Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: 3HYT1P6dR/ux+ljNlrS4iUAqG8tAfbABa2HehOQc8EI=
Subject key identifier: 85:67:EC:1E:6F:C6:BF:C8:42:DD:48:98:E4:A8:D9:E3:20:6F:D9:89
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 0199FD6B6A6C8A4A1B57BD7E30D7E9A554FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1331
Signing time: Sun 19 Oct 2025 17:01:39 +0000
Manifest this update: Sun 19 Oct 2025 17:01:39 +0000
Manifest next update: Mon 20 Oct 2025 17:01:39 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: sAiQgOJ1cSFvlDRsxvVpsnq09uM5X2ZrD2rAo2zK8Lo=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:6a:6c:8a:4a:1b:57:bd:7e:30:d7:e9:a5:54:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Oct 19 17:01:39 2025 GMT
Not After : Oct 20 17:01:39 2025 GMT
Subject: CN=8567ec1e6fc6bfc842dd4898e4a8d9e3206fd989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:1a:c3:e7:38:eb:01:85:72:32:56:3f:f2:
93:c2:8f:15:9e:8e:0f:82:7b:18:6e:7f:9f:b3:8e:
35:b6:3a:e2:32:bc:95:af:e8:be:a3:a4:7a:35:16:
0d:79:dc:d0:57:09:dd:38:30:44:8d:4b:ed:44:de:
93:0d:b6:7e:4f:57:e7:b1:e1:b7:35:7d:20:90:14:
70:2e:35:e1:ff:a6:dc:14:de:c7:d6:c2:72:8e:e8:
99:e5:a0:5f:7a:35:9c:47:31:20:d2:4f:29:82:c4:
a3:12:fa:4b:b7:7a:9e:29:a3:dd:ad:e2:49:57:85:
e5:4c:38:32:8d:5d:9a:49:4c:28:60:d5:ca:8e:81:
4a:a1:0f:e7:f8:1e:1a:ba:86:ef:0f:8e:67:ac:a6:
56:be:19:cc:ac:da:69:42:61:b9:89:ef:e9:dc:2b:
2c:dc:12:51:51:20:c1:59:a7:46:bc:b1:9a:a9:0e:
4e:50:8a:42:28:d7:1f:41:3c:37:27:ad:b5:e5:79:
91:a0:0d:dc:b7:4c:8b:62:2e:db:33:f6:d7:0c:98:
5f:70:1b:6d:29:53:16:18:d5:0b:ff:61:d1:6f:ec:
f7:5d:57:ea:13:6c:10:59:e0:cc:69:f7:59:3f:cf:
4c:10:87:55:cb:ee:31:eb:14:0f:d0:fb:49:bf:c1:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:67:EC:1E:6F:C6:BF:C8:42:DD:48:98:E4:A8:D9:E3:20:6F:D9:89
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:57:08:e8:5c:ed:25:67:ad:c4:62:aa:4f:fe:2e:70:1f:22:
5c:f0:77:d5:15:8e:4a:f9:8a:85:c0:dc:d9:85:a9:51:e0:de:
b6:44:b7:98:e1:f3:e7:41:18:b6:59:91:e9:97:9a:15:e5:75:
af:4e:c6:c1:4e:1e:e3:22:31:80:c6:c0:ed:cf:92:91:54:0d:
61:a3:5b:17:62:5f:b8:95:9e:d1:6e:0d:41:33:f3:cf:f7:7f:
82:29:5e:52:da:6c:dd:97:c5:63:e8:c8:a5:5e:05:c8:cd:0d:
44:91:92:8e:1b:67:36:2e:03:48:39:a7:d0:ef:9b:c4:d3:2f:
a1:f8:e9:be:b9:f7:eb:d3:db:bd:c2:a0:55:b6:01:fd:79:93:
ee:39:9c:18:75:20:ea:84:dd:97:a1:db:32:77:e3:c1:84:d6:
ac:00:e6:38:f2:f3:28:7d:bd:00:04:3d:36:33:bf:d8:e4:2c:
84:3d:72:4d:75:66:4b:f8:e5:60:77:23:fb:b3:0f:d1:35:a9:
65:87:e4:d9:e5:48:48:86:2e:0e:81:ed:19:db:6d:cf:48:fb:
df:5e:25:a9:65:09:84:60:d0:fd:16:9f:e1:90:92:92:8c:b5:
03:c3:89:a5:cf:4e:7f:84:b4:12:8b:59:c1:9b:a5:eb:3d:c4:
78:e3:ca:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:01 2025 by rpki-client