Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: Az5KMhtMsVFE2WBGBLxTPHLXBPZs9Kt4eImsNLw3NSw=
Subject key identifier: FF:FA:D1:C7:22:ED:72:07:1B:87:2D:48:EA:5F:42:AB:59:56:4F:BD
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 019A71B9269791211E6DEB2A7A9216DFE253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: e90Bg1+VVmC60+RGDPTsDAWbH96bHnljv31POGG0x6I=)
2: bxRO7kfiXfIBzrwx6__-lx4GD-Q.roa (hash: Yl6am4vWUQXhAPFuVgrQF79QPPtS7MoD02zbAbTLBHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:26:97:91:21:1e:6d:eb:2a:7a:92:16:df:e2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=fffad1c722ed72071b872d48ea5f42ab59564fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:80:e2:6d:89:c2:a1:49:c8:63:1b:00:7c:
1c:64:e2:9f:4b:43:4f:6a:0f:28:33:90:45:37:da:
0e:7c:27:c3:15:8e:77:94:ac:60:48:02:03:63:da:
db:eb:af:ab:61:c4:8f:f2:96:ab:cd:88:a0:36:0c:
99:0a:71:56:17:2c:7d:dd:eb:b9:3b:d8:7a:43:90:
37:1c:00:13:fa:8e:f8:71:ea:e5:a3:de:ce:45:36:
a6:03:a5:45:14:cc:8a:bf:09:e7:24:7a:98:a9:44:
c3:08:43:61:21:06:c7:32:f0:b2:6f:6d:b1:83:e4:
20:f6:94:b1:3f:c2:aa:dd:58:32:13:48:d1:ed:f6:
f1:49:0f:f3:12:26:60:df:1f:58:15:48:47:e9:49:
3f:0b:97:06:56:99:98:f3:47:18:0d:07:c9:ba:a4:
38:8b:7e:cd:7f:91:ef:c4:ae:47:5c:37:bd:e5:17:
eb:c6:2e:79:14:66:18:ce:cd:72:88:58:59:49:30:
2e:3b:7a:57:cb:e8:dd:95:6b:ba:3e:03:6b:1b:9a:
a5:ce:7f:b5:84:36:6c:0c:92:44:0e:42:c8:6d:f1:
85:14:c0:4d:2d:06:65:36:df:83:18:84:a1:e5:ed:
0d:23:fc:54:9f:fc:e0:9f:00:71:f1:82:21:ce:67:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:D1:C7:22:ED:72:07:1B:87:2D:48:EA:5F:42:AB:59:56:4F:BD
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:35:c1:34:d3:fd:14:f6:fd:2a:d7:db:f0:b3:6a:7d:f2:
fa:34:41:54:8e:b2:4b:79:47:ba:97:bc:ad:ac:02:39:b8:36:
5f:9e:0a:20:58:30:54:51:94:b6:3e:50:fd:e5:d0:76:4a:6f:
ee:94:a3:d5:2a:98:08:91:64:0c:be:a1:07:e3:9d:6f:26:3a:
39:e0:56:c0:8c:eb:c7:77:80:27:7f:8c:68:75:04:8f:f1:2e:
58:3b:55:0a:e5:77:e7:47:47:5d:fc:3e:2d:c5:db:29:5e:67:
bb:6e:ea:71:d5:24:3e:3e:df:8f:26:3c:52:a6:11:33:32:b5:
81:8c:0d:04:74:66:40:18:e5:b9:36:05:41:b2:ef:85:48:94:
89:96:ba:0d:c3:9e:ce:c9:55:cb:1c:a3:ab:1b:d0:b6:4c:6f:
e9:f4:77:be:b2:72:08:76:9e:39:d3:96:dd:44:74:4b:a5:1e:
40:79:78:51:57:41:c1:2f:b0:97:8a:cd:2e:6d:bb:3a:f4:0d:
d6:98:a6:6d:a8:62:5f:cc:fb:7a:53:4f:34:08:60:05:eb:f9:
16:c9:14:d0:e6:1d:d2:13:21:11:a5:57:61:b2:67:ab:94:3d:
48:98:ae:ee:06:d7:ad:6e:35:90:02:f9:78:0a:cf:ba:a4:47:
db:3b:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:24 2025 by rpki-client