Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: HnKQYRY/IYl4hkl0ObpSpOgpjkIXIdf5U9vXhcFMkiI=
Subject key identifier: EE:DA:30:C4:48:C8:D0:11:22:0B:3A:D6:0A:24:CF:59:21:5D:19:8A
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 0199FB7D14F0231F47ABB84FFF69FD058216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 0538
Signing time: Sun 19 Oct 2025 08:01:42 +0000
Manifest this update: Sun 19 Oct 2025 08:01:42 +0000
Manifest next update: Mon 20 Oct 2025 08:01:42 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: v9WI19Z51tp5BgQOACWVGL+S7ybN/i/qjhsfCOHxYFc=)
2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:14:f0:23:1f:47:ab:b8:4f:ff:69:fd:05:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Oct 19 08:01:42 2025 GMT
Not After : Oct 20 08:01:42 2025 GMT
Subject: CN=eeda30c448c8d011220b3ad60a24cf59215d198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:01:62:0a:4e:40:a9:12:44:e0:13:84:97:
3e:7b:e9:73:1c:ab:cc:6c:f2:32:e5:56:21:24:0e:
0f:d3:f8:71:66:44:29:9a:65:e1:6f:ca:70:89:45:
ce:7e:cc:ce:a3:e2:a2:0c:9d:55:fc:d2:62:c1:ab:
52:24:38:ec:34:75:52:05:2c:62:4f:60:cc:e5:c8:
c7:f4:9f:9a:3c:aa:09:e3:8b:b1:eb:79:2f:af:b3:
e6:61:e5:7d:10:e2:9a:c3:1f:77:2b:e4:54:54:2e:
da:5b:ef:0d:06:51:67:a6:4c:50:de:f6:d9:4a:9f:
da:7d:60:45:58:d9:6c:bf:1d:57:2b:82:d4:c6:54:
2c:7f:5e:fe:7d:35:58:02:b4:1e:c9:1b:24:6a:46:
39:b7:a1:8e:45:cd:08:50:5c:3f:0f:e7:f0:58:81:
4d:e2:3d:ff:ca:08:49:1f:31:88:50:8c:5a:58:5a:
d4:a7:f7:35:6b:2b:16:bb:e8:36:94:3b:4c:67:1b:
0f:25:16:cb:85:a1:33:a4:51:b0:15:63:1b:2c:32:
07:27:5c:f7:48:40:47:d6:9d:ca:dd:75:d6:69:ea:
6a:7c:70:ce:44:b5:56:f9:de:94:df:0b:7f:b4:7b:
0a:c1:37:76:72:e0:23:5d:d6:c1:9f:74:d7:7b:57:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DA:30:C4:48:C8:D0:11:22:0B:3A:D6:0A:24:CF:59:21:5D:19:8A
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2d:cb:8f:60:4a:de:37:a8:a0:24:cb:4c:6e:89:7e:e1:d7:
dc:d2:4f:0f:22:29:05:e2:f3:1d:21:ac:cd:cf:36:ca:4d:0c:
f9:59:bf:a8:68:6b:3d:ed:bb:0c:75:1b:ed:16:3b:6c:ad:db:
94:fd:86:f3:7c:93:02:16:5f:c8:fc:0a:1b:db:20:c0:9e:c9:
d5:a7:b5:70:7d:64:e0:c2:e7:74:29:aa:a7:b1:76:88:14:a3:
10:0d:6c:3a:01:ab:44:d6:d7:ed:b5:32:9e:42:02:30:a8:d1:
9f:3d:3e:42:65:90:d0:47:ed:ba:98:31:e4:b4:e4:9b:d8:bf:
0e:f5:ec:85:95:f6:98:fc:e0:07:3a:c9:6d:d3:9e:b8:96:d3:
2c:c0:58:80:c5:69:fd:a9:59:3d:1c:c5:40:b5:0e:b3:05:12:
48:53:28:92:59:6b:4e:5d:fe:0e:7c:18:c3:0f:df:42:32:1b:
aa:01:a4:e4:73:52:65:20:aa:b0:d8:1c:42:d4:0f:d9:d9:c0:
2b:4d:2e:07:9a:36:02:65:b9:be:52:56:4e:a8:d1:2e:81:ed:
ac:26:f6:40:c9:23:07:9c:e6:79:7f:9e:29:0e:c3:eb:94:91:
1b:6f:64:c4:d2:3e:db:ec:4e:26:0f:ce:e4:37:e7:72:a6:56:
26:51:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:53 2025 by rpki-client