Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json)
Hash identifier: 1wTGq+yrt5h8RQYzg7EnTdgXo8Gz4EPkVw4J1ferFbM=
Subject key identifier: 5E:51:BA:1D:BA:8F:13:2A:DF:E0:23:69:3F:1F:20:84:B8:A1:FE:6A
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 0199FD349C14BD8BC4DC531191E96CE2CE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
Manifest number: 0B1B
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: V7OQ+/vfjmSEwf46VuC2HbkqI3WKnG8dD0L6/gZTGVE=)
2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9c:14:bd:8b:c4:dc:53:11:91:e9:6c:e2:ce:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=5e51ba1dba8f132adfe023693f1f2084b8a1fe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:cf:ed:33:56:a2:e7:14:b3:4d:81:3e:2e:
75:cc:a7:87:35:b7:1f:2a:0e:3c:72:a9:2c:0e:ec:
0c:0e:94:df:d7:8f:72:1e:43:78:16:fc:80:bd:33:
c0:b8:c9:b5:c8:61:d3:95:00:5c:7d:93:95:a8:9a:
b7:fc:67:98:27:60:43:d3:66:48:9d:72:67:ae:d6:
05:b5:e8:a7:14:2f:cb:18:c6:25:8c:b5:ee:de:da:
d9:c5:e4:1e:13:88:b7:0b:40:72:7c:e4:5b:8a:a7:
5a:df:fa:be:c7:08:c8:f9:27:03:1a:f4:58:a9:af:
63:dc:60:ca:5e:2e:ba:66:6a:68:b5:07:fe:92:46:
a3:9a:a2:5f:7f:eb:d7:c2:c2:66:2f:c9:3a:c5:17:
ed:af:fc:47:c5:69:44:c0:62:53:3f:0f:aa:47:db:
50:3c:f7:1a:f4:fa:d1:ab:34:56:e3:84:74:f9:fe:
28:ba:20:d2:29:e0:fc:d7:5d:49:eb:71:4d:a8:15:
3a:57:6e:41:1b:4e:01:43:4e:c2:95:a8:f7:39:18:
5e:53:1a:6e:62:61:cc:15:c3:1e:4a:f4:4b:38:71:
a3:e3:86:e1:8d:d1:c9:35:f0:fa:0a:ce:9b:d3:85:
9b:35:02:31:b8:d0:e4:de:68:be:b0:a6:5c:bc:48:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:BA:1D:BA:8F:13:2A:DF:E0:23:69:3F:1F:20:84:B8:A1:FE:6A
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:a0:ca:dd:97:14:b7:ed:d5:1d:b1:5c:b6:ad:c2:3b:1d:
46:64:5e:e6:3b:58:07:c8:78:18:32:b5:f5:b2:99:f9:f0:06:
47:db:c5:1c:9b:08:5f:b6:65:e3:6b:e1:c0:ad:f7:23:42:f6:
6e:58:36:ac:2e:00:0d:d9:f9:b4:16:05:3c:8b:c1:10:e1:a3:
f9:d4:20:f9:47:c1:48:26:72:6b:f5:4a:ca:a8:59:58:5d:78:
68:69:55:77:88:19:5c:87:4b:4c:0c:a7:db:b5:0a:fd:c2:eb:
68:db:3e:cb:73:d8:f8:da:cc:e8:6d:f0:c4:16:93:8a:47:1a:
c8:1d:ab:28:93:74:cc:58:71:db:7d:75:9f:0f:ca:94:c0:e2:
16:a2:77:1e:a7:7b:89:19:84:f8:f2:01:2f:3e:df:ce:d1:00:
34:46:27:0a:bc:43:1b:e6:0f:34:75:ed:be:ed:a1:90:1d:70:
bd:c5:43:54:38:a9:3f:a4:75:dc:40:f5:4b:b6:a5:e5:43:70:
e3:8d:2f:b6:5e:c0:66:13:56:00:b1:76:d8:bf:5f:8e:ef:6a:
c1:f8:14:fc:85:ce:0a:13:db:ec:8b:cc:00:39:3b:94:e1:0c:
dd:94:d7:1c:39:08:aa:66:c7:89:77:f0:c2:83:da:8b:73:87:
3d:4a:1c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:43 2025 by rpki-client