Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier: 0XXjsv/LgPH10Egx+Fr+p/icRX+OjdW2r76ar78p6kA=
Subject key identifier: 1D:79:84:D3:1D:B5:85:79:93:49:19:3C:B7:3C:0B:C1:03:BE:4F:A1
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 0199FE7E0147AB8BFD41A4FB542D29A5BEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number: 0BDD
Signing time: Sun 19 Oct 2025 22:01:34 +0000
Manifest this update: Sun 19 Oct 2025 22:01:34 +0000
Manifest next update: Mon 20 Oct 2025 22:01:34 +0000
Files and hashes: 1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=)
2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: dMuvIuPnJ+0YxUd/nLIjYe0dycjtYeWa4nJuDNCs6no=)
3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=)
4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:01:47:ab:8b:fd:41:a4:fb:54:2d:29:a5:be:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Oct 19 22:01:34 2025 GMT
Not After : Oct 20 22:01:34 2025 GMT
Subject: CN=1d7984d31db585799349193cb73c0bc103be4fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:6b:07:3f:bb:aa:be:7b:53:e0:8f:87:4a:
09:91:5b:c2:6a:df:d3:95:0b:b7:7f:31:62:97:ee:
9c:31:ed:f0:43:9c:6d:ca:89:43:ae:39:46:97:9b:
7b:15:e6:d8:a3:df:21:d5:2f:ac:6a:35:78:fa:80:
ec:dc:32:2e:bd:a1:68:99:0e:8b:c2:2e:ba:4b:ff:
61:d8:97:e1:73:ed:d1:0a:18:11:9f:39:d6:c4:58:
68:f3:f9:01:09:66:f9:68:4f:cb:4d:e0:8c:90:74:
d1:04:9a:d4:c4:ca:c5:57:ce:3c:49:7f:58:72:79:
14:5d:2f:81:7d:fe:0d:55:52:5c:5c:f0:74:54:bf:
a9:44:86:5a:a3:7c:f3:93:80:81:51:59:0e:08:6c:
6d:b2:1a:fe:04:be:c0:a1:6a:b0:0b:84:c8:ac:31:
64:94:f9:01:8c:92:53:6e:c7:91:b8:7f:a4:7a:23:
4d:88:fb:06:a0:17:30:26:34:21:cd:b6:8d:51:e9:
18:11:8c:d4:30:21:6d:dc:53:64:70:4f:81:d2:eb:
8d:d0:ee:1c:e2:f1:94:38:45:92:60:80:4d:5c:b9:
e3:85:42:8b:fb:e6:ab:62:41:f1:62:d5:c7:ef:cc:
1b:6d:67:fb:6b:ef:7c:af:42:4b:43:ca:b1:fd:15:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:79:84:D3:1D:B5:85:79:93:49:19:3C:B7:3C:0B:C1:03:BE:4F:A1
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:25:ed:0b:41:71:60:c0:7c:41:ad:f8:fb:68:f6:6d:e0:
c4:17:fb:64:7b:70:41:fa:d7:b6:c4:c8:5b:40:f7:7e:07:a8:
51:e2:a3:8b:c0:9c:bd:83:94:9b:66:77:b7:75:56:8a:11:27:
2d:b4:06:77:54:fc:8d:eb:e6:94:91:dd:e5:f6:02:0a:04:0f:
2a:e1:65:9a:7e:f9:83:ce:1f:8d:9d:8a:8f:53:d4:d5:78:5b:
bb:af:5b:ea:69:33:58:a7:d7:14:35:80:06:bb:cd:51:f2:dc:
e8:b6:64:8b:35:d9:4a:e9:0f:97:6f:52:65:4d:2c:cf:ed:bc:
03:e5:45:5e:85:95:81:eb:e4:cd:a8:b6:e3:33:d4:90:1c:18:
47:d5:46:e0:df:f9:69:fa:82:2c:a3:1e:87:4d:fd:f9:f1:c2:
bf:ab:7d:a8:09:0f:ce:83:89:71:c4:84:45:d7:9c:ee:f0:32:
cf:aa:6f:6b:6d:2e:ca:39:d5:89:cf:ef:5a:ce:56:6f:ab:0e:
b9:88:df:0e:f2:46:62:f6:66:ee:47:55:28:cd:85:da:d1:2e:
70:af:fb:89:86:b2:2f:89:09:4b:95:6a:35:76:cf:4a:bb:98:
06:17:bd:13:fd:92:28:e5:95:8c:a4:68:a8:81:7f:61:24:db:
43:b6:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:09 2025 by rpki-client