Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: aaKgC1YLbaZYelYWcsld2KiQASIYC0FS6T4wVqxuyzw=
Subject key identifier: DB:94:87:72:53:9A:66:B2:7A:E5:69:11:FB:FE:DE:6D:A6:A5:04:67
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 0199FEB51595C7AB5436A5F0C864C2F67C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0AA9
Signing time: Sun 19 Oct 2025 23:01:44 +0000
Manifest this update: Sun 19 Oct 2025 23:01:44 +0000
Manifest next update: Mon 20 Oct 2025 23:01:44 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: P5vuiP0GL+Ka9oS3YLkf2qWwANaPP65NakVf61B7J1Q=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:15:95:c7:ab:54:36:a5:f0:c8:64:c2:f6:7c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Oct 19 23:01:44 2025 GMT
Not After : Oct 20 23:01:44 2025 GMT
Subject: CN=db948772539a66b27ae56911fbfede6da6a50467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:b1:7d:38:89:23:89:f4:35:58:93:eb:2a:
71:ec:59:b8:35:77:af:9a:1a:17:2a:82:ec:75:da:
91:0f:b1:6d:f4:17:80:72:8a:a5:93:cc:cb:52:32:
29:d9:5b:3b:dc:f7:43:17:18:20:a3:c9:dd:ec:e1:
ca:33:92:b1:c8:63:8a:5d:27:e9:93:0a:49:a1:b6:
16:41:78:f9:d5:27:ee:e4:4e:0c:76:b9:4c:20:8e:
9f:78:a0:42:0e:cb:fe:28:91:0f:9a:d3:5c:d4:65:
f3:52:66:cd:d6:1f:65:99:af:4e:46:91:58:aa:fd:
c3:f6:3c:44:ae:dc:26:d8:a2:54:32:d3:38:58:77:
ed:01:18:7d:22:7a:64:44:81:d8:42:dc:e9:65:8d:
4e:1e:90:62:77:21:fa:22:9b:9a:0a:fc:2f:92:6d:
47:3b:d3:37:ae:98:44:f7:58:11:db:eb:d3:24:f9:
71:75:20:2f:70:73:9f:0a:6b:08:5e:e4:24:18:0d:
ab:4a:9d:1d:43:6e:ab:d5:7e:89:e3:ab:44:c0:c5:
41:d1:0e:a4:c4:14:3e:b2:ea:f6:55:85:d4:cb:46:
29:a6:7c:6c:57:4d:fb:5a:98:e3:a3:10:c1:1e:76:
89:71:05:01:2e:a0:69:3c:1d:86:a5:b5:b9:63:84:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:87:72:53:9A:66:B2:7A:E5:69:11:FB:FE:DE:6D:A6:A5:04:67
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:7c:10:6f:3c:d3:39:a8:01:70:bd:9a:45:c5:08:7f:72:
41:c4:61:13:56:36:f3:24:03:6a:cd:e9:16:d3:61:be:4b:39:
7d:5f:91:2d:fb:00:66:cf:d1:7c:9e:1a:ea:73:e4:9d:5d:3f:
c3:35:16:7b:27:8d:5b:1a:4f:9b:98:5b:6d:1b:5b:cf:1f:46:
8c:f0:4d:0b:02:d6:f1:41:4f:93:7f:5c:1b:47:ed:0a:e1:d7:
d0:95:1a:37:34:94:17:9e:6d:7a:c4:82:d9:9f:39:eb:a6:a8:
4d:f0:0e:04:d7:8f:3b:83:e5:65:77:f3:1b:d6:b7:75:16:82:
89:f4:0d:6c:7f:6b:9f:c2:c3:2c:32:99:8b:39:53:bc:a0:6c:
1d:95:5f:a1:ad:04:9a:0d:aa:9e:2f:0b:6e:78:52:c0:3e:36:
8e:11:82:40:f9:61:a7:5f:c0:dd:0e:a6:d0:ab:96:23:cd:9d:
8c:6c:e9:a9:83:43:d8:bc:1f:06:4d:5f:32:6b:11:9b:a9:d4:
6d:d8:bd:e5:e4:3b:71:51:c9:2d:f5:64:22:c5:c5:33:86:20:
0f:59:99:9b:9c:66:6b:32:35:56:84:a8:d2:89:59:44:eb:d8:
6b:b6:f7:8d:b3:0f:4c:5e:bb:09:bf:dc:4e:56:d8:b2:81:63:
27:af:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:23 2025 by rpki-client