Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: 7k02Z4XWCVB4Nc4PQgllKA3ByOVchsac5eJFjuWno6U=
Subject key identifier: 64:1C:7D:A5:21:15:FF:23:D0:BA:98:EB:25:7E:D1:82:25:F9:9C:24
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 0199FE7DF1D1AA7394D44658952FDFCE01AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 1327
Signing time: Sun 19 Oct 2025 22:01:30 +0000
Manifest this update: Sun 19 Oct 2025 22:01:30 +0000
Manifest next update: Mon 20 Oct 2025 22:01:30 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: jUg8Er8+LXD3ZF+oqIPkMmJ2x8SzZwpnLKQ4VBBXQpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f1:d1:aa:73:94:d4:46:58:95:2f:df:ce:01:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Oct 19 22:01:30 2025 GMT
Not After : Oct 20 22:01:30 2025 GMT
Subject: CN=641c7da52115ff23d0ba98eb257ed18225f99c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:92:6b:aa:27:14:22:7a:ba:a0:d0:d4:24:
50:c2:12:95:e6:e6:bc:38:d3:c0:08:15:21:36:ed:
73:e7:51:0e:46:fe:d2:9e:80:99:cf:20:4f:0a:4b:
9f:98:d8:3d:dc:46:8f:8a:f5:70:32:44:15:b8:bb:
9c:98:32:83:04:2d:35:aa:1f:24:97:c6:ec:be:40:
67:ae:5f:f2:07:d1:f5:77:df:4c:9c:ab:93:3e:97:
0b:8d:29:b1:51:d6:16:16:53:3e:11:c7:05:23:ba:
74:d0:ed:19:a9:1d:ba:4a:2c:cc:3d:49:67:ce:d4:
ee:86:0f:04:26:5c:4b:96:4c:11:e0:c1:9b:db:74:
cd:e3:a0:9e:b2:57:0a:3d:e4:cc:62:33:39:62:19:
6c:82:ee:4b:8f:d3:ce:06:64:94:a1:28:17:8d:e5:
ac:da:36:b4:ef:f8:60:85:27:19:b3:b0:79:ea:18:
17:d1:9e:83:a1:4b:35:76:fb:df:ea:08:c1:73:bb:
b5:37:5f:4a:8f:42:21:b5:d3:5d:55:1c:a9:7b:80:
ce:ca:f0:f7:fe:43:29:43:e0:67:60:0c:7b:70:3b:
66:9e:c8:ab:60:bb:bf:51:0c:59:bf:ca:17:e0:64:
6c:54:e9:27:b7:b3:47:3a:53:23:11:ca:eb:51:14:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:7D:A5:21:15:FF:23:D0:BA:98:EB:25:7E:D1:82:25:F9:9C:24
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:09:33:07:f6:26:3f:43:5e:d8:d1:d4:23:47:27:1b:db:eb:
5a:0b:da:6e:fa:b6:ea:c2:db:fe:79:22:6f:02:ad:70:1f:39:
32:ef:36:68:b8:37:c6:5e:a4:fa:d4:84:16:24:5e:51:c9:1a:
49:ce:88:46:97:e1:51:a9:1b:32:13:1d:8c:f0:cc:80:78:18:
30:f4:65:9c:06:5a:72:42:1a:46:d0:0e:8f:df:ce:37:17:d6:
95:81:32:86:92:82:eb:f7:47:ae:a4:69:95:22:53:05:80:43:
5a:4b:22:e9:8f:58:0f:7d:ac:66:f1:15:2b:26:54:05:cb:7b:
3c:3a:1c:ea:07:91:de:18:fd:53:9f:19:6c:a5:0d:bc:f2:3b:
26:e4:24:69:9f:3f:17:88:57:7a:f4:a0:bf:d0:e3:9f:61:d4:
86:be:e8:ed:1b:13:1c:13:73:0f:2c:dd:05:be:60:6a:4c:0a:
e7:ff:74:7e:5d:1c:77:23:f3:a5:f8:27:72:1c:34:b6:82:9c:
2e:f5:3e:b0:db:22:17:cc:30:b2:86:0d:da:ce:cb:e6:25:a3:
4c:1c:4a:cd:d8:3a:c9:d8:8d:c7:55:90:78:fc:30:08:e2:c1:
f7:04:c8:ab:9d:1b:04:3c:5c:4e:a6:2b:75:35:35:aa:db:bc:
d0:16:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:35 2025 by rpki-client