Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: z3gioz9XCKyUDIxCOri3jOeQtt7X3nOQN6U84DwIDRI=
Subject key identifier: 23:36:32:DF:EF:DC:D4:AA:99:90:2D:FB:EC:15:6E:B9:C1:51:7A:B1
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 0199FBEBD276C9A8E9D61E96A97DB82DEC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0C6E
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: OPnFTlm4CZauw6niW5MoWkjf/dUashe6AC64LntNPvw=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d2:76:c9:a8:e9:d6:1e:96:a9:7d:b8:2d:ec:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=233632dfefdcd4aa99902dfbec156eb9c1517ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:ad:98:9b:83:6f:b1:61:44:68:8f:ea:bd:
73:04:1e:53:cd:3c:20:61:0b:69:8a:0e:35:d9:37:
ad:17:35:e9:64:ef:bc:55:f3:f7:52:99:19:44:b4:
e7:34:bb:3b:b7:86:9a:eb:bd:a9:20:bd:b6:22:ae:
1c:61:de:fb:74:f9:18:4d:ff:c8:f2:93:89:9a:6f:
29:43:01:1c:3f:9c:1c:a2:bc:1e:5b:1a:4f:04:27:
8f:2f:6f:4d:0e:a8:b2:9e:f1:f2:ba:e6:4a:15:46:
12:19:92:04:b6:6c:0b:8c:f7:b9:19:74:e2:31:2e:
99:84:fb:57:0f:6f:96:64:de:6c:b4:6d:d0:43:03:
72:2e:7f:4a:80:51:11:65:67:21:c8:75:85:69:6a:
3d:d3:2a:6b:c9:49:c6:c0:67:f9:63:40:a7:e7:1c:
7e:dd:ec:fb:a8:e6:a9:90:c6:17:b5:21:76:e2:1f:
4e:a9:f7:00:a0:6c:9c:ce:11:0a:74:ae:c0:29:39:
e2:92:f5:5e:c1:73:32:e7:a9:1e:cf:dd:f9:34:e1:
32:91:5d:47:d1:a1:48:92:21:fb:b0:5b:ef:67:c9:
9c:97:e8:5a:7e:28:26:39:63:cd:3c:da:59:52:62:
e3:e8:6f:45:38:59:67:08:91:dc:8d:71:95:b9:1b:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:32:DF:EF:DC:D4:AA:99:90:2D:FB:EC:15:6E:B9:C1:51:7A:B1
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9f:08:1b:0e:f9:7e:d5:57:da:2d:31:30:9e:fb:0c:6a:a0:
b3:f9:b1:3c:98:0a:67:8f:4a:42:d0:03:9d:75:07:ed:f6:c9:
f5:84:d2:0e:c0:97:fa:48:c8:eb:98:5c:0f:98:e7:2c:63:17:
51:14:fd:9e:a7:15:40:04:ee:91:91:9d:15:2c:ad:ee:2a:6c:
9b:1c:85:87:1a:03:77:92:76:fa:cd:dd:e6:15:5a:5c:90:d2:
ab:e2:4f:2c:ae:10:14:45:e2:b4:94:90:e1:ec:21:9a:5d:dc:
76:ba:6f:e4:17:07:b2:38:8d:fa:f0:7d:d8:31:79:9a:4a:00:
4b:c5:fd:c0:15:92:a3:d2:67:ba:3b:b7:58:e8:42:ef:70:0a:
87:a2:3c:b7:9d:42:15:31:30:2e:b3:90:72:6c:e3:78:d8:2f:
ef:33:01:fa:f1:71:45:cb:6e:72:87:04:a0:d0:55:07:24:6b:
a2:55:90:e3:20:10:ca:9e:12:64:70:db:69:e5:4e:e7:d1:b9:
39:b6:a8:ad:bd:a8:33:fc:d1:a3:c9:50:19:01:ae:51:71:6e:
9b:9a:ac:90:92:50:a0:96:6f:24:f9:85:35:8a:10:2e:6f:f7:
02:84:78:70:f6:87:70:ae:76:50:73:32:b4:2d:54:23:c3:13:
58:b6:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:10 2025 by rpki-client