Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: 2F6PMiVlrBE5d6SnYlhF4YaCY9eNt1OcEknprnoabOU=
Subject key identifier: 56:D8:7C:8E:3C:29:35:26:50:C3:48:7E:90:76:8B:7B:FA:8C:4C:FC
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 0199FC58C6E4945BBA4053419F2575BCF8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0B63
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=)
2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: wNoAuiD7N1aN2DNopZ0vc/6HYKa2GnK7A8rDQDgY144=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c6:e4:94:5b:ba:40:53:41:9f:25:75:bc:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=56d87c8e3c29352650c3487e90768b7bfa8c4cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:50:54:1a:57:a4:12:ec:5b:0a:28:39:90:
c0:56:46:d5:8a:dd:d9:58:24:d2:5a:54:2e:f2:90:
d0:4a:de:e4:35:4f:d7:d6:e6:92:d2:23:f6:6e:6e:
e7:ee:cc:12:35:68:c2:2a:7f:79:c3:c6:ac:a6:76:
72:d0:da:b0:aa:14:29:6a:df:2f:bc:2d:17:84:41:
7a:96:d8:d8:bd:85:65:c5:6e:ff:a9:1f:51:7a:29:
32:98:ee:a0:73:e6:bf:e4:29:48:fe:3a:28:1d:4a:
fc:9d:8a:7c:de:57:9c:72:41:a5:d7:f4:2e:ef:b6:
92:e3:9e:b8:40:dd:48:00:69:a1:7f:68:7b:e5:1d:
78:5c:9f:62:32:8d:9f:cc:47:c5:f3:1c:57:d3:3c:
8f:32:4e:18:96:26:83:ec:aa:ad:72:ba:8c:c1:30:
da:38:5a:62:35:f3:ba:37:20:f6:08:ac:54:94:47:
3b:41:78:cc:1e:1d:1f:87:b7:d3:64:e4:ea:e3:b1:
4a:34:6d:0c:7b:b9:6f:e1:bb:50:75:e9:79:c6:7a:
3b:e1:3e:39:c5:ab:91:31:98:7d:a7:71:29:bc:10:
4d:57:d8:59:9f:ca:59:96:1d:1f:d1:47:60:65:d9:
5d:c4:64:84:4c:b3:11:f1:bb:ab:44:86:01:51:f6:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:7C:8E:3C:29:35:26:50:C3:48:7E:90:76:8B:7B:FA:8C:4C:FC
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:18:a8:61:23:cd:4c:de:95:22:27:fc:6c:63:7d:9b:29:df:
29:73:38:2f:1d:1a:a0:da:69:5b:e1:72:65:01:10:15:07:b2:
ff:7b:5a:6c:6d:e5:5a:fe:2d:9a:a6:33:09:82:d4:aa:77:17:
cc:37:49:0e:20:b5:96:81:c2:f4:d1:9a:49:74:78:3e:5e:22:
da:d1:62:c6:68:6d:65:f8:5e:f9:e7:cb:45:04:cb:64:78:b5:
18:a5:75:51:9d:7f:47:75:13:61:19:09:0f:6e:81:54:ef:66:
c9:0c:71:b9:53:69:30:1c:f0:1b:98:a8:f6:de:3b:61:c8:79:
35:c2:63:b9:fd:29:5c:38:91:d5:96:b6:60:8b:40:3e:1d:71:
83:60:18:62:d5:5c:7b:10:79:18:9c:cf:81:c8:48:e6:2f:29:
65:fe:1d:b2:99:b2:68:ff:d7:25:c3:05:3c:2d:c3:97:b1:da:
c5:0d:d7:93:37:82:6c:4d:02:5b:4d:8b:b3:81:04:07:ab:6c:
6e:bf:16:96:16:2e:e2:68:8a:cb:62:be:2f:79:56:05:63:a7:
b4:15:a1:f2:da:5b:84:60:89:8a:a6:b3:b2:6b:9b:cd:bc:24:
56:d9:41:e2:e7:72:5c:41:f4:a5:0d:98:78:61:d3:33:ae:f2:
1c:80:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:56 2025 by rpki-client