Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: kMR585aUxPVF5Rpu1WoIB/gafSKRzGpIPW5ZcrPihKk=
Subject key identifier: 28:43:75:36:2F:A5:F7:8B:6B:8C:A0:6B:EF:58:88:F1:65:57:B4:CE
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 019A70A54A947483ECAD1032A1C1749EFE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0AE4
Signing time: Tue 11 Nov 2025 02:01:11 +0000
Manifest this update: Tue 11 Nov 2025 02:01:11 +0000
Manifest next update: Wed 12 Nov 2025 02:01:11 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: K2a/B7rJa9dDQe7PysETyPrWtx2zgmFjhjaKHni4S58=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4a:94:74:83:ec:ad:10:32:a1:c1:74:9e:fe:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Nov 11 02:01:11 2025 GMT
Not After : Nov 12 02:01:11 2025 GMT
Subject: CN=284375362fa5f78b6b8ca06bef5888f16557b4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:55:ad:b1:3f:f7:07:d5:50:1f:a3:e1:58:
d3:dc:6a:3b:38:0f:85:2c:f6:38:3b:a8:16:a9:a1:
15:56:da:00:bd:b7:9e:48:5c:8f:57:58:72:a5:09:
e1:c8:49:90:df:19:68:3d:f1:d8:35:00:cb:fe:ee:
1f:1b:08:7e:dc:e9:27:81:17:54:eb:63:40:02:38:
d4:13:fa:80:ee:4a:9e:37:98:c4:bb:d2:3c:98:68:
94:5e:7d:a4:46:db:fd:4c:d9:ea:d4:45:59:2b:a2:
4f:17:c9:74:97:89:62:73:33:17:48:84:93:04:b5:
49:a4:2b:a2:ed:41:0a:05:31:f2:c2:9c:3d:24:f5:
54:33:48:42:4e:d6:aa:47:66:95:c1:5c:32:5d:9a:
cd:b2:f5:a4:b1:28:fe:57:3f:be:2d:e7:47:35:ac:
f3:89:ed:a9:40:c7:ee:5e:05:0a:d9:6e:6e:54:4c:
7c:9b:f4:03:8c:81:73:fc:5a:83:9a:d3:bb:a6:5b:
1b:10:84:56:f5:9c:3c:db:53:b2:4e:64:f3:ce:8f:
6c:af:ec:e1:4a:6c:e7:0f:87:74:dd:96:65:c9:c7:
25:1d:5d:48:dd:28:fc:db:d6:45:b5:96:6c:05:57:
f7:0f:e9:f0:36:73:12:ae:3f:e9:12:e4:4c:8e:0d:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:75:36:2F:A5:F7:8B:6B:8C:A0:6B:EF:58:88:F1:65:57:B4:CE
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2e:d2:c6:9a:91:97:6f:3d:1a:84:85:6c:06:c8:01:d8:8f:
6c:24:6b:7c:f7:a8:9b:79:bd:e8:42:c7:49:7d:d8:7a:38:17:
e5:e7:cc:e2:57:c5:74:76:c7:0b:de:ba:43:f6:23:01:a1:de:
37:11:59:b9:9c:8d:3d:45:ed:c3:ac:d7:c1:7f:11:4d:4c:8e:
fc:0d:4a:a0:96:c1:90:56:d5:b9:65:2a:f3:42:17:6e:57:bc:
8a:bf:30:ed:b0:bb:28:11:19:ee:35:99:92:0e:72:9b:fd:43:
58:25:30:b2:27:23:23:4d:a3:fb:92:26:bc:8a:50:b4:72:36:
69:32:81:4a:13:c7:17:0b:72:4e:6d:57:7d:9b:ee:b8:1c:c7:
9a:5a:c8:f1:e1:15:a0:2d:e9:d2:b8:0b:04:a9:48:8f:b1:cd:
22:cc:e7:ab:70:80:21:88:01:ef:a1:1e:34:6c:02:d3:29:97:
9a:80:bd:76:0a:95:76:da:02:a7:25:6a:e4:8d:e9:bf:5c:40:
8d:48:52:26:d5:97:d5:b8:fc:c9:a2:7b:d3:87:eb:04:f0:50:
bc:d1:32:92:db:4b:8d:22:bd:b4:e2:33:6b:92:25:56:96:f0:
49:96:36:f7:13:0b:f1:3c:59:d9:b9:4f:87:e5:cf:73:47:2a:
ed:31:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:18 2025 by rpki-client