Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json)
Hash identifier: YssAhn575OM2sNC1fvub9qzqheXF50dCEk9FDIhUYGY=
Subject key identifier: EA:F1:EE:2A:47:4E:AA:53:07:BF:91:4A:35:5F:D9:43:AC:17:70:AD
Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3
Certificate serial: 0199FBEC16BCCE6F84BAA91AB21D3B98A219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: DUwbAiAqoceTbqCxLbOmAZdaXblEwgQw/pIxNLrU6Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:16:bc:ce:6f:84:ba:a9:1a:b2:1d:3b:98:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=eaf1ee2a474eaa5307bf914a355fd943ac1770ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:7c:b4:78:28:71:8c:15:2c:8d:94:8d:39:
45:e5:4c:9e:8c:22:69:3a:df:00:a0:92:f5:14:74:
c8:fa:7b:72:49:43:9e:83:d8:31:bd:45:25:b1:51:
63:44:3e:c2:04:20:0a:50:39:e4:5c:81:26:a4:35:
ba:a0:a9:e4:fc:9a:8d:90:1e:47:0f:2d:79:e8:e6:
6b:eb:8f:d7:17:3f:f2:51:75:96:f3:71:83:77:ff:
0e:63:18:d8:63:a0:d5:5d:50:a2:55:20:10:7b:6e:
fb:81:53:08:4c:91:7a:eb:7e:0f:ac:0a:62:ca:e8:
4a:db:df:c5:14:2f:d5:ef:a0:d8:24:17:18:16:a9:
7f:a1:5d:5b:c1:29:37:de:5f:58:e7:83:80:2b:c0:
ee:99:79:bd:41:f6:d3:6c:75:c7:58:d7:2f:b6:5a:
94:be:0b:c4:98:74:b0:f2:ec:a1:c7:8a:a1:4d:e4:
54:7a:a3:5d:66:72:90:ab:bc:02:b6:6a:68:46:73:
eb:ad:5d:78:a6:11:fa:5e:66:d2:2b:eb:ac:30:20:
6f:f1:84:e6:e9:81:33:b1:a7:be:ac:8e:f9:27:8e:
b1:f9:f6:49:6e:81:ed:9e:f7:78:40:cf:9e:b4:bc:
4d:51:29:2d:30:27:72:01:73:41:03:54:dc:26:fe:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:EE:2A:47:4E:AA:53:07:BF:91:4A:35:5F:D9:43:AC:17:70:AD
X509v3 Authority Key Identifier:
keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:10:4a:3f:b3:ff:0c:fb:74:95:71:1b:06:82:c8:f1:a9:f3:
04:75:fb:79:a7:1b:2b:fc:1a:40:99:ce:85:c5:b3:d1:c6:37:
1f:e8:56:5c:51:96:d6:2d:78:66:e7:2f:d7:95:a7:7b:0f:09:
b8:a6:7a:76:76:9c:5c:9f:98:48:d8:da:a2:01:3f:e2:6f:fd:
ef:9f:d2:50:7f:5d:44:ae:3e:9e:4e:25:4f:f4:1f:1e:e6:88:
57:b9:1d:e8:24:a2:0d:12:5b:95:6a:a8:bf:4c:d8:c5:1b:99:
b5:d5:dc:30:2a:b4:c9:64:f0:33:6e:8b:5a:2b:44:7a:00:da:
a8:7b:da:ee:cc:a3:71:f8:6d:8a:a6:08:c9:24:fa:83:71:c1:
56:2f:b4:79:7f:fc:97:34:da:a1:54:ce:e2:b2:46:ed:53:e4:
cd:4b:c8:93:43:ee:5e:a2:d4:d1:63:8f:06:a3:3d:ab:2c:b1:
20:ca:ad:c6:32:1f:da:fa:39:0c:cf:c0:96:17:ed:62:aa:c0:
e0:2d:32:fc:7d:02:84:43:96:4b:6b:d1:a3:68:49:70:38:dd:
77:9d:89:f8:4e:9d:a8:ff:33:4d:48:14:4b:40:de:90:d1:54:
ac:29:78:d4:ca:fd:0e:40:3c:fb:b3:db:21:74:ef:44:24:3a:
c0:35:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:50 2025 by rpki-client