Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
File: o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json)
Hash identifier: AEok9M/exaJoOxk6i4vncj26LluiFvZE8qblbB/ktg8=
Subject key identifier: 73:C4:2F:C1:54:D7:17:05:46:FE:78:6D:5E:BB:7B:15:AF:3D:B5:23
Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
Certificate issuer: /CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Certificate serial: 0199FFFE6E160260DC592D10E9252B595010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
Manifest number: 0505
Signing time: Mon 20 Oct 2025 05:01:28 +0000
Manifest this update: Mon 20 Oct 2025 05:01:28 +0000
Manifest next update: Tue 21 Oct 2025 05:01:28 +0000
Files and hashes: 1: K7qTK9pIyiEZfe3oYQ_ZP0X2yEA.roa (hash: aRm9dSDweAWyai2Lyi7lBDWMUI5ncN0CehfI1VhjASU=)
2: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: 0x5xGsFGFmwGnlncR15EFaUTAgrrPvhjmaSyNmFzB54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:6e:16:02:60:dc:59:2d:10:e9:25:2b:59:50:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Validity
Not Before: Oct 20 05:01:28 2025 GMT
Not After : Oct 21 05:01:28 2025 GMT
Subject: CN=73c42fc154d7170546fe786d5ebb7b15af3db523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4b:f8:f5:61:4d:9c:28:49:bf:12:93:50:69:
b1:49:9f:8e:b5:02:5e:5f:ae:d8:ed:df:17:25:7d:
a4:0a:be:89:ec:91:6c:1e:04:63:b8:e9:f9:19:f0:
46:70:40:ca:26:de:0b:34:bf:9e:2c:8b:30:64:1f:
fa:55:5b:10:72:a2:c9:38:27:99:63:4f:53:31:07:
f4:21:5e:4d:4a:3d:d7:41:5f:5c:fa:aa:d0:85:97:
2d:1f:d6:15:e9:f3:c6:2f:8b:a0:6e:0d:fb:88:eb:
68:8c:5e:8e:ed:a1:dd:82:f8:a9:47:bb:7b:ea:27:
b4:51:53:f3:c8:99:e8:a8:9a:88:1c:36:12:4f:6f:
30:c7:25:e7:66:04:22:84:6c:2a:4a:d7:55:85:30:
de:b4:a6:2b:c8:43:b8:af:c7:84:44:a2:b4:64:f2:
39:1b:91:af:3f:b8:66:75:09:12:31:ec:6b:c9:22:
ba:be:4c:8b:44:5a:3b:fa:bd:12:2b:b4:57:0b:43:
d4:09:76:f5:bc:96:6d:ef:dc:46:ed:e8:81:9a:7f:
74:e0:46:0f:8c:7b:56:77:bb:84:16:02:0b:c6:b5:
40:13:cc:5a:35:34:df:a0:32:a5:15:0e:94:27:4d:
0d:f8:14:1b:d5:5a:77:85:01:d0:5b:68:2a:07:ff:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C4:2F:C1:54:D7:17:05:46:FE:78:6D:5E:BB:7B:15:AF:3D:B5:23
X509v3 Authority Key Identifier:
keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:67:f3:e7:f2:ae:c1:cc:b8:7e:cf:78:9b:48:93:69:9e:
f0:fe:b6:8f:50:fb:18:c8:54:14:3b:eb:e3:84:59:b0:88:49:
95:82:c2:b7:56:94:bd:17:71:3a:70:aa:89:16:6e:c3:5a:c2:
4b:b9:ed:b9:35:59:3a:72:fe:d8:0a:cc:a9:29:9c:b4:69:95:
d3:9e:de:49:50:c8:26:f0:16:a9:2d:e7:5e:f5:6e:96:1d:59:
45:13:49:6b:41:01:a4:4f:0d:ac:63:42:ee:e4:14:70:9b:26:
52:2d:5e:87:00:07:54:4e:23:8e:4c:a9:ca:5a:ea:c2:66:68:
18:6f:26:7e:6b:27:16:1f:4a:d0:95:b2:90:23:4f:bc:5f:52:
d5:b3:4d:42:8a:33:f1:39:7a:e9:7e:12:fe:09:35:c1:28:30:
a0:27:5a:bc:1f:26:d8:9d:91:dc:a1:8b:a6:38:96:12:81:e3:
bf:0c:34:1e:57:58:90:87:09:ec:c5:4f:4f:f5:ef:ba:00:61:
90:5b:40:6f:0b:7c:21:9b:75:a3:70:74:3a:b1:a2:2b:8f:3e:
2d:df:d8:d2:2f:cd:8f:da:12:5f:1b:2a:22:ec:66:23:a8:4a:
dd:01:67:f1:b5:d7:f8:0e:9e:e6:3c:44:18:bd:45:04:d6:d9:
80:20:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:12 2025 by rpki-client