Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
File: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft (raw, json)
Hash identifier: 1UgOcrGa16xUgIr1e/LzULgU2uGnvzz4H6m8gC4ZEWs=
Subject key identifier: 8B:85:85:42:C1:9B:7E:80:87:7A:8E:4A:3C:7A:9B:C7:2F:8C:0C:82
Authority key identifier: 9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
Certificate issuer: /CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Certificate serial: 019A7112DEC07D5EB43ECB84F7F670963D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
Manifest number: 0AB7
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: 7dGZOPsa1FU0C36WBDwIw7gL1Bo.roa (hash: 5etpC4MaJX7LndBCS5De3y9ecFGJX8+EfQl3ZBJ8rb8=)
2: m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl (hash: o1nfC7FtQ+oTyrK5UYgR/cgH66pW8UoxofgtXhJ9eoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:de:c0:7d:5e:b4:3e:cb:84:f7:f6:70:96:3d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bea3a3a4a3606c7396f15f501ac5c641785750c
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=8b858542c19b7e80877a8e4a3c7a9bc72f8c0c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:b7:f3:d5:38:49:a9:ee:a2:58:88:3c:1b:
36:48:9a:5b:29:12:d9:28:74:1a:dc:ea:d5:0f:4e:
3a:13:4c:e1:d0:bc:73:89:f0:17:c0:c9:c1:15:8e:
6b:ba:3b:8e:82:f1:52:e3:88:48:e1:5f:7e:73:ae:
99:86:22:0f:8c:b5:28:ba:c9:f4:b3:0e:8a:ad:8e:
4c:9e:7e:c8:e1:3e:46:64:ff:26:d7:3d:7f:76:e7:
fd:1c:fb:9a:d5:79:aa:5b:1f:f7:97:e9:06:72:67:
1d:de:33:64:c2:f6:17:a0:ae:3d:9f:35:c3:c2:6b:
9a:56:21:50:8d:14:df:73:1c:b6:cc:29:d8:78:58:
85:96:45:6c:cd:3b:bd:c5:bc:b2:7b:f5:13:a0:8c:
7f:86:d6:3c:83:e4:73:f5:a3:ad:28:78:89:60:39:
d0:32:51:09:54:f6:16:3d:15:91:6b:96:4e:32:c5:
18:b3:d9:b1:b9:7c:56:3d:0b:78:e4:30:4d:ed:8b:
ad:29:23:9e:d8:3d:47:28:85:b1:ec:e0:e7:0c:c9:
fe:ee:4a:c6:4a:08:3e:e1:d9:d9:35:84:6b:81:21:
5d:60:ce:02:22:ac:af:a2:8d:2a:18:08:82:5d:19:
c1:cc:04:36:27:04:30:6e:2d:cd:ab:d4:03:3d:f0:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:85:42:C1:9B:7E:80:87:7A:8E:4A:3C:7A:9B:C7:2F:8C:0C:82
X509v3 Authority Key Identifier:
keyid:9B:EA:3A:3A:4A:36:06:C7:39:6F:15:F5:01:AC:5C:64:17:85:75:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89abb8-636d-4084-81a0-c63adb6ee5d9/1/m-o6Oko2Bsc5bxX1AaxcZBeFdQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:58:03:d1:8d:d2:17:e2:d6:ce:68:b1:b8:33:ab:95:30:a6:
8b:24:4e:93:6d:d2:64:de:59:f1:f7:da:8e:10:fd:a0:ee:94:
36:a0:63:71:04:b9:56:39:db:d9:d5:e0:c2:ed:ce:b8:ba:8a:
93:8e:55:93:56:fc:7f:27:40:f8:f8:0b:b1:c5:12:db:4c:9d:
13:4f:0d:36:60:e3:e1:71:a8:69:58:19:7d:aa:15:df:95:fc:
d1:39:d5:d4:b7:e7:73:b6:db:4d:3f:d6:a3:c5:92:8d:08:4e:
e7:b7:1a:f0:f8:4d:95:e3:3d:e8:e8:1f:89:aa:30:30:0e:ec:
14:a1:eb:1e:7e:26:7a:e0:6b:ed:88:a8:5e:ce:d7:da:50:8f:
55:2e:55:dd:55:41:a5:b2:b5:22:f9:09:5f:cb:de:cd:8f:26:
42:01:5d:25:14:00:c1:20:72:3c:37:59:a3:56:2a:ea:fd:fd:
c4:88:16:89:87:6d:32:7c:52:77:71:4e:ba:ad:6c:05:e2:53:
f1:98:d8:14:5a:4e:4b:78:85:56:f5:78:d0:40:dd:00:a6:ab:
8f:b5:1e:0b:05:b2:c6:8d:2a:62:f0:4e:16:88:26:56:dd:51:
71:24:61:e1:00:39:d1:f2:5c:10:f3:d2:ec:fb:f5:e0:a6:39:
fc:7e:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:36 2025 by rpki-client