Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: 3HCEkVesiDMYDl1mhFs8TbVnCHz+5zwZTZRG9W5SEjc=
Subject key identifier: 2F:68:8C:2E:A6:35:59:D7:0C:DF:11:3C:7A:C2:A4:78:77:9F:77:7F
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 019A251C82E2BD0723A4A6E32F0053B83243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 133B
Signing time: Mon 27 Oct 2025 10:00:16 +0000
Manifest this update: Mon 27 Oct 2025 10:00:16 +0000
Manifest next update: Tue 28 Oct 2025 10:00:16 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: HRFrYv6cx95pSb6CKbWVp9DbBteTgnZlW5uH0FojcR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:82:e2:bd:07:23:a4:a6:e3:2f:00:53:b8:32:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Oct 27 10:00:16 2025 GMT
Not After : Oct 28 10:00:16 2025 GMT
Subject: CN=2f688c2ea63559d70cdf113c7ac2a478779f777f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:49:77:36:64:81:0a:e0:97:16:2a:37:24:
12:0a:57:11:bb:cd:23:25:b7:2e:e1:ed:60:18:b9:
3e:64:90:c4:c1:42:a6:33:cd:bd:3a:80:5a:1e:a9:
2e:68:ba:24:28:5e:f3:0b:8e:28:c8:df:53:2d:a0:
31:44:e1:60:50:e0:71:6c:15:5a:ee:12:e8:ca:20:
a8:01:6c:cd:01:0c:a3:96:ed:e4:1d:1b:da:42:32:
06:50:c7:07:c1:b5:c1:ab:42:dd:85:15:fc:93:6e:
db:e1:8a:20:23:33:47:1e:5d:d5:66:fc:59:6c:d0:
c5:89:30:4b:9a:9c:b0:a5:ef:03:f4:6e:bc:84:83:
6d:ed:85:c0:bb:ec:29:5d:4c:c8:b8:45:f5:e1:25:
f0:8b:e0:fd:d3:0a:1f:2e:15:0d:91:b7:4c:98:8c:
01:a1:a8:0a:1e:5a:b1:4a:94:76:d3:ae:6d:02:c8:
2f:e6:c3:01:fb:b7:98:90:2c:9f:76:28:19:37:c0:
8a:70:6c:6c:8a:9e:a4:b3:23:65:86:f5:13:d1:73:
8a:9d:2d:fc:9b:d6:b5:39:f6:74:c3:d5:16:0d:05:
74:5d:71:84:e4:d7:2d:35:07:48:c9:c7:af:a5:d1:
d3:9e:07:90:90:57:50:31:ce:5d:4b:7a:72:88:19:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:8C:2E:A6:35:59:D7:0C:DF:11:3C:7A:C2:A4:78:77:9F:77:7F
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:eb:9a:f9:fe:16:d8:fd:1f:5b:32:67:00:98:53:6e:5d:df:
1b:e6:4a:36:16:09:b5:6e:8f:34:3c:a9:66:50:fa:dc:06:a9:
17:06:36:45:08:6e:b0:da:31:d9:59:d8:83:c3:9a:49:bf:9e:
94:72:fa:6a:eb:28:0b:b8:00:4e:4a:ee:ef:11:c2:41:33:bc:
a2:0c:e7:fb:e2:45:85:8d:be:74:64:7d:7d:05:92:ea:9a:24:
7c:18:16:1b:5f:3b:b8:1d:55:50:d3:06:e6:58:9a:8f:0b:95:
3f:95:cd:11:c7:68:c9:33:8b:ae:c1:69:3c:bb:68:ed:14:57:
1b:c8:a2:eb:53:e6:98:3d:13:14:92:05:87:f2:3f:21:e6:0c:
96:ae:bc:64:08:7d:8b:1e:ba:8a:68:ce:e6:41:68:c0:38:16:
59:d2:83:ee:2d:94:cd:ea:e5:f4:8a:32:c2:04:0e:e4:19:06:
6d:6c:20:9b:a0:df:16:6e:e0:1f:03:02:d7:43:ec:40:e1:17:
bb:5c:08:48:78:be:70:6b:2d:94:ba:66:6b:e2:96:e9:02:47:
68:65:38:47:d9:fc:7c:32:c7:5e:ea:2a:e5:25:fa:e4:ce:5e:
fc:25:9c:b0:01:55:f9:43:7a:56:50:4b:d5:2c:58:aa:d7:cd:
56:e8:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:31 2025 by rpki-client