Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: bMWMvP3tlCpH0g5XJMOWpdtUyD2owhMNG6rK4650gCo=
Subject key identifier: 47:68:93:7E:2C:1C:90:3A:1A:B5:B1:2A:49:18:94:09:B4:D7:1B:B1
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 0199FDD94E357485A2BD50C6B9857C893294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0D88
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (hash: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=)
2: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: IRikYNrBtL5JYLk3Pe1TpzgVlVbMGCrg8nD5mgKXZAk=)
3: cwI21tJzYqOr9HSPPCz6L9ZgwVI.roa (hash: XU/ushJjB+n9xmj9cQdOxUY6BAOcpjTXGMQ5mCVCcNA=)
4: nKxYgxU46C1nM-kLwKHXoqpeCuk.roa (hash: acmNPfWY5Vqfewon1zfQxYgK/f0iZyi1LFngzxJT1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4e:35:74:85:a2:bd:50:c6:b9:85:7c:89:32:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=4768937e2c1c903a1ab5b12a49189409b4d71bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:ca:0a:28:c8:49:f3:97:d6:17:c7:06:0b:
4c:71:9f:fd:8d:9b:11:af:d2:b5:33:4a:ab:23:c7:
9d:0c:55:67:0a:22:0f:84:d9:a5:10:fc:e5:4f:ff:
85:fc:55:6b:c1:82:53:98:08:ab:a2:2c:a6:d5:c9:
f3:51:5f:d5:59:42:dc:8d:ba:dd:7d:89:40:de:a0:
67:d9:39:19:7b:36:08:d0:0e:96:c2:e7:8d:b1:a5:
57:ca:8a:04:34:e0:26:ac:79:52:ec:75:c8:48:23:
ab:76:5e:31:53:7c:0f:ba:17:5e:e9:4d:9d:a3:d1:
e8:1a:54:d4:07:21:9e:6e:36:41:11:59:43:20:c7:
3e:e8:48:7e:c1:ce:47:79:4f:b1:f8:2d:c5:0e:e9:
52:73:14:f1:33:a5:7a:53:69:85:ad:99:60:00:c3:
fd:d1:4d:f3:d0:df:e3:92:f8:8f:89:26:93:25:8a:
d4:bc:97:d3:cb:42:e4:26:69:b0:5d:a9:40:9a:6e:
95:27:7b:90:30:1e:8c:34:c5:a7:2a:06:b4:3c:d8:
ea:b5:f0:69:34:b4:e9:1b:d6:1c:81:8a:a6:3a:93:
37:e1:37:64:7d:4e:05:36:6d:e1:4e:50:88:b0:98:
63:61:aa:f5:7f:a8:b0:9f:88:b1:8e:4d:41:fd:50:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:68:93:7E:2C:1C:90:3A:1A:B5:B1:2A:49:18:94:09:B4:D7:1B:B1
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:96:01:59:41:e6:00:56:86:2f:d6:26:67:2a:d3:39:97:fd:
06:39:de:c7:be:0b:3a:05:2c:c3:de:aa:a3:5a:b8:69:33:87:
26:43:85:f8:25:66:18:53:52:70:88:97:41:ab:e2:bd:bd:dd:
8e:76:c3:87:3d:81:80:15:1d:47:eb:98:fa:68:da:5d:e3:d2:
5f:a3:14:6a:40:1f:d3:ca:bb:1d:c9:b5:ee:8d:ba:d1:5b:ee:
54:2c:e8:d8:30:17:0c:8c:fb:e1:63:5c:0e:c6:8f:5d:34:c6:
f4:62:7e:98:c0:5d:d0:86:56:5c:56:4e:6c:c3:c0:c8:92:ba:
fc:24:a7:7e:c4:bf:bf:70:49:db:eb:5d:f2:27:f7:c6:2d:13:
8a:d9:8a:48:18:ee:fd:3e:ad:60:84:1d:dd:c6:ad:fb:99:fa:
6e:36:fa:95:82:d3:d7:7d:b8:c6:c7:e8:45:5d:76:11:73:98:
dc:1d:a7:0d:89:d0:55:47:cd:df:a5:40:cf:a1:56:41:42:b7:
83:57:b2:9c:e3:02:7b:92:c7:84:1b:0f:29:8c:06:d3:07:4b:
d7:67:5e:65:2d:88:7e:3f:b7:3d:55:55:36:54:a0:6c:95:2d:
28:d6:21:a0:ca:3b:41:4e:02:b7:4f:5f:e6:02:37:53:e4:25:
ec:55:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:44 2025 by rpki-client