Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: Hub7IvUDDKSG/9nFOsw9thcTW1cR2h4UPTR0gd70yg0=
Subject key identifier: EE:C0:90:1A:9F:03:90:E5:AA:A0:44:C1:F5:E7:32:12:D3:C9:E5:B1
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 0199FD6B024E3E7751AF22DD8B51281ADDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 1432
Signing time: Sun 19 Oct 2025 17:01:12 +0000
Manifest this update: Sun 19 Oct 2025 17:01:12 +0000
Manifest next update: Mon 20 Oct 2025 17:01:12 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: s+DM2m4pxf+Hgg6j6SxCOPafLozZ+bX+blXefYcqJa0=)
2: sQpDgOG26LBxAtoQvMby9eHoei4.roa (hash: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:02:4e:3e:77:51:af:22:dd:8b:51:28:1a:dd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Oct 19 17:01:12 2025 GMT
Not After : Oct 20 17:01:12 2025 GMT
Subject: CN=eec0901a9f0390e5aaa044c1f5e73212d3c9e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:dc:06:95:d7:cc:65:c0:ea:3d:4c:1d:b6:
d3:3a:4c:c3:53:4f:88:62:38:07:99:54:f3:61:0a:
e1:f6:99:a8:28:a9:48:2d:8f:1f:c4:83:12:cd:f6:
25:18:2f:78:3a:58:99:58:5a:46:3a:dd:fd:92:00:
e0:86:86:99:df:55:c2:45:d2:89:27:ad:4e:b2:a2:
22:6d:c2:a7:5c:34:f4:a8:be:16:bd:4c:43:99:d2:
e2:f9:93:cb:cc:e5:4c:ab:7b:ab:a1:77:5b:32:de:
b9:d3:00:d1:41:ff:95:6f:d1:c7:e0:22:27:ef:35:
9f:bc:ae:e0:29:2e:41:e9:d5:86:e7:e1:f2:00:40:
53:d5:98:53:34:17:24:24:9e:43:4f:f6:0a:4b:2d:
63:ca:4f:80:62:ee:91:c0:b5:e4:fa:16:30:d7:7d:
61:c0:4b:78:e1:8d:92:14:b3:bf:20:f8:ca:33:50:
53:cb:e4:86:2f:b1:9a:b4:38:a2:c0:96:35:b6:7c:
8f:0a:80:9e:09:08:a5:60:e1:6e:82:b5:8f:a9:60:
4a:94:c0:6f:2e:8e:68:14:85:04:37:9e:8a:cd:b0:
4f:7d:06:28:1f:d3:13:1d:d2:74:e5:21:6b:64:84:
dc:49:0a:47:5e:30:6d:03:8f:ed:4f:49:ea:6d:d6:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:90:1A:9F:03:90:E5:AA:A0:44:C1:F5:E7:32:12:D3:C9:E5:B1
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3c:74:13:00:f2:fd:c3:ee:3b:bc:b5:32:79:80:61:ac:40:
74:77:56:b8:c2:38:7c:b7:88:9f:1b:3b:3f:5d:d5:aa:b4:cc:
3b:d7:09:e1:2f:39:a1:69:5d:f8:1a:aa:ff:d5:de:4e:45:34:
73:8d:5d:e9:98:e3:23:34:c9:e5:fb:0c:2d:e0:3d:57:6e:59:
64:79:34:67:96:9c:16:cf:0d:54:5d:1f:e2:27:6a:cd:99:39:
1b:3d:56:c7:3f:20:18:8a:be:4e:58:18:c6:00:ee:6a:83:4f:
4d:2f:8c:6f:14:a7:4e:d9:20:ee:a2:dd:08:28:66:1c:05:97:
96:f7:3e:b4:a4:68:b9:73:0a:82:79:b0:8a:f0:e6:57:e5:97:
b2:e6:72:0d:88:cf:21:61:d3:bb:f6:7d:fb:87:bd:cf:c1:d2:
b9:8b:83:60:10:f0:00:9f:47:3f:a3:c3:62:62:9d:db:6c:f9:
0b:23:7b:21:73:63:7f:3c:4f:f8:67:d5:25:1b:cf:7b:33:dd:
10:4d:45:6a:da:8d:85:29:c8:80:e3:24:13:77:d4:c1:d9:70:
e8:98:65:89:f5:97:ea:d7:1c:be:40:cd:f9:0f:ca:37:f4:7b:
93:d3:3b:ec:13:3b:bd:76:18:ac:4e:b2:04:84:7b:55:2e:53:
00:68:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:53 2025 by rpki-client