
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier: p+wx186yBgXQEdnlCsRXZC+aNJ7DnalYB7ZoOMv9Cbw=
Subject key identifier: 9C:36:43:86:1A:33:1E:E4:87:4D:E6:D9:11:EF:67:CD:15:F0:80:3E
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial: 019A00DA6AFA5AC8DA1A8AD2AD1C1673EB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number: 05D5
Signing time: Mon 20 Oct 2025 09:01:45 +0000
Manifest this update: Mon 20 Oct 2025 09:01:45 +0000
Manifest next update: Tue 21 Oct 2025 09:01:45 +0000
Files and hashes: 1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=)
2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: 563WwZBjPQ+wbQiFjn+9eHLj2mr7bMNd55laCG2BAhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:6a:fa:5a:c8:da:1a:8a:d2:ad:1c:16:73:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Validity
Not Before: Oct 20 09:01:45 2025 GMT
Not After : Oct 21 09:01:45 2025 GMT
Subject: CN=9c3643861a331ee4874de6d911ef67cd15f0803e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:a7:0c:e2:f7:ca:91:fc:c7:c8:85:f8:db:
46:28:f7:19:ec:1c:bf:bf:db:fa:c5:00:fc:ca:69:
75:04:a3:87:32:95:42:49:0f:a6:96:b0:27:12:76:
ec:2e:e8:1c:32:0a:ae:27:9b:ff:99:46:0b:93:11:
40:e9:26:e5:ce:cd:bc:ad:a4:ee:bf:b9:87:d6:fb:
7e:15:97:42:5f:a0:c7:f8:b8:f2:c0:e4:4e:14:c6:
6d:1e:5c:ed:8c:36:0a:59:31:c7:1d:f1:7e:11:1e:
1f:9d:0c:f0:2b:f6:50:07:b0:41:1f:7f:e4:7e:53:
ab:1e:2c:d3:28:f6:a3:9f:98:c2:14:10:b8:ef:52:
fa:28:20:32:c2:13:f0:da:be:ae:f7:5a:18:32:0b:
fa:10:d2:d3:94:56:16:fe:4b:c1:2c:d4:4b:3f:7d:
05:5e:85:68:43:dd:01:67:f5:0f:d8:86:15:79:2a:
25:7f:28:ec:a0:b5:8d:1a:55:c1:18:9c:f3:b5:d0:
9c:4d:79:06:a7:a9:ed:1d:6d:2e:eb:d2:44:fe:da:
9f:c5:30:34:f6:50:2c:0b:b4:23:41:20:ed:d4:3b:
9a:61:11:55:cd:a9:67:bf:40:c1:11:df:85:d2:59:
5b:0f:39:d5:fb:ba:16:bb:a9:f9:9e:72:34:c7:a2:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:43:86:1A:33:1E:E4:87:4D:E6:D9:11:EF:67:CD:15:F0:80:3E
X509v3 Authority Key Identifier:
keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:69:6e:1a:c5:ae:af:35:22:ef:53:02:3f:77:43:9a:1f:6f:
4e:5c:d0:1d:88:f1:dd:3b:a2:51:0d:e4:f2:c5:e6:6d:47:5f:
13:9d:e9:02:d6:8f:65:7f:73:42:f7:ec:f3:10:e1:67:12:0a:
22:c7:2e:45:67:28:be:8d:21:94:91:60:05:b1:c7:fd:55:2a:
bb:54:ef:c3:c8:8a:b6:0c:b8:4e:3b:30:15:15:93:4a:b5:37:
f0:56:f2:b4:17:11:f8:e4:41:7c:14:f9:2f:17:b2:d2:1f:8a:
ac:95:e2:85:3f:2e:b1:5a:c6:f3:6f:a6:f6:b0:98:dd:9a:54:
ab:c5:f3:2a:f5:c5:3a:aa:29:5c:1b:81:cc:06:3d:0d:f7:c1:
5a:2a:74:38:d0:c3:d6:25:56:dc:61:49:6b:0f:dc:d5:55:c2:
bf:f0:95:a8:b2:9d:40:23:5d:ac:18:d2:4e:76:e5:32:4f:46:
c9:4d:a3:72:c0:66:89:61:d1:dd:6e:ca:38:20:03:4c:25:66:
53:cf:be:79:09:75:6f:eb:e9:d3:15:34:3b:7e:c9:28:d6:db:
a3:ba:a0:8b:de:dd:f7:30:c5:9f:b3:d4:92:ec:eb:a9:65:78:
29:e5:3e:10:66:a1:fc:c2:4a:b6:66:41:4c:c4:de:cf:69:20:
ee:d7:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:12 2025 by rpki-client