Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier: T9c2P1iaoU3jBOVzwpio4hvQp+t8XshYetdX+jdPc30=
Subject key identifier: F4:68:EB:71:BC:34:DA:3B:5E:0D:FD:AE:E4:1A:17:EB:E1:37:BE:92
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 019A01B5EA578657F3D56464C8671450A891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number: 12DA
Signing time: Mon 20 Oct 2025 13:01:30 +0000
Manifest this update: Mon 20 Oct 2025 13:01:30 +0000
Manifest next update: Tue 21 Oct 2025 13:01:30 +0000
Files and hashes: 1: CbvTUoVTI9OkiUvPHuJ57q9cBSY.roa (hash: M2lLf2osrJPDAkfEBP++DLdBvZ2RZq2vDWq4YQYtA7g=)
2: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: HvTYapIefeLfKyzl1uNJVFv2p7IKEaW+sPdf9Ko7/UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:ea:57:86:57:f3:d5:64:64:c8:67:14:50:a8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Oct 20 13:01:30 2025 GMT
Not After : Oct 21 13:01:30 2025 GMT
Subject: CN=f468eb71bc34da3b5e0dfdaee41a17ebe137be92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:5a:82:d4:25:aa:65:e3:5b:16:f5:4a:3b:
7b:44:d2:78:af:ac:67:fd:25:9d:f0:98:59:2b:38:
29:bc:d5:d8:7f:45:e9:ff:b9:5b:30:44:e0:85:d1:
de:d0:3d:c0:27:d6:a6:94:9d:c8:06:0d:ba:57:b3:
03:bc:c7:db:46:8e:33:de:4a:0e:dd:ee:02:06:68:
eb:30:50:24:2b:e6:0a:b0:50:14:66:29:32:a0:9e:
dc:20:7f:c3:9f:8e:26:3a:e9:1b:27:fa:84:e6:9b:
83:58:f3:7f:f9:d1:21:17:26:61:ea:36:b4:c2:d1:
2a:9f:08:ba:be:05:88:2c:a7:90:b4:54:2e:27:97:
ca:09:a8:6f:ba:f5:52:54:22:57:87:dd:f6:16:53:
61:cd:bf:fa:c0:da:a0:05:a5:73:36:3b:f5:90:7c:
e7:df:3c:0f:e0:e8:45:7b:f5:f1:48:64:32:39:2e:
79:7c:ff:8a:8f:28:c4:47:6c:bd:49:ca:e0:bf:88:
9f:80:f8:90:0f:73:8a:7a:7a:7d:fe:78:e5:ae:6d:
23:01:ac:9c:22:03:c6:01:9e:14:fb:7e:cd:4b:0f:
c3:76:a1:92:3d:d6:33:5c:63:dc:92:79:a1:d3:09:
73:de:55:e6:c5:41:f5:c6:a8:8e:a1:f2:72:51:a5:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:EB:71:BC:34:DA:3B:5E:0D:FD:AE:E4:1A:17:EB:E1:37:BE:92
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:62:bb:41:12:64:5f:b0:29:d3:b5:80:0e:ab:11:bb:ee:af:
e6:89:f1:9a:0a:4b:4a:5c:fd:2a:0c:52:f1:38:05:bc:df:c8:
f1:24:3e:09:0c:e2:8a:cf:ea:fc:98:5a:60:c8:d4:ee:7b:9c:
07:a4:6f:f4:67:30:41:1b:cd:f6:fb:00:ea:37:b8:6a:f6:a1:
16:0f:f9:b7:27:6b:c4:48:81:e0:7a:79:38:45:59:32:48:a7:
a3:c8:51:ce:36:e0:ca:00:5c:2f:58:ec:94:ca:1a:30:6c:44:
49:a8:c5:9e:5e:5d:5b:d5:dd:d6:c4:2a:2b:13:cc:0e:61:8b:
cc:57:4a:21:2c:b3:f6:a9:12:d9:47:9f:bd:68:ab:83:47:fc:
cc:d8:ee:d6:56:ed:ae:b4:28:8b:38:a1:f6:e2:55:9b:83:ad:
47:62:d1:07:de:db:39:4a:25:4f:4d:0f:23:0c:4c:f3:4a:d5:
67:d0:71:2c:26:63:6c:fd:6b:0f:14:db:fb:be:1c:34:5b:f4:
79:2d:44:bf:37:8d:e7:0d:9e:2b:35:75:28:90:0c:0a:d2:50:
b4:51:07:25:d1:1a:35:69:0f:04:b6:f6:3f:bb:22:4b:47:d4:
de:32:44:c8:1d:2f:be:41:84:94:42:a5:80:83:73:61:f8:8b:
3e:3f:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:54 2025 by rpki-client