Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: khfjCvCij/uP8vUkg5GJON9gi4E1XJSadvPB1fDQj3g=
Subject key identifier: 18:1B:36:9D:D6:F2:C3:2C:C8:CA:8B:2A:AD:88:A1:5B:23:91:57:62
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 0199FB460C84F5A6795EB8C39E74EE8E8A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 0FB2
Signing time: Sun 19 Oct 2025 07:01:35 +0000
Manifest this update: Sun 19 Oct 2025 07:01:35 +0000
Manifest next update: Mon 20 Oct 2025 07:01:35 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: i2qfiWT5loUpvCjMANTJFDzN3P31ofvrWK6SVSc2g3k=)
2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0c:84:f5:a6:79:5e:b8:c3:9e:74:ee:8e:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Oct 19 07:01:35 2025 GMT
Not After : Oct 20 07:01:35 2025 GMT
Subject: CN=181b369dd6f2c32cc8ca8b2aad88a15b23915762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:9b:b8:f9:e9:6d:39:77:45:48:c2:1b:8b:
0f:c6:e6:6d:63:dc:11:ce:37:3a:ab:d3:6a:d9:38:
4b:1d:7c:5f:bc:9c:40:ea:31:ba:f7:47:c5:91:47:
ea:cc:95:aa:f1:8d:93:bd:6a:6a:54:4a:b1:ae:cb:
59:df:d6:e8:7e:32:af:43:1f:41:57:b3:16:43:f7:
e3:b9:3b:8c:7c:df:db:12:c5:cd:16:e7:58:32:05:
a8:d3:d0:1b:97:85:1f:92:16:d5:e0:f0:7d:11:88:
26:46:af:6f:d6:d0:89:31:4c:b2:f3:41:f7:21:85:
e2:9d:d3:8c:f4:98:d3:12:84:c0:d0:3c:48:0f:f1:
5c:8f:6b:da:89:8e:3f:ff:45:64:66:c6:12:fe:a7:
75:da:a3:22:c4:ba:05:29:3c:12:7c:13:96:9a:c1:
6f:d9:f4:48:8f:fe:a4:ad:4d:09:52:45:4e:03:6b:
e9:18:c3:4b:33:76:bc:3f:d2:81:fd:27:fe:2b:d3:
1f:31:5f:cf:e6:56:13:83:6e:bf:f8:30:ab:94:a0:
0e:54:e5:c0:d5:27:50:16:49:41:83:41:d8:a9:27:
c5:2c:92:67:e3:2c:a0:44:70:7e:54:7e:93:24:04:
1a:9c:f9:e6:90:d0:a0:42:cb:a4:90:1e:54:ef:e5:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:36:9D:D6:F2:C3:2C:C8:CA:8B:2A:AD:88:A1:5B:23:91:57:62
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:08:85:ed:50:72:90:4c:51:31:30:db:d2:1d:c3:0e:72:c2:
4a:1d:b5:05:2b:3d:61:57:26:50:d7:e7:19:50:60:97:42:fe:
1b:cd:0f:7c:db:4d:ea:50:77:14:03:7e:e6:1d:4f:09:3b:05:
29:f1:0c:c7:7d:05:bc:25:6e:e2:2b:c9:77:d1:66:88:3f:ef:
e8:1e:67:3a:ed:6d:41:ff:b2:7b:65:83:74:dc:12:34:d4:52:
ae:4f:18:e7:4f:fc:3a:34:1a:23:83:ff:eb:cf:d7:70:6b:7a:
88:51:7c:8e:c8:ea:eb:43:3b:1f:db:bd:85:ad:71:aa:b6:ea:
c3:8f:ae:aa:87:37:c7:ab:99:eb:fd:5f:f3:3e:d0:6a:50:82:
a0:9e:c5:4b:47:e2:8f:92:07:1d:17:49:91:7b:0b:71:2a:9d:
18:a0:f5:13:6d:2d:17:9c:13:94:34:f9:5e:af:91:af:29:16:
7b:b9:a1:db:7a:21:80:50:97:40:b1:b7:24:3f:47:8e:8a:1e:
d0:4a:f0:ea:db:fd:f3:aa:04:c3:5a:35:94:6b:e8:1c:99:18:
eb:8f:5a:90:41:fc:cc:8e:c1:f7:53:1b:17:c7:48:95:99:ee:
fa:eb:ab:08:6b:de:a1:7a:5a:e8:af:d3:47:28:22:7d:3b:da:
16:bd:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:41 2025 by rpki-client