Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: s+TSoJrzyeiSuwJKyBI1Gf5WjvTn/pnYx2mcAo53DG0=
Subject key identifier: 7F:6A:41:36:16:59:5A:C4:62:C2:D8:77:8E:09:19:B5:0F:47:1F:CA
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019A258A5BF4350D69987BB3C6A730AA6101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 1076
Signing time: Mon 27 Oct 2025 12:00:15 +0000
Manifest this update: Mon 27 Oct 2025 12:00:15 +0000
Manifest next update: Tue 28 Oct 2025 12:00:15 +0000
Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: qKAuolJdhpFw9i5zgtjeE4HiVIJQYYb/g9BiO8MmDkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:5b:f4:35:0d:69:98:7b:b3:c6:a7:30:aa:61:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Oct 27 12:00:15 2025 GMT
Not After : Oct 28 12:00:15 2025 GMT
Subject: CN=7f6a413616595ac462c2d8778e0919b50f471fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:0b:c7:6f:36:52:b8:fc:92:c3:b4:ce:54:
d0:92:22:4a:bb:ef:96:4a:b4:5b:d4:6e:7f:86:61:
a1:44:d5:04:9e:83:eb:50:cf:0a:3f:e7:3a:db:87:
54:1b:7c:40:fe:9a:e7:7a:b6:05:f3:d6:be:00:b2:
87:2f:ef:41:c0:53:d5:21:7c:a6:ed:5e:d2:ef:f0:
03:40:b9:65:69:f9:e0:53:36:6f:b9:60:55:fb:6e:
10:1e:72:fe:0a:e2:67:b1:50:e9:2f:d9:45:02:f5:
81:fd:b7:76:f2:59:c6:b1:c5:1f:ed:fa:41:dd:a9:
4b:f9:6e:5b:cf:89:02:6f:b8:46:35:b7:a9:be:6d:
fe:9b:fc:19:70:ff:35:82:23:6a:b4:c9:fc:77:00:
52:be:ce:fd:20:23:7d:e3:a4:52:0f:28:63:6e:ed:
4b:38:8e:02:4d:11:dd:58:bb:b2:da:9a:4f:11:8e:
ac:5c:a8:2e:7f:20:fa:d3:3c:b7:ab:fb:01:6a:b3:
d3:bc:b3:9a:2a:96:e0:80:3c:64:95:bf:dc:0a:dc:
7d:8f:8a:00:1c:2a:fa:fc:c8:32:bc:8c:df:ca:d5:
d3:28:8b:e3:a4:f6:17:f5:2a:a2:3c:10:fd:c6:78:
8b:e3:fb:e1:f3:16:92:c6:99:fe:43:3e:3e:bf:5a:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:41:36:16:59:5A:C4:62:C2:D8:77:8E:09:19:B5:0F:47:1F:CA
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8c:b9:2a:1e:bf:2a:e5:12:0c:79:1a:ca:cd:7d:97:98:aa:
a7:14:2e:cd:3e:f4:3c:e5:d7:ba:bd:2c:b1:5c:f8:fb:f5:5f:
37:14:bd:81:6b:bd:c6:b9:79:88:a2:97:bf:98:e7:c0:81:7a:
8c:35:bc:a0:b0:62:f8:58:8e:49:d3:4a:ae:28:35:60:ca:96:
d9:83:b7:e6:a5:8b:34:7b:c0:74:21:85:89:d1:4d:1f:a4:f3:
f6:20:54:54:07:ff:3e:41:0e:bf:17:fd:8b:3c:bf:4e:d7:bf:
18:56:dd:89:91:08:bb:67:f4:0d:a7:89:78:68:7f:25:08:89:
ed:a1:36:f4:2a:1d:e3:02:b9:22:ad:fb:2b:df:2e:27:2c:09:
cf:9f:48:81:ae:1c:e0:98:d7:97:09:55:44:3c:5e:09:01:30:
eb:9d:af:07:d5:9f:35:b9:55:da:13:b0:a2:71:30:76:2d:b2:
a0:be:98:07:a2:35:1f:38:26:e6:22:7a:2b:68:03:31:dc:44:
49:81:4b:de:43:32:a3:a9:e4:30:66:04:4f:3a:45:91:e4:4b:
01:da:58:29:1e:29:79:82:f8:00:97:1e:2e:15:33:a2:0f:b2:
b9:4a:2e:05:5b:81:bb:60:0c:2b:fe:60:b3:11:9c:86:a9:66:
05:07:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:02 2025 by rpki-client