Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: OdSDDboRITnewaRqvLvebZU4BaVla2ITtulxSrJsEWU=
Subject key identifier: 1A:E7:49:B2:9D:08:41:93:76:EB:37:AB:BC:F9:4B:3C:2A:B8:EC:74
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 0199FB7CC094211646F896CA6896C42C36BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 0473
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: VFAgLnvzHp7JRdyHjskpdHzBKxLnIEmzR0JflYhzFwg=)
3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c0:94:21:16:46:f8:96:ca:68:96:c4:2c:36:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=1ae749b29d08419376eb37abbcf94b3c2ab8ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:ff:5b:e2:00:5a:54:88:0d:94:b6:7e:0f:
53:ce:a5:1e:1e:d7:28:0c:d4:b0:b1:ce:2b:ec:74:
44:72:ce:5e:18:19:5f:f7:f3:fd:53:a4:ce:b2:f7:
dc:9f:25:75:e5:34:0d:d0:92:f9:9a:37:aa:e0:52:
6e:66:1c:9d:60:23:42:a4:7c:bb:4d:6f:78:b1:21:
3b:ae:6e:ec:d6:99:68:86:ce:c0:6f:0e:12:62:c4:
24:32:9d:a3:5d:89:72:b5:7f:81:11:64:56:a5:5a:
3b:85:0c:61:5b:ed:b4:89:2b:18:db:09:53:57:50:
54:75:d3:41:ba:32:9f:07:3d:67:1a:fa:dc:4c:96:
2b:11:1f:55:33:a4:0c:18:cb:f2:3c:26:86:e0:a5:
91:50:57:2e:6b:82:11:c9:91:07:78:57:49:97:2e:
fd:39:4f:ad:0d:66:d1:00:da:19:e8:63:96:09:3b:
5d:fe:12:5d:f3:2d:7b:e5:29:39:e5:5d:af:78:c8:
45:02:54:06:7f:47:cc:5d:8a:03:3e:59:2d:80:76:
7a:e4:75:59:9a:4d:65:a1:28:f9:39:1a:be:15:54:
f3:4a:fa:e6:e0:ed:89:4a:f1:e9:af:7b:5e:54:f0:
5b:66:b2:f5:a1:69:fa:a7:8a:52:a4:94:8a:a8:b7:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E7:49:B2:9D:08:41:93:76:EB:37:AB:BC:F9:4B:3C:2A:B8:EC:74
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e3:2b:20:e1:61:f3:13:2a:d8:4e:46:9a:1f:14:61:ac:08:
98:29:b1:32:85:aa:70:53:18:11:d3:93:a4:d5:1f:3f:64:c1:
ab:d7:07:ea:b5:74:fa:ae:68:02:b8:df:4b:56:ca:12:b7:72:
64:74:f2:d0:0a:7c:15:13:71:53:54:98:b3:54:0d:9a:45:fb:
19:c8:8b:b5:7c:db:a8:32:c9:40:e1:25:f5:9c:ee:3f:1f:1e:
d5:84:cf:98:55:04:12:25:50:1d:df:10:10:fa:0b:5d:7c:cf:
0f:50:00:26:96:9f:ab:5e:03:fb:f1:ae:aa:17:9b:76:c6:e2:
66:21:5e:dd:24:58:4b:79:e6:70:8f:52:d5:7f:8a:a9:8a:a6:
e6:40:ec:81:22:fd:57:24:64:a6:04:5a:bd:23:3f:44:65:d6:
56:7b:41:45:bc:7b:52:e1:26:ff:f4:6e:6a:fa:8f:48:97:ad:
5e:9d:47:97:38:5c:54:63:c9:69:07:d3:a8:93:f1:81:e0:ef:
a6:fa:fe:d0:fb:c0:5b:61:ca:d7:47:58:49:66:55:e1:36:1d:
65:ae:7a:51:df:05:ae:ae:0e:18:ff:46:5f:c8:30:f2:81:a5:
f5:2a:ea:af:41:ca:a6:b1:a2:0e:92:4a:ab:0c:f9:73:94:ff:
8a:ef:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:10 2025 by rpki-client