Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: 1MoRtK42H6OaKznL71bcA2cTMlMqTJisD80Kaz54TrM=
Subject key identifier: 96:AF:B7:F1:C8:32:B7:F8:B4:2C:1B:D5:3A:1A:53:ED:F9:FF:64:BA
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 019A006C79B5E6CE52FE99C7E9211C992D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 07:01:40 +0000
Manifest this update: Mon 20 Oct 2025 07:01:40 +0000
Manifest next update: Tue 21 Oct 2025 07:01:40 +0000
Files and hashes: 1: 1-9Z39awtCUNqeCcuYwIOQubEoEY.roa (hash: AJvelHrJ42adBWeCqNbgdbqaGB/A4YMI32J/x3+LlBI=)
2: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: N1o/OS6T3kRLbUM1H0ptwTbSGGx+c92gQqzU5J2XIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:79:b5:e6:ce:52:fe:99:c7:e9:21:1c:99:2d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Oct 20 07:01:40 2025 GMT
Not After : Oct 21 07:01:40 2025 GMT
Subject: CN=96afb7f1c832b7f8b42c1bd53a1a53edf9ff64ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:6d:ce:ae:f9:9e:b7:f3:de:24:b8:52:91:
f2:e3:6a:0c:b4:1c:aa:d5:43:18:12:1a:7c:c3:84:
29:90:bb:95:91:06:48:2f:9e:67:9e:da:21:cb:47:
c5:72:cd:8e:dc:24:26:2e:92:7a:23:7d:05:2a:26:
16:0a:86:ee:ee:bd:74:cb:36:62:14:e1:cc:99:fa:
97:c4:2e:41:70:a8:d2:9f:4e:1d:e4:a2:a3:f2:13:
4e:93:14:a0:d5:6b:a0:83:32:e8:81:0f:63:e3:8b:
6e:64:a1:0f:1f:20:90:83:1f:8a:92:a7:4a:75:bf:
fa:87:0e:fb:07:ab:c4:7f:d7:b1:d8:af:4e:5f:58:
65:74:aa:aa:ea:46:60:ec:c4:4f:b9:85:c3:65:46:
d9:f9:c9:6a:23:b5:f6:53:a0:c8:c0:b1:05:9a:0c:
16:34:cb:d7:a2:3f:cf:3b:1d:be:de:06:df:07:c8:
49:e9:09:f1:1c:48:b5:97:70:58:f9:6b:15:47:7b:
a5:c5:04:86:49:94:b4:38:5c:cf:e4:a7:a5:b8:a7:
89:1f:9e:2b:a2:03:5d:34:4b:65:c1:2e:5e:ae:83:
6f:9e:93:c5:ae:10:6a:1d:3e:6d:54:ee:d8:56:5c:
ad:c4:16:6b:45:e6:71:db:66:bd:8c:c3:08:e5:b5:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:B7:F1:C8:32:B7:F8:B4:2C:1B:D5:3A:1A:53:ED:F9:FF:64:BA
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:49:6b:25:e1:be:73:92:72:98:6b:85:4f:37:3a:39:86:2e:
81:23:1a:83:3e:62:7f:99:03:97:52:47:de:65:c4:5a:f0:bc:
f1:12:8f:20:ad:f5:65:c2:d1:a7:58:83:e7:b8:77:b6:6c:32:
e4:21:b9:64:7d:f9:bc:f7:6b:a3:69:9c:70:74:b1:a3:ac:de:
b4:90:83:b8:bb:8d:b4:98:37:0f:a7:e0:cc:5d:55:87:1a:92:
b2:ec:08:f2:66:3f:cb:b9:f7:f3:ad:c1:7a:0b:d3:bd:bc:0b:
b8:f4:a8:dd:02:a5:5a:ab:08:eb:4b:39:19:a9:9d:df:8c:bd:
4a:c4:36:2c:17:bb:9d:15:0b:64:f7:e2:fb:25:e7:2b:b1:9a:
d9:28:f1:02:0e:02:81:2d:97:11:c2:80:cf:dd:56:46:1c:2e:
ee:0b:bf:32:7b:ca:df:6b:71:16:09:47:7f:47:be:b4:d2:9f:
a9:c5:15:8a:ee:c9:05:e4:1b:f7:57:36:51:1f:ba:5c:07:0d:
55:0c:b1:cc:3d:64:9a:e0:ec:27:dd:45:6a:01:40:7f:76:c8:
c2:7d:c8:81:a7:bd:30:85:22:f7:3a:9d:8f:56:57:53:e8:c4:
5d:1d:8c:ec:2a:5e:6a:05:03:7b:df:a7:e8:f7:14:bf:8a:46:
f7:64:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:43 2025 by rpki-client