Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: ScOvg0Zc6DQhiWjpIKCbxYU/PKGCgYakK3Bh6JFVyZc=
Subject key identifier: 6A:53:BA:54:1F:07:A8:D7:BB:57:A6:DF:B4:67:28:1C:B7:EC:ED:1A
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 0199FEEBBD3A7D70FAC14C15DEFF395D2BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 166B
Signing time: Mon 20 Oct 2025 00:01:26 +0000
Manifest this update: Mon 20 Oct 2025 00:01:26 +0000
Manifest next update: Tue 21 Oct 2025 00:01:26 +0000
Files and hashes: 1: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: gCupis2Nc7ihtGP893ykeYI65RVYVxdpGLAUPgtanrs=)
2: pg44eaa6uLO77ZBpldSyzPpFh88.roa (hash: 0sb9vGZUz6J5OEzKPCflxf4EwPkYpEMJhVhuM9KBJfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:bd:3a:7d:70:fa:c1:4c:15:de:ff:39:5d:2b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Oct 20 00:01:26 2025 GMT
Not After : Oct 21 00:01:26 2025 GMT
Subject: CN=6a53ba541f07a8d7bb57a6dfb467281cb7eced1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:66:e6:c2:7b:8b:ab:8e:c9:86:f4:99:1c:
52:b2:01:5d:11:6f:6f:b0:08:06:bb:03:15:2a:9d:
6a:88:30:2f:b5:f2:3f:73:55:9e:3a:90:db:de:3b:
c3:84:96:6d:b5:87:ed:5e:da:cc:f6:ef:75:fb:da:
47:d2:32:48:2d:94:62:cb:f9:40:c8:33:03:95:2c:
66:4f:13:4a:e3:ff:c2:04:59:29:88:65:4e:fa:18:
4c:86:3f:96:eb:18:47:3d:d2:b9:87:ce:84:c2:3e:
39:78:3e:a1:88:d6:c1:09:90:28:7b:17:34:7c:ac:
99:21:2d:13:f9:d0:29:39:a3:b2:94:8e:1e:13:ce:
f9:5e:df:97:aa:8d:20:c4:87:39:f2:bb:63:78:95:
c4:35:3c:96:1b:72:1c:da:23:df:a9:22:c1:a5:92:
5f:d0:46:5f:58:f4:ad:db:c5:b5:8d:c6:3b:47:87:
a1:5d:33:e2:a9:5d:7f:9f:44:dd:37:35:ac:51:94:
99:66:8c:f3:df:d5:de:f9:d9:79:81:50:3e:5b:82:
f8:3e:67:ca:51:2c:50:0d:26:6f:3c:1e:6a:3e:09:
d8:25:67:39:04:7e:34:8e:e4:34:42:31:c9:49:45:
12:a4:53:f2:ae:fa:4d:2e:bf:98:d6:fc:9c:68:b3:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:BA:54:1F:07:A8:D7:BB:57:A6:DF:B4:67:28:1C:B7:EC:ED:1A
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a9:5a:d0:44:f3:48:bd:f8:00:00:e6:ca:86:93:33:2e:f4:
4a:50:6b:2f:2d:d2:cd:e5:00:74:49:5f:bf:b8:ef:e7:27:05:
cf:64:5e:f2:6f:24:36:c4:4a:cc:b4:c9:f7:cd:07:0a:e2:88:
e2:a9:7c:c0:e4:50:33:2c:3b:a6:ce:b0:7f:3c:7a:24:04:3a:
06:41:2e:02:6f:b4:36:38:2e:83:79:7f:8c:cd:9f:27:d4:ba:
14:e3:5d:22:a7:83:e9:9c:19:f8:dc:73:d1:ba:2a:39:24:d4:
dd:37:0d:30:f8:b6:02:bb:25:c7:b5:1c:04:79:9f:b2:b4:ee:
2c:d7:63:c4:3e:15:da:bf:65:a1:41:09:aa:27:e7:e9:b2:43:
b4:fd:31:37:64:0a:1c:b5:6f:ad:cf:d3:fb:db:61:ce:4a:bb:
1e:75:b7:47:f9:2b:80:41:38:bc:fb:72:7a:3d:76:cf:24:f5:
d0:9c:b0:c4:cb:ad:c9:c3:49:29:ea:bf:95:91:44:bf:c1:1b:
1b:aa:aa:92:4b:c5:a6:94:89:02:4e:c5:e4:cb:84:40:d0:53:
94:a9:1e:f6:ec:76:08:1d:67:3f:2b:37:a0:e3:ca:cc:19:8e:
98:ce:44:8d:ba:c9:c9:e6:ea:ef:32:ef:5a:93:69:e2:37:45:
b9:1c:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:27 2025 by rpki-client