Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: oyGKFyaZfKA1MKeM5rpuswLC502bTVfYsurQClZW5s0=
Subject key identifier: 35:70:8C:D1:E8:4C:B0:56:B0:2F:D1:D1:34:7D:4F:21:C3:83:E3:1A
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 0199FAD7CACC36B5C6CDA4272C96EDE5DE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 0D65
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: 0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa (hash: GFF2i9DOD9iNc83o9PQkrJQokdzx6TTVi4lrSIyhIgE=)
2: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: CIAjae2D63rLZMnTdDO3BtlTgisFe5xl5S+vmR5fjzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ca:cc:36:b5:c6:cd:a4:27:2c:96:ed:e5:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=35708cd1e84cb056b02fd1d1347d4f21c383e31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:97:58:f0:e1:de:58:b7:5a:cc:ab:43:9a:
03:ac:e5:dd:fa:0b:29:e9:c5:11:90:38:cb:2c:cf:
b1:bb:44:a4:8f:b2:c4:9e:11:16:ce:f1:0b:0a:c0:
a9:52:97:98:86:13:9a:15:f3:55:61:8b:72:5c:d7:
a0:3b:ab:9a:ef:5f:f7:30:b4:06:65:3e:03:56:36:
40:a9:6a:f5:c4:cb:a6:91:68:db:67:d5:5c:98:24:
0a:11:ef:64:cd:f8:4b:a9:4c:32:f5:1b:6e:6a:3d:
62:0c:a3:ca:26:3c:6b:3a:da:42:db:75:64:60:a7:
89:c7:0a:3b:8a:45:89:83:b9:06:ad:72:3e:b5:db:
7f:93:84:7f:5b:a3:36:04:d7:0c:f5:f8:93:d7:be:
d3:73:60:bd:cb:d2:bc:76:3a:1c:c2:b7:3c:02:97:
c0:fa:5f:a3:1b:a2:27:06:1b:9e:1a:41:78:a2:16:
e9:91:1d:2b:fe:50:27:c1:c1:12:f6:43:28:5b:33:
97:de:22:62:71:82:6e:d1:6c:1b:00:99:c1:c8:4e:
9d:97:0a:27:e9:c0:ea:7e:ea:67:86:cd:e5:6d:c8:
51:61:c9:0e:37:11:01:0d:30:95:2a:4a:de:73:0f:
e6:70:85:d4:b3:3d:dc:ce:e4:1b:5d:32:a6:35:b9:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:70:8C:D1:E8:4C:B0:56:B0:2F:D1:D1:34:7D:4F:21:C3:83:E3:1A
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d2:e6:50:07:3a:b7:20:ed:1a:79:62:42:22:2d:a0:0c:1b:
07:2f:f2:03:93:6b:5f:ce:a8:5d:0c:02:e6:c0:a9:40:c7:68:
c8:7e:05:cc:ab:90:92:54:43:76:08:55:76:0d:14:b8:dc:84:
28:79:aa:0d:19:2d:58:bb:41:77:d3:fb:64:51:ce:b3:3d:f5:
26:b9:ff:0d:e6:85:f2:ea:87:f1:ce:37:48:63:60:00:4a:18:
93:b4:44:cd:ea:0f:33:51:02:26:73:48:54:e4:d7:4a:26:db:
1a:8e:d2:cc:8c:53:78:84:e0:bc:6d:aa:bf:69:8b:87:86:ca:
40:3b:9d:f9:e6:cf:92:12:57:2f:d9:57:9f:0b:0c:a3:81:17:
35:23:ea:2e:0e:9f:ab:b1:87:59:a9:12:55:d1:94:42:84:4e:
35:1d:33:9b:17:dc:91:bd:d0:98:aa:00:a0:2a:c8:d7:2c:41:
eb:55:89:f4:79:a2:10:fc:c0:54:d1:50:92:1b:b4:5a:e9:31:
92:af:f9:51:21:2c:9e:9b:79:96:21:f6:76:0a:44:f1:ec:ce:
2a:26:75:0a:0c:4e:12:cb:fe:09:31:7d:3c:6c:9a:fb:cd:f4:
31:d6:9a:7a:86:90:6b:85:27:69:f9:fa:21:00:b8:5f:85:65:
e3:2e:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:36 2025 by rpki-client