Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: WdNY6GiHgfkvn+GYBnSyyCFgGh2+IUmfe7dhSmUfd+Y=
Subject key identifier: 37:EC:1E:6F:A1:86:10:C8:C8:A9:02:12:C3:40:34:49:EE:F8:0D:12
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 0199FC583D2FC5658F2D416941581758467F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 11E2
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: 29zZRujAn8DGdUDp5utUkmVO-uo.roa (hash: pdGXIGI1eFN6x7W6e3AuHm1Q9j3iH8yigptYTm3P3QA=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: MnCGySrLV4mpvZf/QYCJfxzuQ/XJSUsrlHgtklkn5IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3d:2f:c5:65:8f:2d:41:69:41:58:17:58:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=37ec1e6fa18610c8c8a90212c3403449eef80d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:f7:bc:b6:b0:b8:a7:8c:04:b8:64:59:22:
0a:fc:ad:22:79:0b:f9:0f:16:75:8f:04:0b:21:ac:
18:83:d5:6f:e1:5d:ac:88:0e:ee:96:02:d6:96:a8:
97:9a:71:c2:e6:9f:d0:7f:e7:85:af:a3:d7:b0:0f:
11:ad:ea:47:2a:25:a1:f5:82:5b:ae:9a:99:0f:07:
3f:1a:ab:aa:5e:39:d3:71:c0:cf:d3:b9:e6:d6:3b:
52:6c:c0:ed:39:bb:81:41:0e:d2:6b:50:e2:63:23:
5c:df:ab:98:f4:a3:23:c6:6e:de:38:10:cd:5e:de:
67:9a:2f:3f:92:55:05:b2:65:cf:84:13:95:6b:9c:
56:94:bc:0d:1e:73:70:36:c5:08:49:db:9b:b4:48:
d4:44:e7:aa:c3:4c:8d:70:cb:f4:b8:4b:6a:77:14:
58:8f:b9:8d:ca:a5:ec:b8:78:a5:97:66:40:b0:ae:
fa:53:c8:04:18:ba:84:e2:4c:b4:2c:be:57:d6:4f:
08:f9:2c:8d:e5:f3:34:fe:2a:fb:65:65:44:01:57:
ae:82:00:9e:ac:70:8c:d2:85:0f:8b:b8:11:61:72:
a3:13:7a:57:05:0a:0a:88:c1:8a:53:04:8a:88:8c:
51:9b:33:9b:dd:e9:95:5e:f4:81:5d:fc:b8:9d:7c:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:1E:6F:A1:86:10:C8:C8:A9:02:12:C3:40:34:49:EE:F8:0D:12
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ed:a0:97:db:8b:c2:d0:98:ce:78:29:ca:e5:20:44:d1:f1:
79:98:b7:9f:94:78:f1:14:16:77:fc:bb:ac:a5:c6:89:be:4e:
36:36:a3:05:28:5b:68:8f:d9:2c:ac:21:4c:4b:67:b7:bf:0c:
e1:45:4b:59:58:c8:79:d5:fe:ef:8d:b2:50:e1:7d:03:88:3f:
e2:e4:0f:3c:a4:e3:f6:23:ac:23:f9:1f:72:6b:2c:62:99:a8:
0d:71:47:d1:54:00:38:88:77:ac:51:63:3d:4c:5f:17:67:80:
bc:69:c3:e7:bb:55:a5:9c:52:25:67:47:cf:2f:0b:8e:4b:0f:
64:57:e4:ad:99:7b:7a:5c:30:df:8c:4f:50:a8:8f:ed:e1:b3:
4e:11:30:30:77:2e:9b:2f:70:b4:6a:64:84:90:c7:0a:0a:ca:
2e:2f:4d:d9:d6:09:0f:58:b8:ea:f2:bf:03:3d:86:d1:1f:1a:
43:f0:5a:e1:ec:75:e4:f9:e5:da:5c:78:76:7f:f5:b6:75:bc:
c7:0c:a9:49:48:cf:88:07:c3:00:1b:1a:24:c4:e1:f8:54:46:
4a:37:9a:49:83:f2:14:de:12:e5:9a:91:bf:a4:a0:c1:89:c7:
36:e0:79:1c:69:bf:3b:03:dd:e3:52:15:b5:17:a6:f9:62:36:
42:fd:82:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:36 2025 by rpki-client