
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: BPsXeda4VTfT3nwPqY7pcl0E6rkiWqc5aWYnWYy0S1o=
Subject key identifier: 55:11:E9:83:2F:7D:73:13:E0:36:10:A8:3C:64:DE:FA:F9:AB:49:7F
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 0199FCFD19D7F598EFB1301E5494E627D36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 15:01:09 +0000
Manifest this update: Sun 19 Oct 2025 15:01:09 +0000
Manifest next update: Mon 20 Oct 2025 15:01:09 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: RSLM9M4RObiK/jwUDaJVdeITLBDKY8hSz3SR7W4xTgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:19:d7:f5:98:ef:b1:30:1e:54:94:e6:27:d3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Oct 19 15:01:09 2025 GMT
Not After : Oct 20 15:01:09 2025 GMT
Subject: CN=5511e9832f7d7313e03610a83c64defaf9ab497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:12:61:c9:64:1d:29:e1:61:6a:d7:d4:7e:
88:b1:a6:87:5e:ef:6a:28:18:69:51:84:1b:34:99:
0f:09:69:03:e2:c2:f8:67:44:fb:60:fb:72:4d:d1:
8b:11:ae:1e:4d:8d:17:03:18:e7:a3:d6:96:17:a2:
41:cf:3a:3c:e3:46:6a:14:9a:46:0e:24:68:d6:fd:
80:c6:0e:ac:e5:7a:07:5a:e5:19:de:8b:4f:23:e8:
65:7e:79:47:1f:a6:bb:63:d3:21:91:f4:2c:6b:a6:
21:c1:50:70:ea:bb:5d:d6:3d:e8:32:b7:73:5a:9e:
a4:f4:33:c0:93:1f:db:8d:f9:91:4b:9a:41:50:88:
15:95:2f:23:83:ee:52:f7:ec:94:b7:28:ab:c7:4f:
94:77:41:07:92:23:a7:84:4f:a4:d1:06:b9:8d:a8:
81:8c:b9:0d:93:40:79:41:f0:d8:6b:35:6b:11:8f:
b5:d1:d3:d4:e0:18:e9:be:08:62:2f:54:79:38:d6:
c2:9b:98:ea:78:6c:73:74:9c:d6:b6:76:48:02:5d:
91:ce:1d:ac:83:20:22:de:32:37:c9:03:51:65:0c:
fd:d4:aa:b8:4d:72:1b:11:89:ea:b6:f8:d7:87:ba:
b2:f4:89:ba:53:f2:b8:35:b7:9f:2f:09:91:14:b2:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:11:E9:83:2F:7D:73:13:E0:36:10:A8:3C:64:DE:FA:F9:AB:49:7F
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:89:41:89:23:45:3d:7d:f5:3f:05:2c:c9:74:ea:2e:b9:e0:
3d:52:c6:ab:d8:ad:32:f5:ad:3d:60:39:1b:0f:54:b7:06:7b:
4b:ab:d4:9e:6b:9c:6c:6d:eb:8e:6a:06:f5:05:9f:c3:b8:68:
db:80:51:3b:b4:ae:af:38:fa:e6:f6:36:f6:34:13:3a:5e:c2:
6c:f3:df:e5:e1:e3:39:8f:1e:46:21:86:f6:3d:33:13:05:3e:
bc:6a:b4:df:f9:0a:e0:1d:bb:52:13:28:03:ef:fb:99:59:5b:
13:80:2b:fb:7a:ec:6d:b7:a7:97:c7:48:8f:98:21:4f:32:67:
56:84:9e:31:56:ca:86:02:ca:d8:1a:10:86:99:66:e3:90:c0:
71:c0:a6:b2:b3:de:87:c1:2a:16:55:e1:a9:9a:bc:75:bb:4c:
6a:e0:89:39:7b:f2:2e:2e:de:24:e3:45:03:25:72:79:5e:0d:
4f:7e:3f:46:ec:6b:79:8e:06:61:9f:ea:53:58:50:6d:19:29:
4d:53:38:b8:e5:5f:d4:02:c6:17:d0:68:30:66:3c:ce:1f:72:
61:7a:a6:d5:f1:f1:a2:4c:48:02:41:b3:81:1b:e9:ae:0e:58:
67:1f:a0:99:2b:b9:c2:1a:83:33:8f:18:62:cf:d6:fe:9c:11:
33:fa:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:16 2025 by rpki-client