Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
File: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft (raw, json)
Hash identifier: O727Ft0BbPi2Msleq28NKHzIdbLkNm5bXf/E0rF2N/w=
Subject key identifier: C8:69:7F:72:8F:20:E7:4E:44:69:A6:4A:19:4D:B7:AC:99:78:57:87
Authority key identifier: D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
Certificate issuer: /CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Certificate serial: 0199FBEB242E3FC295B614617D80337BAF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: 0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl (hash: kFz8j996xuO5Rxhl0FnSgymXjjT+iUv7k4zY6IyBEhY=)
2: AddwdaQYSDgJ_-W9pipGLPibD4Q.roa (hash: YjKAFD6jnw8P32xCITagf8KVgpNGeRxCswidFmsKIOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:24:2e:3f:c2:95:b6:14:61:7d:80:33:7b:af:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65bec5c765c850ee8ff97cc41b38031d1d83a
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=c8697f728f20e74e4469a64a194db7ac99785787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:f6:dd:fc:3d:6e:9a:0d:6e:f5:f5:d0:9d:
52:6e:92:2f:c6:17:0d:1c:d7:72:1e:eb:de:52:51:
74:c6:0a:25:c5:50:45:7b:fa:bb:0e:cc:b8:a8:8e:
03:61:2a:93:d6:b8:ac:01:15:ed:8e:54:bd:f1:08:
1d:87:9b:01:87:d6:4d:e7:23:30:63:d8:e1:f4:8b:
00:a6:51:f8:9b:26:8f:01:e8:9b:ff:1c:6b:11:d7:
a2:71:b1:ba:cd:b1:31:c7:b6:37:3c:c6:d3:6b:72:
bd:a0:d3:6a:e8:54:59:c8:03:36:71:38:1d:68:9e:
2e:73:27:08:91:d0:68:1e:c2:ec:2d:45:77:5a:11:
f9:bb:e7:9a:d1:f5:61:ea:54:7e:28:cc:ac:a6:84:
30:e1:75:1e:cb:75:a6:cf:fb:18:b9:05:66:b1:ee:
8f:df:14:a4:42:60:5d:7a:fe:fd:1e:50:09:ce:73:
80:ed:e8:9f:f3:cd:e2:fe:6a:8f:66:7b:99:5f:2d:
5a:68:b2:80:09:0d:6d:0a:b5:3c:b3:2e:a1:74:23:
62:a6:28:b8:71:76:85:62:da:db:d2:3c:d1:2a:b6:
0d:36:cc:dd:54:1d:87:8f:f7:3d:c2:a5:fa:47:f0:
f0:db:48:03:76:5f:c5:f5:b8:b8:fc:4a:cc:1c:33:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:7F:72:8F:20:E7:4E:44:69:A6:4A:19:4D:B7:AC:99:78:57:87
X509v3 Authority Key Identifier:
keyid:D0:E6:5B:EC:5C:76:5C:85:0E:E8:FF:97:CC:41:B3:80:31:D1:D8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6bb7cb-d0ed-4650-ad0a-27a474505499/1/0OZb7Fx2XIUO6P-XzEGzgDHR2Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f1:e8:67:53:a5:1e:f4:1b:6a:81:2e:32:cf:2f:99:bc:18:
7d:4d:73:69:ca:db:62:26:cc:cd:b3:fa:80:4b:c4:0e:43:cf:
df:67:40:b8:56:11:14:db:3d:1f:97:ad:1c:3f:9d:68:f6:af:
6d:6e:bf:78:66:ec:df:3d:5f:7b:bd:23:11:fc:82:31:b2:f1:
54:b0:d9:de:13:e1:46:35:9f:e5:07:ba:71:cb:69:74:03:21:
b6:73:38:97:dc:1e:c2:62:6a:41:22:00:32:18:aa:8d:dd:57:
53:77:2f:bf:f9:0d:90:01:5e:9b:31:c7:cb:51:03:9e:cd:6f:
ae:87:d2:33:1e:bb:8d:d5:14:88:60:dc:c4:95:24:ee:fa:97:
29:96:06:53:32:fd:ef:74:74:ae:f9:7b:a7:ba:93:71:a4:d1:
32:48:8e:a7:10:8a:33:63:4e:d8:20:43:09:a4:7c:f5:f8:17:
cf:e9:3e:b3:88:a4:06:07:2f:63:fe:2e:21:bf:32:40:74:c8:
4f:87:0e:3f:e8:4b:87:22:60:68:86:c5:53:74:dc:d1:5a:ee:
b8:ca:99:d1:ac:96:92:99:f2:ca:ba:8d:49:bd:ee:5d:c0:9a:
09:89:05:6a:2e:76:c0:2b:85:71:21:56:b0:51:5d:d8:13:de:
cc:5c:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:39 2025 by rpki-client