Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: ENVLLAY6BOostAeJuOLyadjVUYyP6qjX+pONstyHJyA=
Subject key identifier: 32:D5:C1:26:9C:24:DC:94:CA:B8:71:35:30:3C:2B:84:49:0C:89:C0
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 0199FC58C266D4E0B8FCDD766ABC19E070A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0B58
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: M7oaNlu/1NHbRvpvVsPlYC2pTc9HJOH7+KhRrnpWNaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c2:66:d4:e0:b8:fc:dd:76:6a:bc:19:e0:70:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=32d5c1269c24dc94cab87135303c2b84490c89c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:75:d0:f5:b7:21:4d:bc:f8:ee:5a:3f:6c:
3e:da:b1:ba:6e:9a:56:29:da:77:df:c4:f9:81:86:
ec:8d:51:79:ab:ea:a4:da:f8:b1:fb:f3:75:ad:32:
64:0c:d5:03:0d:03:a8:89:df:1d:25:74:9a:82:33:
53:bb:be:9c:b6:45:87:2e:c9:ec:0f:95:70:ab:b0:
be:db:bf:35:a9:14:7b:96:20:63:c8:c3:b2:6b:0c:
42:8f:97:74:4a:8f:b4:86:11:e2:88:59:04:1f:02:
95:8c:98:7f:4c:fb:22:56:24:9b:e9:ab:46:b4:bb:
51:51:80:1a:79:99:96:6b:1e:63:88:e3:36:72:ac:
1a:b3:d4:32:34:c7:bd:7b:4d:6c:10:89:22:30:bb:
91:c0:06:d0:0b:dc:c3:c5:de:69:c9:ef:8f:0b:eb:
db:6e:e4:e3:4b:93:17:c7:8b:0b:43:59:f2:06:2f:
8b:bf:7d:09:2d:ef:61:a9:0f:fb:d8:94:2e:ae:d0:
49:7b:c0:b0:6e:8d:8f:4f:9f:7b:fe:84:9e:86:f8:
39:72:57:dd:98:ae:d5:37:93:85:ac:53:f3:fe:52:
fe:d0:d3:c2:e9:79:97:4c:5f:fd:52:37:ea:69:37:
f8:f1:d5:87:bc:da:27:e3:20:5a:c5:b3:2f:5c:80:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:C1:26:9C:24:DC:94:CA:B8:71:35:30:3C:2B:84:49:0C:89:C0
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c1:3b:19:4d:44:09:b0:bc:fe:95:d8:ba:9c:51:3c:c2:e4:
17:60:f9:5c:0c:0c:5d:30:a7:77:e4:9c:a3:e4:fd:ca:4a:30:
ca:dc:da:6b:83:21:85:9c:f0:2c:17:6e:7f:ae:e3:ac:0c:a0:
a5:1d:f2:07:8d:63:a2:c4:08:7a:0d:7e:6e:f4:27:d9:c1:22:
01:77:a2:0d:75:b4:e4:cc:71:23:63:63:d1:79:dd:9b:a8:e8:
2a:c1:b2:e9:bb:11:ff:8a:69:ca:f9:ce:41:ce:b2:25:d9:fb:
9e:28:5c:ea:f6:15:d4:d6:ea:a0:02:48:e3:8b:59:9a:e8:4e:
02:60:dd:98:45:b8:f8:2d:42:ad:b8:f7:99:ef:30:d5:74:b7:
d6:c7:44:05:6e:e0:9a:8d:d5:d4:fc:7e:d4:cc:f3:37:bf:7b:
57:23:47:bc:60:59:ee:bd:17:57:89:6b:79:ff:ae:bd:dc:cb:
20:c2:cf:f2:2d:e9:67:26:44:8f:fc:a4:8a:3a:ef:01:04:b7:
83:58:2f:0e:8f:90:75:4b:90:96:bc:69:7e:03:ab:8b:d0:72:
70:9f:9f:dc:61:25:b7:53:89:01:eb:4b:80:29:a0:8f:be:7b:
79:42:ef:9e:fb:90:de:74:0d:be:47:89:66:94:9a:79:2b:8e:
dc:9c:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:40 2025 by rpki-client