Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: UlNDYM/De/7wqkujAmWMmO4/8isb3WQ6a3NOa1bxg7c=
Subject key identifier: 47:E7:56:1C:93:B7:29:D9:1F:66:66:2C:70:94:39:CD:11:AE:0B:36
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 019A006C76494F62DBDDED93724E55201B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 1368
Signing time: Mon 20 Oct 2025 07:01:39 +0000
Manifest this update: Mon 20 Oct 2025 07:01:39 +0000
Manifest next update: Tue 21 Oct 2025 07:01:39 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: G748Z2gjnuC3To+BlpHEAKRbgsQHs+2ttBWPaWmVcaQ=)
2: OcIpHvqAwT2M9dTBJHDbqY1xej4.roa (hash: gnCvl1Md/DWtZz5X5Y7WYVBP9HfFDhgD11ts2150gvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:76:49:4f:62:db:dd:ed:93:72:4e:55:20:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Oct 20 07:01:39 2025 GMT
Not After : Oct 21 07:01:39 2025 GMT
Subject: CN=47e7561c93b729d91f66662c709439cd11ae0b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:38:a3:8a:1a:0b:99:de:4f:4e:5e:91:d7:
e2:05:ee:61:a7:33:e6:f5:a8:a1:9f:b9:34:fe:f9:
58:27:e3:e9:39:b2:3e:5d:75:93:34:00:43:fb:0e:
3b:79:de:18:20:8e:e5:45:a0:9a:a6:a7:48:af:0f:
db:e2:8c:eb:86:2c:e3:77:d4:8d:52:c1:05:54:74:
6d:5f:6c:18:94:31:e8:7c:a5:a8:51:91:1e:3b:4c:
f7:84:1f:06:7e:9e:21:ee:ed:ff:26:14:58:b6:22:
cc:23:29:e5:6e:16:53:b5:3a:39:63:2e:ac:62:10:
a4:c6:ae:81:eb:90:f6:f5:dd:08:cb:82:8b:4a:f1:
75:0b:76:bf:47:24:f4:fb:3c:60:b5:f8:bb:0f:0f:
0a:2b:96:6b:b6:b1:ab:c0:0d:d2:c9:3b:1a:74:de:
c1:76:61:79:24:b0:78:eb:20:ba:4b:ff:bd:68:35:
74:ef:23:f9:49:2c:b2:4d:16:eb:21:68:2c:cf:2e:
be:12:6e:43:fa:da:31:2b:74:19:9d:6d:91:bd:2f:
bf:f7:53:1a:cc:51:63:b2:76:61:90:2a:05:69:f4:
33:0c:79:bb:7d:5f:75:a9:2b:4c:8f:49:a5:1f:3f:
7d:98:71:9c:ba:eb:1d:75:9f:c9:69:17:81:8d:a6:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:56:1C:93:B7:29:D9:1F:66:66:2C:70:94:39:CD:11:AE:0B:36
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bf:8c:83:b1:d3:59:0a:3d:3c:3f:9e:e9:b8:43:38:e9:41:
5f:ac:b6:77:fc:7f:0c:76:1d:74:17:e1:a3:f3:e9:99:6f:0f:
6e:10:95:6b:bd:6a:c6:fc:08:6c:41:65:57:29:40:d1:0b:a0:
88:53:de:37:42:ba:db:91:60:59:16:a8:eb:6e:c6:1b:90:dc:
d3:3b:7f:78:fa:c9:14:a2:68:0b:f1:7c:81:5a:bd:8d:7e:cd:
8b:15:47:36:bf:92:49:df:3b:05:49:ed:ae:62:14:34:52:dd:
8d:a2:13:55:04:99:dd:78:64:13:7b:58:91:d7:e6:14:0f:c9:
f5:98:88:12:17:1f:10:ba:b4:4b:62:cb:05:45:37:8d:f3:a0:
13:41:c7:a4:97:d0:51:f8:48:31:b0:46:be:7a:3c:3e:f1:fb:
55:17:11:f5:bd:37:e4:b6:04:d1:6c:6d:60:e6:75:5f:01:f0:
3f:fc:1d:cc:9b:b9:50:2a:5d:72:1e:68:57:d9:15:2a:68:1d:
8f:65:63:f4:23:b1:d2:a6:a0:bf:d2:cc:60:6c:82:10:a1:0c:
52:48:b4:2b:22:86:14:12:e7:b2:e2:3e:ad:f4:72:ab:a2:01:
53:92:33:81:d2:82:43:3d:e0:6a:8d:e0:91:61:53:52:75:3f:
58:a8:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:47 2025 by rpki-client