 by rpki-client