Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: 9OwLOiwRiRdoHP2lVtJyMfy37aoJssDVPDYFxm6cvnA=
Subject key identifier: CF:8D:6C:D9:76:EF:3F:EF:B0:75:03:02:16:A4:63:6B:D9:0C:11:E4
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 019A7225A84E083D92569950EEF3DBF4A568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: SEkT1DWoVMQoJHLnLqgUNNq42RjUQSiKWjZF4vQpn58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a8:4e:08:3d:92:56:99:50:ee:f3:db:f4:a5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=cf8d6cd976ef3fefb075030216a4636bd90c11e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3e:7e:a5:61:61:39:9c:d7:17:a1:0f:59:17:
f4:df:23:52:8d:d6:39:4c:83:9a:f6:42:9f:7d:eb:
f9:46:5d:a9:7c:be:6b:55:66:aa:a5:3e:e8:c6:6f:
0a:91:5d:90:63:ea:0f:e1:7e:48:d9:c4:cd:a3:94:
c4:23:81:a7:ef:3e:bc:1e:be:c4:d8:15:1a:67:26:
b1:22:b4:00:df:09:a1:78:36:5a:02:1d:9f:e0:b6:
22:b0:30:69:7e:a0:63:ec:c6:db:7f:49:d8:24:f5:
2e:f5:61:84:f4:2d:89:64:43:68:13:af:5a:31:4a:
07:5d:08:b0:de:32:2b:5a:a8:8c:d9:99:39:b1:53:
59:d2:bb:06:dc:da:08:c1:9d:fc:5b:96:13:af:25:
f0:cc:02:42:ef:ee:88:d1:3c:ef:83:d4:b6:d9:9c:
e5:02:7c:2f:86:99:7c:16:a0:fc:15:4c:d2:7e:b8:
b3:f9:eb:3a:76:ab:16:7a:e1:89:7a:ce:7f:d9:a9:
bb:27:84:23:61:a3:2f:1e:54:be:9c:e4:a3:0b:2f:
89:83:54:6a:fa:43:b2:b7:65:84:2e:df:e8:15:53:
af:1a:92:81:f9:df:72:27:6f:cb:ac:96:19:58:a2:
d2:16:55:6b:d2:d4:05:b2:af:70:7d:ff:5c:c1:ac:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8D:6C:D9:76:EF:3F:EF:B0:75:03:02:16:A4:63:6B:D9:0C:11:E4
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0c:96:c5:c3:97:b6:71:e7:8f:01:b8:ab:fe:83:96:cf:6e:
d1:c2:86:46:b6:76:92:b1:65:90:eb:78:e1:f5:75:e0:b7:b0:
f6:8d:9d:b6:61:d0:73:35:02:e0:20:9b:6b:37:8c:49:87:ab:
a0:5b:fd:a8:67:77:32:fa:54:de:af:97:11:e8:3d:44:90:93:
e2:93:12:24:81:33:11:e0:1d:f1:8a:46:7f:8e:83:8d:80:2a:
5a:20:e7:67:bf:91:49:16:53:da:98:93:56:57:57:11:d5:c4:
0e:6a:4f:8c:ad:f1:5d:2b:f4:6d:23:60:5f:30:3c:e7:0f:7a:
cd:a4:05:d2:65:fb:1c:d7:77:fa:ea:be:f0:b5:f7:9b:8f:c7:
43:44:aa:e7:20:c3:21:6b:30:e9:8b:99:cc:61:73:6e:12:25:
dc:f4:ee:38:5b:13:aa:8d:71:74:38:8f:a7:60:50:03:ad:b3:
56:c6:58:18:e9:91:d3:b5:a5:7d:33:a3:68:8e:e3:c2:d1:15:
62:3d:1e:8c:51:ca:8c:53:5c:7e:e5:b6:61:f4:30:ee:94:2d:
3a:48:19:54:19:05:88:db:9c:9f:ad:a8:8a:17:2a:54:ca:aa:
63:7c:78:d1:c2:b9:18:66:ef:1a:9c:8b:2c:0e:9c:d9:c0:4e:
7e:ba:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:07 2025 by rpki-client