Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: r+u6QLERklFgnpwNBZVJZT5NHITmX+7etwDBG8afo/s=
Subject key identifier: 3B:34:35:13:63:A6:37:DB:0A:03:F4:8F:55:AC:7F:CF:46:B1:0B:04
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019A34C6C5103148E9E36942D8CBE08046AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 08D2
Signing time: Thu 30 Oct 2025 11:00:33 +0000
Manifest this update: Thu 30 Oct 2025 11:00:33 +0000
Manifest next update: Fri 31 Oct 2025 11:00:33 +0000
Files and hashes: 1: D_Ap7aX55j2mvnDRbvve0G_OwsM.roa (hash: rFKERfrglcdmlPd1vXc+xLBg8nNvQQZtBdRb9+OODlU=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: 2k48XZRZzbdrPXNMvy1JAO2sy7bsVelo42d2vHczof8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 10:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:c6:c5:10:31:48:e9:e3:69:42:d8:cb:e0:80:46:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Oct 30 11:00:33 2025 GMT
Not After : Oct 31 11:00:33 2025 GMT
Subject: CN=3b34351363a637db0a03f48f55ac7fcf46b10b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:98:03:62:bf:a8:99:05:0f:1b:dc:f2:21:
1e:4e:9f:c1:ae:ca:62:74:a2:f1:42:23:47:fd:97:
87:57:15:96:f7:d9:2b:8d:e2:f2:45:6e:27:a4:84:
0f:ab:89:f1:53:b0:50:8e:80:c2:3e:61:74:df:3d:
9d:a1:82:a0:db:2d:15:6c:f5:83:7d:16:62:8c:f0:
1e:e5:96:c8:50:34:ba:7f:10:0b:ce:48:e0:ac:fc:
48:85:ba:ba:cd:e1:4a:e3:94:80:7e:1e:90:fb:0b:
81:47:78:dc:7a:2e:a2:62:a8:06:07:14:e8:a7:a6:
58:53:af:2d:67:1c:86:0e:e7:a4:17:0c:c2:83:d2:
43:e4:d8:82:d1:d9:83:6b:0a:c8:fb:93:7a:f8:cb:
48:db:7f:39:0f:a8:87:78:98:f5:35:2f:26:0c:02:
fd:17:20:8f:52:69:8c:7b:2b:5b:fd:d4:bd:44:0d:
a9:da:41:89:c1:43:d8:64:81:de:7a:8d:a6:6d:9d:
34:04:49:98:4c:f0:48:68:10:dc:20:c6:29:4f:de:
39:f9:ad:7d:7d:1d:cf:5d:7e:1e:05:4d:b4:ef:26:
53:4b:ec:71:40:ec:34:07:a7:50:d8:ec:52:3a:6b:
a0:8a:ff:dc:a5:22:8a:2a:7c:8d:95:db:a3:ce:77:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:35:13:63:A6:37:DB:0A:03:F4:8F:55:AC:7F:CF:46:B1:0B:04
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2e:48:6d:c2:d8:eb:da:d1:4a:8e:49:86:2c:3e:50:ad:09:
7e:cb:43:10:84:8a:26:60:61:c4:be:14:53:02:13:10:ea:94:
ca:59:38:5d:19:8c:09:c4:bc:64:e0:18:c9:3b:43:09:49:69:
83:49:f7:61:16:fe:60:d0:f8:86:22:3f:4b:5c:16:97:9e:65:
3b:bb:9d:43:f4:2e:fb:f9:23:6a:4a:25:54:4a:b6:6e:b3:24:
14:39:9c:6c:a4:0c:25:f3:dc:10:60:44:e2:e5:fa:eb:0a:f0:
52:26:34:b9:38:cb:69:ee:bc:70:2e:af:76:56:af:fe:4e:68:
dd:72:8a:20:ab:2d:7e:f1:4f:a0:25:1c:65:34:a7:2a:56:b9:
d6:e8:fd:09:f9:8b:81:10:3d:8e:22:73:2e:86:b9:1d:01:83:
8d:95:54:4f:51:72:00:6f:36:42:d3:40:f5:3f:6f:85:b8:51:
85:b6:cf:88:0b:88:0d:00:fa:29:46:59:d9:41:70:87:1b:33:
f5:02:a3:71:ae:65:44:d8:0e:b0:12:6c:f2:9a:b0:26:a9:49:
6b:61:8b:08:83:f9:3f:35:3c:e0:0c:55:a0:dd:bf:62:47:c8:
e7:6f:f0:44:c9:8d:01:d8:b5:2c:d8:f7:77:86:c2:0e:1a:c3:
0d:1e:d7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 12:59:37 2025 by rpki-client