Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: HRRArOrRrLyTNG9CBvq7iH+GMqUsnRHe8mW0dAutSqM=
Subject key identifier: 36:23:6D:AF:6A:4F:9E:45:09:4C:B6:C1:4A:89:10:2D:5B:C0:81:9E
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 0199FD3465BDB42F2CAE7DF44A27757545B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: /MVGNGCfnRs/90NajM8VYFS3E+ayjCWIRQQUg1a8Gsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:65:bd:b4:2f:2c:ae:7d:f4:4a:27:75:75:45:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=36236daf6a4f9e45094cb6c14a89102d5bc0819e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:2f:62:52:fa:0a:f3:a9:b8:95:3f:c3:00:
4c:e4:2f:fc:11:f5:bd:bb:65:94:d6:e9:dd:f4:8d:
ab:52:f8:5c:36:bd:a6:d0:2a:85:70:b7:d5:d1:e4:
17:e7:d9:33:b9:82:22:a0:3f:ff:b1:ec:49:fc:88:
31:b6:10:84:e0:ff:68:6f:c6:65:a8:54:d8:4d:3c:
7a:e5:d6:c6:de:3c:56:64:c6:fc:5f:c2:a4:d2:68:
02:42:1b:c9:52:94:ff:d1:b0:ba:24:09:04:e4:a7:
c1:da:94:0f:bb:39:1e:ba:77:0e:f3:89:fc:81:26:
84:c0:bd:e1:e6:62:58:47:a2:b2:08:33:0a:82:c1:
4b:19:19:9c:a2:08:ca:82:78:98:ef:8f:c8:69:df:
ea:de:bb:97:03:02:97:4b:7c:f0:00:93:d1:3d:cc:
3b:e9:3a:30:b2:35:a3:3e:86:93:9e:56:d8:6b:34:
0f:c8:83:ad:a7:64:ff:4f:3f:98:f3:9f:83:26:da:
cb:cf:3b:33:51:9e:8c:84:b2:0c:af:c2:14:9f:be:
79:29:fd:16:a8:fe:aa:8e:e7:e6:33:65:22:f0:a1:
bf:c1:2d:6d:09:bc:4b:e0:27:47:0a:00:78:8f:a9:
a6:11:3d:9e:b6:b5:c9:00:5c:fa:ef:23:fa:c0:02:
ed:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:23:6D:AF:6A:4F:9E:45:09:4C:B6:C1:4A:89:10:2D:5B:C0:81:9E
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:32:ad:6c:07:71:4f:3a:d4:d8:e6:dd:0d:95:72:87:46:b1:
b5:ee:00:2d:f5:52:16:c3:35:6c:c7:35:f1:a3:07:4d:96:e2:
36:dc:e3:2e:d1:66:42:4f:8d:b6:5e:57:c0:5f:bd:81:80:79:
7d:66:c9:83:45:f6:44:f1:66:d3:63:70:50:74:79:10:15:ff:
38:93:c2:2e:9c:10:ef:a1:49:19:ae:73:10:d1:79:72:82:db:
a3:3c:45:63:be:ed:b1:b5:68:ea:72:ec:30:84:4b:3f:51:56:
51:a2:2e:de:4a:d8:d7:72:ad:74:bd:2a:98:d2:84:cc:f0:24:
cc:18:c8:c6:e6:48:f6:63:ee:0f:8a:94:f4:aa:62:59:10:f4:
5e:88:1f:54:24:7b:f6:e3:9e:99:13:98:37:b5:66:ad:b0:e4:
fe:bb:22:5c:fc:10:44:fd:fa:ff:f5:b4:94:f2:2d:4b:0f:ef:
6d:8c:4b:8c:aa:62:9e:28:dc:7e:2e:b2:dc:bc:48:18:3e:79:
00:47:39:44:22:aa:7e:b9:fc:a5:86:e1:b4:ff:fd:d8:fb:3b:
ab:08:77:84:46:5a:6f:83:e8:2a:04:eb:d1:d5:46:14:f0:66:
9e:a9:30:8e:38:9b:06:f2:37:b6:1c:ca:da:68:83:6d:01:b8:
9a:5b:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:24 2025 by rpki-client