Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
File: O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json)
Hash identifier: /oqRqQU4E4qP5nACy4eADPqN8mo4Y+y95JK2WAryyWs=
Subject key identifier: 74:D8:97:05:8E:F0:BB:EA:47:0E:D0:37:00:62:82:D2:DF:65:8A:DC
Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Certificate issuer: /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Certificate serial: 019A71B918B44AF124B194BC6B79FA2358E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
Manifest number: 0E79
Signing time: Tue 11 Nov 2025 07:02:27 +0000
Manifest this update: Tue 11 Nov 2025 07:02:27 +0000
Manifest next update: Wed 12 Nov 2025 07:02:27 +0000
Files and hashes: 1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: es6jxnlqoxWTWj9xP864P+7mDK5bIwr0tWebbo6L8iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:18:b4:4a:f1:24:b1:94:bc:6b:79:fa:23:58:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Validity
Not Before: Nov 11 07:02:27 2025 GMT
Not After : Nov 12 07:02:27 2025 GMT
Subject: CN=74d897058ef0bbea470ed037006282d2df658adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:81:ba:0a:41:79:ce:2b:72:bc:9c:ec:62:
4a:e4:86:69:bf:81:49:51:d6:df:0e:61:f0:be:d9:
ea:6a:48:61:a2:2d:f6:02:82:74:64:ac:e3:32:75:
b0:fd:5f:32:9a:83:98:05:d2:b6:37:75:03:fb:03:
aa:0d:34:3d:0e:07:a6:a6:c5:b5:4f:a9:17:4a:3f:
4e:59:55:b8:e1:c7:bd:8a:06:c1:08:73:68:36:87:
b4:4a:2e:22:f9:cb:b7:00:f9:75:12:56:ea:d9:94:
bd:dd:e0:4a:c3:03:92:9c:95:5b:49:28:24:20:1d:
72:c2:36:53:c3:9c:51:29:7b:84:26:cd:39:37:fb:
4a:f6:09:2e:68:64:c9:8d:67:9f:3d:c9:8e:55:b1:
7c:c3:31:7f:cf:74:c3:95:e6:df:e9:93:2d:eb:28:
bb:67:e3:65:34:f0:54:9f:80:5a:94:1a:2c:71:4c:
ed:a8:8c:56:27:bc:36:37:f0:69:5e:b2:16:93:3a:
36:6c:1c:c7:c3:7a:b0:3f:34:90:e7:37:f8:b1:33:
6b:1e:fe:2a:43:f6:c5:e8:be:32:60:a9:b7:59:3e:
a0:36:79:b8:26:84:24:1c:0f:0e:ed:81:ab:a5:d7:
6f:ef:a2:bf:6a:18:f6:c4:53:9d:19:7e:0b:21:e6:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D8:97:05:8E:F0:BB:EA:47:0E:D0:37:00:62:82:D2:DF:65:8A:DC
X509v3 Authority Key Identifier:
keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c9:09:1a:a4:c8:7c:f9:17:02:6c:dd:8b:1f:6f:f8:d9:19:
d2:5b:7f:59:c8:20:17:16:9c:8f:d5:27:3e:f8:7f:e1:2e:9a:
c7:b1:0f:0b:4c:1b:be:91:50:df:e9:4e:af:b4:80:60:16:9b:
b5:ad:a3:e7:a3:da:8a:e7:2a:a2:27:54:b8:8e:58:62:e1:5e:
72:83:f2:8b:51:58:64:4b:b2:8f:27:a1:b9:ef:5a:83:b1:f7:
45:8a:da:48:c7:d3:25:eb:2b:24:3a:71:65:74:5c:4e:02:d2:
5b:5b:b9:39:a9:b1:b7:be:08:d2:9f:f6:52:7e:93:54:37:0c:
00:c0:8c:99:d5:a3:1a:d6:0c:9e:2b:08:66:0e:c6:5a:fd:b8:
ae:b7:e7:ff:39:6a:f9:84:45:35:3c:ad:94:e0:06:57:02:9c:
be:bb:cb:c7:7e:8f:fa:20:52:4f:77:1c:f8:60:8c:56:ee:3a:
9a:6e:9a:bf:65:6d:77:1f:07:61:f1:5e:89:ae:fc:4d:a3:a9:
0c:37:bb:d9:44:9c:b5:6f:20:c4:5a:04:fc:96:c1:70:7e:78:
8b:9a:63:0b:7f:c4:c4:9c:f3:fe:e5:79:06:60:ca:71:50:ce:
22:d7:01:78:86:0a:ba:ff:df:e0:33:66:b4:e4:bf:e1:f0:91:
81:e3:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:15 2025 by rpki-client