Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: xG5nsk01wK3wlgxDk0PlleMRioDFK8dGoP2oUrbBT90=
Subject key identifier: 4E:CE:79:32:D9:F3:EF:0E:AC:2E:D3:DB:1F:C5:30:C0:9E:9D:65:45
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 0199FB0EFA61C3EBE55E83251A8CA261B005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 06:01:26 +0000
Manifest this update: Sun 19 Oct 2025 06:01:26 +0000
Manifest next update: Mon 20 Oct 2025 06:01:26 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: HMKaOShahkCK3/v0AzR1WQbbPHCc6ckPYZ0T/Q68Qk0=)
2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:fa:61:c3:eb:e5:5e:83:25:1a:8c:a2:61:b0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Oct 19 06:01:26 2025 GMT
Not After : Oct 20 06:01:26 2025 GMT
Subject: CN=4ece7932d9f3ef0eac2ed3db1fc530c09e9d6545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b1:71:dd:07:a2:da:84:9c:bb:f0:10:3b:e4:
12:a1:3b:b6:42:51:ba:09:f5:4b:93:0e:58:16:3a:
d6:33:e3:1f:44:6c:c6:38:72:e8:99:c4:1d:ea:6f:
f6:e5:56:2e:04:08:10:7d:38:d9:39:bd:db:b5:e4:
40:ba:60:71:bd:9b:34:09:b0:19:89:17:de:7b:6c:
db:af:8e:69:54:5d:ae:11:d0:5b:22:51:bd:73:12:
a9:5f:7f:45:83:ea:ae:41:fe:d2:ba:78:d6:1f:af:
b5:fc:25:28:99:4a:48:54:97:11:e3:ee:42:8c:d8:
71:de:f6:6e:f0:79:9a:5c:1b:a9:6d:d0:da:e6:48:
7c:f3:96:9c:06:4b:c7:6d:36:02:df:70:4c:ce:7d:
77:60:d1:1c:38:65:48:aa:db:cc:7b:1a:00:79:5c:
c2:5e:ed:c4:1e:6f:a9:1c:13:fa:c3:25:27:48:e7:
af:40:ae:60:05:6e:a3:7c:0c:81:eb:4f:e4:64:11:
9d:4e:6b:42:e3:4e:39:f4:7d:e2:c9:93:3e:0c:c6:
d7:df:00:20:65:71:d0:c3:6e:50:7c:05:7b:ce:e6:
93:c2:1f:f1:57:86:e7:bb:14:34:6c:4a:18:1d:b3:
d5:6d:5a:33:8b:b8:95:aa:4f:cf:b3:bb:3b:38:9b:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:79:32:D9:F3:EF:0E:AC:2E:D3:DB:1F:C5:30:C0:9E:9D:65:45
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:10:14:7f:da:2a:7f:89:7e:1e:02:c6:ec:41:a4:b7:a2:00:
65:0b:a5:d8:c4:55:a4:85:52:61:24:e8:48:59:e1:f7:b4:9c:
90:a8:f3:a2:01:40:9f:ca:42:43:45:75:49:e6:35:f0:ef:51:
1f:93:32:61:29:07:22:6a:a0:75:61:f6:1d:0e:04:1d:f8:cb:
4d:eb:be:ef:b2:aa:5f:30:8f:4a:b5:aa:31:14:be:2d:5b:a7:
ff:89:59:9e:8b:9b:52:83:6e:dd:c7:1a:00:04:cb:cb:a1:3e:
a8:ce:0f:39:9f:d7:c1:09:4f:a7:a7:64:99:1e:f6:15:64:03:
4d:00:4d:8e:29:d5:b9:4e:c8:db:90:61:14:0c:30:c5:6c:22:
27:ce:66:5d:42:e0:ff:85:55:c2:73:28:9e:51:98:d9:c0:2b:
7a:5f:ff:a4:b6:6c:3f:36:cd:24:63:df:93:33:ec:cf:a4:27:
02:f6:96:be:19:b3:2c:2b:1a:13:bc:ef:aa:95:1c:c6:f4:bb:
ba:8d:88:29:24:05:8a:fa:4c:3d:a3:4f:37:92:3e:51:2d:18:
0c:6e:d3:8f:29:63:26:97:e5:91:13:1f:ab:02:e7:2a:37:08:
63:7c:7b:16:9b:4f:db:05:d5:db:b4:bc:b6:a1:64:69:a3:8b:
bd:93:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:09 2025 by rpki-client