Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: yKwmeccR10Yw0LbU5rrfRfHEvaIgntE6mEYRNcv3Anw=
Subject key identifier: 8D:C6:54:AE:F1:A1:A5:13:94:4C:E3:1F:4B:5A:BD:27:CE:EF:95:48
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 019A7149A7BF72A7E66DF3E579A2EF8FD42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 0575
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: iI9p5u0n/pnVi+jk5xCMaEa0jMUmZeGZPcRi+63A0Fs=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a7:bf:72:a7:e6:6d:f3:e5:79:a2:ef:8f:d4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=8dc654aef1a1a513944ce31f4b5abd27ceef9548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:50:db:d2:bf:bf:96:35:b3:3d:3a:b5:0a:
47:f7:a4:67:49:07:0f:a5:ca:be:07:c3:b7:66:9e:
f1:55:a1:2d:73:cf:d2:3e:be:c5:1c:b2:aa:3b:45:
8d:f3:68:60:21:25:04:dc:f3:53:86:c4:08:3a:b4:
8d:29:93:e6:fe:67:8f:0e:dc:15:28:f0:aa:23:91:
8c:37:db:85:09:bc:3b:98:06:a6:d3:20:e3:33:89:
62:7d:78:23:f3:c5:90:9a:54:99:5e:d0:2c:e8:c4:
28:7c:e6:d1:84:b3:12:17:62:7c:40:ba:b1:34:ad:
86:e2:36:35:b5:3b:6d:6a:5c:68:e3:03:46:9a:34:
cf:43:c7:e4:66:73:ad:03:25:f9:c9:3d:aa:7c:66:
50:40:3a:71:37:db:34:be:6f:9a:ac:e1:da:af:b3:
5b:86:db:11:39:0f:6b:cc:27:25:95:2d:ac:ad:80:
82:6f:4c:e3:cd:c4:ef:32:78:1e:99:40:fe:d2:a9:
69:e8:90:fd:b1:32:ef:b3:73:ca:48:18:66:15:ae:
02:9c:a7:7e:bd:33:71:be:40:08:ff:8a:5e:1e:69:
ca:d6:2e:75:e1:c2:fb:41:8d:4e:f2:07:37:51:5b:
e9:d6:b9:f4:66:50:6d:9c:ed:c6:25:51:69:1d:ec:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C6:54:AE:F1:A1:A5:13:94:4C:E3:1F:4B:5A:BD:27:CE:EF:95:48
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d7:3f:cb:4b:84:d0:62:03:9e:29:8e:06:72:e3:67:d6:7a:
ee:70:c1:c2:69:7f:f1:71:9a:1d:de:b3:0a:65:a1:60:30:2b:
44:db:b9:3d:5a:6f:72:d7:cf:4f:a6:98:96:86:8e:4e:7e:d9:
67:a9:62:8f:c2:86:fb:68:7d:36:99:fb:00:0f:1b:ec:41:5b:
7d:78:b4:2d:36:27:be:e3:e6:69:01:ee:8a:b2:35:a8:53:86:
25:1c:7d:aa:f6:9b:6a:d8:e8:f4:f5:64:79:0c:61:e3:8d:2a:
3e:9e:b4:b4:77:81:c6:5f:6d:d6:cd:78:e7:bc:b4:e3:82:80:
ce:2f:7f:90:d9:92:96:7b:3b:f3:ce:b9:ca:c7:2d:60:3c:95:
9f:db:2d:99:41:49:58:25:a4:92:ec:4f:0d:0c:18:d6:e4:54:
34:5a:99:e3:99:a6:1b:2b:dc:b7:bf:cb:7a:ac:79:43:80:3c:
2b:69:94:bc:0c:6d:b5:6c:66:90:38:4a:0f:db:d3:e3:cc:4b:
7d:26:78:50:ab:a0:03:c5:41:18:90:13:14:10:8c:ca:e6:60:
ce:58:bc:d3:19:63:0c:8d:19:98:d6:95:43:f7:af:db:df:ca:
7f:2e:4e:ee:a7:34:49:f5:dd:b1:10:e4:92:99:65:a4:98:52:
63:68:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:54 2025 by rpki-client