Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: L3DAbGj0Pz1CfiJWRh9c4JXgSz0MYgz+UoPVxzXdSMg=
Subject key identifier: A0:58:71:64:F7:3B:E9:83:51:BF:ED:6E:F8:6A:73:40:89:3C:34:85
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 0199FBEBAE06CAC4327BB29C49EC8A8B070E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0C2C
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: mfoSROk5EFA3BOOiO0QVugkRq+31ZARrv+tqvjezyAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ae:06:ca:c4:32:7b:b2:9c:49:ec:8a:8b:07:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=a0587164f73be98351bfed6ef86a7340893c3485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:fb:d1:ed:dd:e9:f1:8e:4e:a4:bc:74:78:
38:92:4e:f0:43:07:7c:cb:3d:02:b9:ef:3d:e2:82:
5b:11:ad:fe:01:07:a8:13:cb:25:f2:ce:d8:68:cc:
dc:cd:d3:0c:50:65:c0:47:5d:0d:d6:66:b8:4f:16:
b9:46:74:10:18:17:70:23:af:80:b3:5e:6b:29:d4:
85:44:bd:cf:78:b4:26:8d:7e:d1:4d:93:a9:08:c2:
2a:75:91:ee:58:7c:0d:6d:8a:7c:d8:6b:97:b5:e3:
06:20:0e:f0:15:7a:3c:e6:aa:33:13:9a:1f:bb:0a:
73:0e:46:91:bf:76:91:45:f9:d9:2d:8c:0f:9e:96:
5f:72:64:d0:e1:47:a3:81:3f:26:5f:10:93:a2:77:
79:9b:4a:ce:30:0c:08:b7:49:07:8e:18:3d:f4:fe:
12:41:63:e5:01:44:05:f4:b5:08:66:c6:a8:aa:c4:
7b:ec:68:d9:7c:67:1d:8c:ed:42:4f:54:dc:a5:ce:
bb:1a:a3:44:a1:6a:ae:d2:d2:c4:9d:7a:f5:4e:d5:
8e:5c:46:83:f0:18:67:b3:4c:a8:1d:b7:c8:32:a6:
6f:f4:80:a3:80:69:2f:60:96:50:fe:92:67:f6:eb:
ce:9c:44:6a:8d:ec:be:bd:4d:90:45:b8:00:f9:7b:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:71:64:F7:3B:E9:83:51:BF:ED:6E:F8:6A:73:40:89:3C:34:85
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:26:95:d1:fa:a3:7a:a4:e4:40:a5:6a:87:05:0d:9e:6a:b1:
f8:29:ba:69:f4:a7:b4:3d:f0:bd:fd:ab:16:fc:81:6a:26:0a:
ee:66:19:ee:82:d4:8f:05:8f:ad:ac:55:a8:11:ab:43:99:46:
8a:48:5f:e3:90:97:1a:0e:07:ac:02:85:e9:38:11:f6:b4:fb:
66:8c:cf:cb:67:23:cf:de:b2:26:e0:92:ad:33:fc:0f:ab:25:
7a:17:89:ec:9a:ed:46:05:bb:21:8c:8d:18:43:87:22:84:37:
1e:2e:8a:37:dd:d2:9a:58:8f:cf:a6:20:39:bf:57:e4:24:74:
08:14:74:a3:ca:e2:cc:3b:6b:b5:47:f3:dd:ee:06:9d:ec:94:
c3:3d:6d:ae:ce:49:fa:06:a0:6e:62:5c:b1:e1:48:73:8f:29:
e9:d2:3e:a2:fb:4c:e2:e5:0c:2d:9d:6a:ba:14:96:3e:c8:1f:
4d:4d:fa:14:fd:e0:8b:2a:97:a2:0b:36:ee:ec:c7:dc:94:c3:
cf:d4:27:68:d9:7d:a3:54:4e:50:c7:bd:a2:55:06:7b:73:95:
80:97:85:0c:a7:07:0b:77:07:ae:0a:d5:5b:b7:c6:da:ca:65:
2a:41:fc:b8:0d:9d:de:ac:a5:ea:7c:cf:33:61:3f:72:c0:4f:
71:d4:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:30 2025 by rpki-client