Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
File: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft (raw, json)
Hash identifier: 8uEzDQi1R9kE6LWJFko6LjH4KR11WcVrboCrsEHSehI=
Subject key identifier: 2B:F3:51:74:46:EA:64:ED:49:38:0F:D3:0D:B3:15:11:14:CA:89:CE
Authority key identifier: A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
Certificate issuer: /CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Certificate serial: 0199FCFD2B0B5BBBD17D311B1AF690F2B089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
Manifest number: 13F0
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: KHmBEFAHu1D8g7BNr6DM90HcrdE.roa (hash: cHCWZbVIixRYPkJFTsJoo7AK/4mwhNH2E0rmOh1q4HI=)
2: o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl (hash: guwaGuHUQ8YejHo//Ozzpa6P/d33VUAGB7te/GPc8kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2b:0b:5b:bb:d1:7d:31:1b:1a:f6:90:f2:b0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d3907f811cb83f16b816785e380bc24c8ac193
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=2bf3517446ea64ed49380fd30db3151114ca89ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:98:c0:f7:4d:f3:ca:d7:90:d6:9d:3b:7e:
8c:30:28:f8:79:03:78:0f:72:6e:30:ab:35:bb:08:
71:5e:5b:68:b8:cd:42:ed:4a:f2:10:db:c8:76:5b:
8a:93:24:55:ca:12:03:be:b5:3c:c5:b5:08:a4:30:
96:58:c5:00:d9:f9:f8:b2:40:37:49:9c:bc:15:fd:
39:61:5f:a5:a6:be:0e:3b:a3:48:37:bf:11:e6:b6:
e7:51:79:3c:4c:49:36:d0:b3:7c:19:d6:20:a8:e2:
59:c5:a7:eb:8e:69:69:1c:8f:e6:e4:f4:e3:49:36:
03:46:ae:cd:98:5e:79:71:93:22:8b:da:a8:45:a8:
09:93:3d:45:d0:f1:63:60:ee:cd:79:85:38:3b:14:
fa:1a:90:e7:01:2d:f8:2b:41:6f:31:06:8a:cd:e9:
9b:d3:6a:ff:98:a0:3c:e6:f6:94:74:70:ff:55:1d:
c7:33:85:be:06:eb:21:bb:c1:b0:9d:43:c6:98:4f:
c2:c2:56:f9:2c:de:84:a8:ec:d0:a1:3b:61:37:64:
60:a3:9e:64:a0:b8:cf:d6:ba:bc:54:ab:9b:55:43:
b7:43:da:6d:c8:c0:fc:17:f3:06:3a:3e:6a:5b:c7:
25:be:d9:c0:a0:54:66:2a:7b:b7:ac:e2:c7:26:79:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:51:74:46:EA:64:ED:49:38:0F:D3:0D:B3:15:11:14:CA:89:CE
X509v3 Authority Key Identifier:
keyid:A3:D3:90:7F:81:1C:B8:3F:16:B8:16:78:5E:38:0B:C2:4C:8A:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/43eb05-affe-4274-913b-3320271fb3ac/1/o9OQf4EcuD8WuBZ4XjgLwkyKwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:97:45:03:7a:d3:e6:d7:b6:76:16:3e:7a:66:cb:eb:d6:fa:
7b:30:29:d2:ae:e8:c6:d8:7a:0d:a8:b1:a9:93:55:a2:ce:2b:
02:1c:9d:cc:b6:72:96:d5:3b:98:14:c3:7a:4e:f5:b5:d4:42:
5e:45:7b:a1:2b:c6:8a:18:0b:b5:ac:d2:ef:74:8b:76:5c:f6:
6a:8a:eb:e7:d4:31:2c:7d:04:4c:8c:d2:3f:8f:ff:d0:a6:eb:
05:13:48:fa:4f:73:98:3e:5e:a1:78:4d:b1:92:03:6e:d2:82:
fe:b5:4f:c9:78:87:56:5c:53:95:90:94:d5:bb:00:b7:58:7f:
b4:6a:aa:07:ba:98:bf:5d:5e:14:b3:6c:0b:ec:31:8c:de:63:
3f:d3:32:2f:83:42:c2:a1:7d:d4:39:51:b5:2d:07:85:54:de:
e9:62:0b:9b:a6:ee:57:2b:bc:b2:c1:4f:12:87:57:23:19:a5:
c1:89:e6:24:2d:17:33:c9:86:d6:9f:73:df:a8:78:f2:51:dd:
67:1d:dd:20:4e:cf:19:40:0b:f8:a0:4d:bd:13:27:70:91:11:
e8:f3:44:df:27:17:a2:7b:9d:a5:9d:cf:93:1b:11:61:20:d1:
2e:bc:1a:92:da:be:97:1f:30:88:bf:65:3d:85:54:7a:44:c4:
bc:63:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:49 2025 by rpki-client