Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: Sk07RNKj1f4YC4PVWxYVkmw4Qk+KTZInZcPCxN4j0Rs=
Subject key identifier: B8:4B:16:F4:66:DA:23:C8:61:77:1C:8B:1E:28:D5:35:C9:47:32:D4
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019A4BF32F851D02BADBC7D71E4D20A78C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 066E
Signing time: Mon 03 Nov 2025 23:00:19 +0000
Manifest this update: Mon 03 Nov 2025 23:00:19 +0000
Manifest next update: Tue 04 Nov 2025 23:00:19 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: 8kJ/SHBVXcZoNZu6gNdxWqi808rplyMEP7P6UyDJjy4=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:f3:2f:85:1d:02:ba:db:c7:d7:1e:4d:20:a7:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Nov 3 23:00:19 2025 GMT
Not After : Nov 4 23:00:19 2025 GMT
Subject: CN=b84b16f466da23c861771c8b1e28d535c94732d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:81:b1:70:2b:0a:1d:37:de:68:57:29:1a:
48:b8:1a:1a:87:30:16:36:bd:06:2e:06:ed:ba:93:
21:18:1e:99:04:e6:02:ef:d3:2c:b3:f2:7d:e6:43:
73:95:ac:2d:ac:24:d7:0b:84:6f:3b:5f:53:00:da:
f3:26:22:97:76:55:2e:ad:2b:1e:af:4c:e1:e9:76:
35:03:1e:e7:b8:9d:a0:9e:72:06:03:63:80:af:00:
90:f4:fc:93:a9:ed:4e:21:f1:13:96:ff:79:57:2d:
60:de:e5:dc:98:16:ef:1e:50:3e:d9:50:bf:42:75:
69:d0:dc:96:5d:84:0c:55:6c:8b:19:2f:c7:fc:a4:
33:a5:2d:37:72:6a:b6:8e:4b:e8:a6:a5:c4:85:0d:
dd:13:a4:9c:d2:e0:b0:fb:6c:fa:2e:92:a3:f1:11:
19:69:7f:8c:ff:01:d0:77:6c:8e:67:03:d4:53:40:
15:fd:88:6c:70:fb:68:c4:8d:15:80:a3:20:41:d2:
31:52:92:b3:68:af:85:74:d2:bd:a7:21:07:f0:51:
8a:75:bf:f8:b8:b2:72:c2:a5:3f:6b:5a:f1:60:6c:
c9:74:c0:6d:ce:ee:7e:3f:ce:b3:23:43:04:84:0c:
1d:62:f9:21:0c:fd:39:4a:a0:ec:ce:28:f0:2f:c8:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:16:F4:66:DA:23:C8:61:77:1C:8B:1E:28:D5:35:C9:47:32:D4
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9d:69:a2:a0:00:12:5b:b2:90:4f:b3:98:a8:1b:b5:d9:af:
d3:80:c3:4f:25:2e:f2:2a:f3:68:32:b8:07:58:86:37:6a:38:
99:2c:b7:2d:b9:04:47:76:6d:49:80:af:4c:6c:3f:2a:81:ca:
58:f3:92:94:46:0d:da:6b:ef:68:5e:54:41:42:2a:6a:b8:d5:
74:75:20:66:2f:7d:d3:10:1b:74:89:4a:51:7b:2b:b0:d5:cf:
b1:68:81:39:72:b4:9d:c8:96:15:82:35:81:24:1e:0d:73:32:
e6:ba:c9:18:e7:59:f4:df:b7:35:6d:f3:ee:ef:11:9f:14:07:
ff:00:71:76:c1:43:44:3e:5d:16:83:50:41:87:e0:2d:90:f9:
82:11:2b:45:83:09:f2:2c:66:df:34:57:26:38:cb:33:9f:ad:
d6:20:42:72:fc:01:d5:3d:b3:19:76:67:bf:5a:6c:70:d3:d1:
8e:0b:f3:7b:48:2e:95:7c:34:8d:2c:90:ab:bb:06:41:60:eb:
0a:f9:f4:65:fb:4f:11:6a:fa:26:f4:f5:e3:29:e1:e9:79:56:
c3:52:0d:cf:93:1b:87:d0:48:ae:aa:3e:77:e3:25:3c:aa:39:
cd:28:ad:be:e7:59:20:0d:53:2b:66:1a:40:ec:5d:b9:7f:3a:
cf:75:a4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:28:01 2025 by rpki-client