Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: kezg73EOx37ixzmRvKw7Ysgkx9152rowfMFzgdb6v1g=
Subject key identifier: 44:B5:F7:EB:D1:D8:63:D9:94:9E:5E:D3:3E:4F:7B:88:22:B7:3A:A9
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019A269D44FD73D16E4ED067CDE3BDF1D5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 17:00:32 +0000
Manifest this update: Mon 27 Oct 2025 17:00:32 +0000
Manifest next update: Tue 28 Oct 2025 17:00:32 +0000
Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: FN+38KzHKAibftOK+3iu3uIsTlkeinzynqh77iW78eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:44:fd:73:d1:6e:4e:d0:67:cd:e3:bd:f1:d5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Oct 27 17:00:32 2025 GMT
Not After : Oct 28 17:00:32 2025 GMT
Subject: CN=44b5f7ebd1d863d9949e5ed33e4f7b8822b73aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:f8:3d:70:b5:9b:0e:7c:aa:cf:4c:29:78:
1e:9a:69:58:ab:81:3c:8d:b8:82:8e:58:35:8a:1a:
48:d7:59:8b:6c:d5:5e:05:77:6b:06:e5:d9:30:ff:
eb:e9:d0:0d:30:dd:62:61:d9:60:14:20:f8:d0:10:
d1:e3:79:2e:95:f0:da:ed:56:b2:b0:48:6b:b2:49:
b7:9e:cd:a0:20:a1:c9:6f:11:d0:bb:63:93:91:63:
5f:88:04:7a:e4:66:21:ae:b1:cf:28:a8:df:a3:22:
90:02:35:e4:b7:91:f2:73:fe:e2:df:ba:cd:b1:15:
83:db:25:9f:ed:d1:1e:08:15:e2:4e:6d:d3:b4:17:
41:e4:47:6f:e3:6a:dc:97:44:c0:2a:73:0f:44:ca:
58:bb:66:43:28:c2:34:97:42:d6:f0:94:f9:9c:bd:
7d:ab:0b:5f:3e:10:e8:15:35:91:96:4f:5e:b9:c2:
19:28:09:8c:8e:09:1b:19:36:aa:ea:57:d5:0f:1a:
7a:5e:14:3e:99:5a:05:a7:a4:4b:38:0e:d8:77:31:
8e:21:cb:5d:71:b2:c9:28:53:d1:d4:27:12:1c:ad:
76:e8:bb:39:f2:9c:91:d2:6f:d8:95:88:28:bf:fa:
ef:cb:6a:00:81:43:1a:4f:62:48:6a:3d:b4:d9:90:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B5:F7:EB:D1:D8:63:D9:94:9E:5E:D3:3E:4F:7B:88:22:B7:3A:A9
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:81:b5:ab:cf:d1:8e:a2:fa:ef:5c:8b:35:3d:49:20:83:
9c:31:08:c0:ab:b6:1b:c7:d7:ec:25:36:7c:fb:3e:27:80:a7:
7a:2b:59:44:40:40:35:33:78:6a:bb:de:30:b7:cd:9d:c6:a5:
28:3a:09:46:35:fa:76:3d:51:41:da:b3:9e:47:08:86:bf:43:
13:1b:fa:d2:3a:c9:dc:de:91:be:c4:69:c4:a9:1c:31:60:40:
3b:3e:f1:69:90:b4:57:f9:9a:93:76:01:7c:22:cb:fa:6b:89:
78:ed:0c:1b:3a:2b:a4:99:41:77:ff:55:99:01:6b:49:1a:68:
d0:be:e0:05:23:42:93:82:49:c1:b7:3e:2a:cb:24:5e:72:62:
ab:cf:b0:a9:fe:8f:19:9b:4b:fa:65:66:00:e8:37:6f:b3:16:
12:f7:a9:94:53:6e:70:9d:dd:63:06:ff:30:ca:9d:51:f9:35:
4f:74:4f:f8:76:87:c9:d4:23:ca:d9:ac:fd:81:84:ef:3b:e4:
36:06:0f:a1:63:c7:ef:54:5f:39:e5:aa:74:aa:81:1a:8f:de:
64:8f:7f:4a:24:c4:7f:f9:0c:d7:ae:0c:cf:be:6f:2a:ed:60:
7c:19:39:56:a5:f4:94:1c:7a:69:b3:f9:72:ac:3c:24:a0:c1:
b5:48:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:27:51 2025 by rpki-client