Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: 9BCGb1MNcj92OV+YPyE1Ftno3/P3n768V1yCeeNfVj0=
Subject key identifier: 74:3E:79:9B:86:53:13:6D:BB:57:25:5D:6D:40:BA:FD:A2:90:70:DD
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 0199FC213CBB4025619B9B58BE948B2699D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0D79
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: 5DLq2z/aYaYfdpgzl/EkZSQ3AtwkAPCjQzIbzeSegqo=)
2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3c:bb:40:25:61:9b:9b:58:be:94:8b:26:99:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=743e799b8653136dbb57255d6d40bafda29070dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:75:a7:91:8d:4b:95:3a:6e:1c:36:cc:77:
98:3f:3f:44:a7:27:86:d7:c2:64:77:70:83:62:0b:
43:42:09:f8:8d:45:fb:f3:d5:d3:1f:19:af:de:e7:
1e:b6:a3:58:4a:0e:8c:7c:26:d4:ac:a6:7d:33:8e:
fd:b4:d3:b3:67:03:ec:33:bb:bc:41:f3:ba:e3:de:
35:5e:a6:9e:e3:74:d4:04:cb:ae:55:eb:69:d8:ef:
6d:2b:29:fb:0f:ff:f7:08:52:39:97:c1:c4:61:80:
c5:21:c6:74:c6:a2:f2:41:04:4c:ca:db:1d:76:fd:
cf:9e:d1:65:6a:18:57:af:b9:b6:aa:6e:68:d4:83:
cf:f1:a0:9e:60:45:28:70:e9:13:c9:37:89:fd:0e:
ac:be:7a:d2:18:a2:70:dd:ef:48:72:68:14:61:a8:
ed:47:bb:71:49:4b:80:ce:70:51:db:12:32:92:f5:
da:7c:47:64:09:16:bf:5f:ba:6a:98:0f:de:45:44:
6c:63:27:08:84:c7:09:89:1a:7c:e8:4f:41:99:5e:
0b:f9:0a:9c:ec:e1:bb:5e:1c:af:12:19:f3:84:f8:
77:69:ac:a7:95:03:3e:80:51:48:02:3d:a6:13:2b:
fd:d3:cd:14:f7:61:7a:76:ce:e2:d8:58:83:5f:ce:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:79:9B:86:53:13:6D:BB:57:25:5D:6D:40:BA:FD:A2:90:70:DD
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:95:f0:da:95:6c:cd:6f:50:ed:3c:6f:bf:ac:19:8f:4a:38:
8a:43:f7:ed:8e:46:4e:77:60:57:c4:06:71:7f:96:7a:97:ae:
17:d3:34:2a:fe:4e:8e:c3:77:9d:3e:2b:64:9e:90:38:10:70:
f4:d4:ce:59:85:6b:cc:a4:bf:ed:53:82:79:6e:8c:6e:82:c1:
51:cf:7f:b7:da:d8:0b:5c:a4:9a:98:4f:51:d9:3e:bc:4e:88:
49:78:58:8d:2b:e5:ed:e9:2f:97:38:1b:ef:ab:6b:32:0c:74:
3b:10:42:96:21:cc:f0:b9:33:4b:ae:0c:07:a5:9e:f6:5e:24:
18:fb:39:18:34:35:de:d3:5c:43:31:c8:9c:c1:3a:d6:5d:e3:
e7:82:fe:5f:15:63:16:fe:0c:b4:70:16:4d:8c:75:f2:3b:51:
94:fa:5f:64:c4:d2:c1:02:fe:13:11:d7:36:e8:43:2a:91:b2:
95:62:97:5f:70:65:c3:24:b0:09:98:8a:c1:5c:dc:8e:26:e0:
a7:c1:b2:c0:00:0b:f6:5f:44:55:cb:b4:e1:9e:1d:f2:4f:c3:
36:69:81:35:27:d4:9d:d1:2d:1b:6c:84:39:d6:08:4e:81:fb:
9d:47:1c:ec:43:82:b9:01:f3:13:4f:6a:2a:81:d3:3b:d5:6c:
95:02:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:07 2025 by rpki-client