Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier: 7Rff6caxkCLVWTpRVyy+Orci9Paqot8IAzFBT4l18iI=
Subject key identifier: 2E:6F:90:85:F6:4D:46:EC:63:E3:57:58:B7:78:3B:AB:B4:D2:B2:E9
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial: 0199FDDA08BF8C1C372C2959A3FC10B92663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number: 0A3D
Signing time: Sun 19 Oct 2025 19:02:28 +0000
Manifest this update: Sun 19 Oct 2025 19:02:28 +0000
Manifest next update: Mon 20 Oct 2025 19:02:28 +0000
Files and hashes: 1: 5MBvIRiYFms3iGBeHF3RQe9ll34.roa (hash: ZOt4HY8JzWPIwKbCM0yXoS+siw4USQmatYhxT9gEU9M=)
2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: 5JA+bjz13pp8lrM784l13mxb5DfTBblIrIehngh4pc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:08:bf:8c:1c:37:2c:29:59:a3:fc:10:b9:26:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Validity
Not Before: Oct 19 19:02:28 2025 GMT
Not After : Oct 20 19:02:28 2025 GMT
Subject: CN=2e6f9085f64d46ec63e35758b7783babb4d2b2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:aa:a3:d5:20:e7:86:04:0e:af:10:dd:e1:
b1:8a:31:0b:fe:ba:86:50:58:44:e9:5c:66:8c:98:
d3:8c:4f:b0:6d:c7:1e:ab:06:68:ae:43:31:53:3e:
6c:f8:6a:34:88:d7:74:98:1b:88:d7:e4:0b:66:49:
6e:9a:83:e9:24:e0:3e:99:6f:0c:3e:74:a4:4c:92:
7e:10:66:0b:8d:8d:10:79:0e:d9:56:75:4c:a6:2d:
ac:9a:8f:c5:f0:4b:fa:7f:0b:f2:80:9f:2b:1e:69:
a4:81:af:bc:df:f2:89:21:c5:3e:a0:52:41:f4:ac:
fb:5f:b3:e3:04:fc:76:01:0b:2b:f6:81:c1:01:68:
40:6e:fb:94:6f:a5:9a:98:8c:80:f0:05:a6:d1:fb:
4b:f6:c8:2f:6f:8a:a1:14:80:7c:9f:ef:2b:86:eb:
c6:37:30:0a:0e:70:5d:18:e6:d4:dd:6d:b6:8a:6e:
5d:eb:61:f8:a8:e3:15:e7:3d:aa:11:2b:a2:06:35:
98:89:11:81:ed:fe:71:86:51:12:32:ed:bf:32:7a:
66:4a:a8:db:5e:89:68:a1:15:57:35:98:fe:db:27:
cd:59:89:39:20:be:3b:24:2b:08:62:08:57:97:99:
be:a5:08:e8:3e:a8:3b:a0:b9:e5:d0:cf:8c:22:a7:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6F:90:85:F6:4D:46:EC:63:E3:57:58:B7:78:3B:AB:B4:D2:B2:E9
X509v3 Authority Key Identifier:
keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:67:62:f1:16:a1:f3:88:17:ff:c2:bd:4f:8c:63:6b:26:71:
12:40:a3:52:6e:3e:04:81:9f:39:48:46:2a:03:1d:8a:b0:49:
20:a8:b1:cf:eb:9a:d7:a6:e0:54:3e:69:f4:42:f0:6a:9c:ef:
ee:53:7b:85:15:bc:de:49:27:12:16:b5:29:54:c9:f4:4a:3c:
a5:87:66:67:88:cd:17:d6:0d:44:3d:09:fd:93:ca:0e:3a:e1:
d0:4c:9e:4e:3b:47:32:89:9a:e7:6c:c7:e5:59:06:80:50:87:
ab:82:2a:b8:c1:7a:e1:97:e8:70:05:ff:5e:de:9e:a5:df:24:
7a:c4:cc:84:0b:4d:65:51:23:12:fc:d1:1a:5a:85:d9:df:aa:
26:27:d3:02:61:3c:e2:a0:33:e8:a5:0f:2a:6c:15:17:01:69:
9f:46:48:dc:50:08:b5:d1:0d:6d:41:c3:3b:6b:aa:25:ea:2f:
01:96:df:7e:0d:a9:dd:41:9b:d5:d3:e9:9c:52:0b:72:3b:79:
c0:89:1f:66:a7:e2:eb:9d:70:ac:30:21:4e:b5:71:1e:a6:8e:
bc:ff:a6:3a:f2:29:12:1f:23:10:e2:ce:52:42:42:e1:55:cd:
15:60:3e:b8:57:18:2f:6e:5f:8d:49:24:a8:56:51:03:a2:91:
dd:32:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:38:18 2025 by rpki-client