Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: trwcSVGtqGb/0vehc5Oy8YCByae1mYezRj/qNm9Yfe8=
Subject key identifier: 8E:D3:C1:F6:52:BB:D2:85:89:42:6F:DC:F9:B2:F4:6D:5D:57:61:3A
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 0199FB0EDF5B6159E70F27B1FADF71555615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 1142
Signing time: Sun 19 Oct 2025 06:01:19 +0000
Manifest this update: Sun 19 Oct 2025 06:01:19 +0000
Manifest next update: Mon 20 Oct 2025 06:01:19 +0000
Files and hashes: 1: DfIfeCsjxuTLGxOswS1IRTtCtFo.roa (hash: BfLaITLvBopGuXyhXf+VexAjyd8LBGCkT8+9wJK+KLI=)
2: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: BiTwY8bFUeyxleHeoje7zMkqIeIAFcCtAakFsypaB+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:df:5b:61:59:e7:0f:27:b1:fa:df:71:55:56:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Oct 19 06:01:19 2025 GMT
Not After : Oct 20 06:01:19 2025 GMT
Subject: CN=8ed3c1f652bbd28589426fdcf9b2f46d5d57613a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:f2:5b:67:42:f6:c9:54:8d:85:7c:b4:85:
80:ca:6a:da:8d:b4:74:e4:82:8f:6b:b9:c5:50:16:
cc:d9:25:41:4a:be:55:34:de:76:39:c0:ab:68:b9:
fe:59:1d:4c:de:52:67:41:99:7d:6b:96:4f:af:75:
d8:51:60:cb:30:72:0c:24:66:58:67:fd:b5:9b:04:
56:34:16:9b:58:ed:61:03:06:1d:61:b5:5b:21:7f:
ac:fa:a4:ea:79:21:8d:8d:78:0c:5b:d5:95:b5:10:
d3:0b:6a:f0:57:4a:ec:e0:30:bf:7a:9d:1e:f5:63:
fd:1e:dc:ff:20:5b:99:8a:9a:33:d6:ca:8c:25:bc:
b7:fb:a6:d5:98:83:5f:3e:9b:19:16:4a:10:c1:b7:
e3:e5:76:f4:b1:67:1c:b1:fa:fd:c7:e5:ba:67:eb:
b2:c7:0b:48:9d:e3:c1:28:28:72:9d:30:a1:87:1f:
04:b3:33:77:e8:e5:dc:06:53:92:2f:f2:ad:ff:2d:
9b:47:4e:46:9a:c7:40:73:fe:af:c1:2c:47:9b:30:
fc:bb:27:ad:b4:e9:62:55:a7:c0:e8:79:30:2a:1f:
ff:f3:e9:f7:1b:6a:0f:12:94:57:c4:a6:67:79:13:
23:6c:88:e8:07:85:f4:6d:72:45:ca:51:0d:b9:89:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D3:C1:F6:52:BB:D2:85:89:42:6F:DC:F9:B2:F4:6D:5D:57:61:3A
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:35:98:75:7d:69:0e:3a:ee:ed:fe:aa:12:d1:47:62:17:
4c:56:e2:62:1a:a2:87:23:51:bb:5f:8a:e4:84:0b:76:96:ef:
0d:e0:e0:ce:e4:c8:41:3a:c2:b6:6c:85:9e:b8:b1:ee:d4:81:
61:5e:8a:24:ec:c4:af:b4:ff:43:b4:3b:22:39:ed:bc:2c:38:
25:6c:08:1b:5d:49:7e:3b:0c:69:04:52:6e:19:03:29:be:1d:
1d:f5:88:1c:dd:dc:b3:27:90:a9:63:ce:ea:ce:c0:51:1c:aa:
20:18:e7:ba:72:35:ae:9d:9d:ca:60:a3:a1:f3:81:23:0d:36:
18:43:86:84:d5:5a:03:49:3b:32:63:37:f4:07:09:73:b6:b5:
3f:08:f2:cf:5f:5c:dc:81:1c:57:f9:b4:a6:68:9e:17:3f:3a:
b7:98:d5:fe:b1:7b:be:ab:27:fe:93:bc:1f:19:19:fd:76:e8:
91:8e:cc:f0:80:d5:a5:a6:fe:4f:1d:04:51:25:47:18:fc:c2:
19:b4:68:bf:42:02:3e:3b:22:5b:48:7c:40:0a:29:a3:18:c4:
16:6b:57:aa:3a:87:1a:99:5e:f3:3d:2a:1b:44:63:b7:8b:8f:
74:b5:09:98:73:0a:e8:73:3a:ea:3a:3f:48:3a:40:4e:17:cd:
cc:e0:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:45 2025 by rpki-client