Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: 3qpOw48eAf2Xu98pxhlZ5GwSfsEfBFh7480cpvpoTj8=
Subject key identifier: 21:57:6D:AD:7B:6D:AC:85:E2:56:2C:66:23:03:84:6A:54:24:B2:1B
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019A02913344DF3BB62CA956E95CBDAAA580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0C1A
Signing time: Mon 20 Oct 2025 17:01:01 +0000
Manifest this update: Mon 20 Oct 2025 17:01:01 +0000
Manifest next update: Tue 21 Oct 2025 17:01:01 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: 4oH3LHH4kT4YDjl1JGJ+FJu1BHFXnDgp4kiwxBeV6LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:33:44:df:3b:b6:2c:a9:56:e9:5c:bd:aa:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Oct 20 17:01:01 2025 GMT
Not After : Oct 21 17:01:01 2025 GMT
Subject: CN=21576dad7b6dac85e2562c662303846a5424b21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:ee:4a:65:cf:24:60:9f:c3:c0:4a:74:21:
06:20:96:1a:02:39:4b:6c:bf:0d:5a:d5:f0:43:ac:
3f:9d:b8:64:b9:dc:47:04:fd:88:76:73:d5:4e:99:
c1:43:7a:c2:ae:e4:bc:a3:33:a2:db:8e:c6:ee:e9:
b6:90:76:98:e0:c8:6d:07:f1:21:9e:ed:03:59:01:
2f:66:58:c0:fe:62:d4:54:23:bf:aa:96:41:9b:f2:
f7:5d:86:45:bd:6f:36:e6:73:4c:43:ed:94:32:cd:
53:95:9b:4c:db:e9:bd:bb:cf:54:99:dc:33:21:1a:
14:79:39:0b:9e:77:f5:06:c1:58:ab:75:02:d4:92:
6e:50:61:a9:37:e4:6a:08:e7:5e:e2:90:dc:81:3f:
83:c3:32:3b:ca:ca:81:ff:1d:53:64:9f:89:66:7f:
cf:21:97:7b:06:0a:b0:0d:42:15:a3:a8:d9:1e:5f:
c1:03:4a:03:ed:fb:99:8d:3d:8f:6f:d6:da:5b:82:
b8:f6:20:14:f7:dc:81:8b:b9:66:3e:c8:ad:1b:23:
fa:9c:30:95:14:df:28:da:4a:53:e9:ea:dc:49:29:
34:3f:76:42:dc:b3:af:86:31:d6:4c:c6:f2:12:23:
fb:bf:8c:a1:3e:2b:a9:26:b8:31:b5:2e:ee:26:31:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:57:6D:AD:7B:6D:AC:85:E2:56:2C:66:23:03:84:6A:54:24:B2:1B
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:82:a4:0b:60:f2:ac:78:34:48:32:76:fe:d5:9d:b4:29:28:
0a:6a:f0:83:29:1b:7d:8f:32:b2:7c:22:76:64:55:0b:ea:4d:
04:6e:e2:4f:65:94:c3:5e:6d:1b:e4:fe:71:e4:57:0b:ef:be:
9e:13:9c:46:bd:27:9f:23:07:b7:9e:25:f4:75:4d:99:b2:77:
23:d3:7d:ea:94:ee:52:21:f5:4b:21:ff:d6:a8:ad:2e:9d:6e:
61:8b:88:85:89:bc:12:4e:6f:b4:7e:d0:89:88:04:d9:d6:22:
18:f5:38:ec:fb:99:65:00:90:3e:1f:e1:97:e3:16:e0:30:76:
96:5f:e2:7d:bb:9c:c4:6c:ed:13:c8:c8:6c:46:90:0b:0a:94:
b6:10:89:94:2a:78:43:17:a4:77:d4:f0:9a:31:cf:28:59:99:
2f:1d:5e:c4:af:58:25:3f:c3:a5:d4:57:24:6a:5a:b0:f3:8b:
5b:cd:66:4f:7a:f9:5b:74:93:9d:6f:f1:df:5b:34:91:40:db:
a0:c4:6c:a7:11:56:36:e5:ea:01:1b:47:69:f6:f9:ce:a4:77:
e1:73:63:36:4e:0a:d3:e9:77:76:09:6d:e9:12:48:13:22:3d:
68:0c:e8:62:04:c9:95:32:bc:f2:d7:9d:ba:94:ae:68:99:3d:
08:97:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:08 2025 by rpki-client