Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: FvejLWB5V9EZ2N1YvoL2G67JbEdR9xSRL38OvRKEhgA=
Subject key identifier: D6:F9:E3:F0:08:EC:92:A3:0D:36:63:1B:74:62:C6:73:7F:47:79:BF
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 0199FC8FB52F2790F74F92B9083EC9621E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=)
2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: vOJiF0lwHj63hVwNsf0vh55BvYzy7p+dndTcDjkLYaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b5:2f:27:90:f7:4f:92:b9:08:3e:c9:62:1e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=d6f9e3f008ec92a30d36631b7462c6737f4779bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:f6:95:d7:df:8e:81:89:cb:fb:73:56:f4:
69:17:7c:5e:9f:28:35:76:d0:af:51:1d:f9:22:fa:
da:53:0d:98:7e:57:a6:6d:1f:64:b1:fa:9c:c4:f1:
4c:fd:ec:d1:c6:c7:94:93:eb:1e:7c:cb:25:3c:01:
d4:09:b6:ee:03:81:72:17:51:f9:5f:f1:06:6b:89:
e4:40:fa:d5:24:f0:59:21:08:ae:17:ce:5a:fc:19:
ef:14:fa:f7:64:e0:cb:8f:f2:54:74:75:c7:e1:09:
54:56:1e:45:68:71:28:25:c5:d4:e9:de:49:c8:3b:
64:c0:45:2c:bb:83:d8:1b:8a:29:93:2c:4a:ae:90:
e1:70:e2:cd:1d:aa:2e:ed:f8:49:90:4f:4d:41:da:
09:5e:5e:fc:35:f0:b2:b0:f4:2c:c8:b6:b8:52:0c:
e2:ee:16:f2:17:44:81:b6:7c:68:d8:dc:28:00:ec:
1e:ea:ce:e8:f8:95:36:ea:77:89:d7:f0:41:26:d0:
cb:b0:10:24:e0:45:0f:40:21:af:e4:12:62:e6:c0:
0d:d8:7b:1a:56:a4:c5:a9:26:6a:02:d6:8d:88:4c:
c8:e5:89:ec:b7:e2:3b:0a:d4:45:b7:0f:b4:e1:78:
71:c5:f8:da:4e:b8:60:3f:35:17:5d:9a:af:95:52:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F9:E3:F0:08:EC:92:A3:0D:36:63:1B:74:62:C6:73:7F:47:79:BF
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4e:2b:e5:30:0c:29:65:17:d4:68:ae:98:c7:fb:8d:ee:b8:
7d:fb:a8:9e:55:7e:09:5b:0c:aa:cc:c1:7c:c4:71:b1:38:45:
17:5d:5a:d2:b4:e0:4e:6a:61:1e:20:7b:5b:f8:f7:ce:59:2c:
08:60:c0:45:39:dd:55:92:d1:57:1e:cf:78:bd:ed:34:4b:91:
81:e1:43:96:da:5b:79:03:07:49:6c:5c:a5:10:f0:15:09:2c:
43:9e:9c:ba:88:02:b1:33:09:c7:28:aa:2d:7e:74:a4:a6:91:
6d:4f:cb:87:85:55:0f:ca:ad:ab:ba:14:42:5a:79:bf:05:58:
39:07:77:6e:91:61:62:e7:c5:bf:ac:62:e7:4d:96:2a:55:9e:
02:2c:54:91:26:63:26:12:66:94:67:a3:58:7d:2e:05:d4:d3:
ee:83:83:a7:27:49:15:92:d3:ed:6c:c7:d6:89:3c:ac:3f:cd:
c6:05:9e:c4:e0:b6:ec:7f:c8:71:16:04:5f:46:6c:e6:ae:79:
89:08:4b:99:c1:b3:d6:9d:a1:db:4a:4b:51:6e:7c:6b:7d:99:
f6:cc:1c:6e:17:47:55:86:55:53:0d:7d:08:93:11:69:a1:99:
6c:43:44:b3:e0:85:42:5a:73:52:bb:3a:7b:ef:e0:98:4c:37:
ee:a7:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:46 2025 by rpki-client