Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: 9gakh2WHu6NwazbfvuITU9XdZUuxsu2KKaLQlkJ2Uw0=
Subject key identifier: BA:8F:F0:46:C0:44:6C:BA:6E:1E:9D:14:7F:B3:78:5F:8A:CE:91:FB
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 0199FBEB4342D65F248ACA14EE13875A7EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: aqX_aHr9DYDlihdIMBv6LMwHePY.roa (hash: CPN85FZ7OPhT7PlAx5nBT6Pw1xOtIkDQK0zxfnvB/+M=)
2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: oa3GCoQ5W+UmkCxxvXdloSlani/iX86PMYqDzH9Ieb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:43:42:d6:5f:24:8a:ca:14:ee:13:87:5a:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=ba8ff046c0446cba6e1e9d147fb3785f8ace91fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:8f:1b:25:be:87:c4:d1:81:96:a1:b8:fa:ef:
8b:2e:33:ae:aa:88:19:90:6c:b9:9e:96:45:85:93:
ac:78:64:af:86:71:02:44:4f:3e:bb:e2:85:58:3a:
68:e9:b5:a3:ec:96:d3:f4:90:cb:ee:2b:4d:4c:36:
91:02:35:e6:01:43:d4:a5:8a:64:e3:13:d4:16:b6:
5e:09:41:3f:30:80:4c:06:af:8d:9f:9a:a7:5c:f3:
71:2e:f8:17:f7:96:42:8c:cb:b3:3e:1e:f4:4a:e1:
13:7b:bf:31:51:49:73:51:77:2c:5d:a5:54:9e:9f:
b7:2c:b3:25:ac:80:66:e1:6f:0a:1f:3d:f5:b9:75:
9c:a1:dd:79:5a:93:8d:a8:b3:65:2e:6e:e9:7e:5a:
66:13:6f:c1:7a:ed:c0:78:85:6a:04:8c:22:02:03:
55:f6:f1:3d:97:63:55:ca:6d:b6:22:66:4f:89:16:
ff:1c:b0:61:62:48:a4:d0:33:b8:d0:b9:93:a9:82:
98:78:ac:1c:79:23:94:c9:b5:f1:bc:31:f2:40:a9:
55:89:ae:7a:13:33:f1:65:da:38:89:ae:ea:c3:d5:
80:0d:c3:f8:55:1c:f1:ab:0c:d6:eb:b1:9e:6e:67:
33:a5:d6:11:ac:ac:80:c8:3a:93:f3:cf:d5:17:49:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:F0:46:C0:44:6C:BA:6E:1E:9D:14:7F:B3:78:5F:8A:CE:91:FB
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9b:c9:5a:a3:b8:ae:0e:67:4e:ee:71:41:ba:06:cc:e1:65:
d0:98:75:7f:57:38:9c:18:6e:68:2a:47:1c:df:7b:cf:39:46:
01:f9:a8:21:7a:8d:ce:d6:ff:ae:d7:71:73:fa:10:e9:5a:42:
24:1d:21:b9:74:36:95:be:28:b9:41:64:31:f1:90:d7:d3:df:
8f:88:9f:06:bf:90:22:47:5a:93:9c:5e:09:78:9e:b2:fc:08:
ab:eb:f9:1f:ba:be:52:8d:9b:5b:52:b3:29:02:77:81:d0:92:
a2:5f:26:48:9b:9c:8e:48:3c:49:33:cd:63:2d:a3:27:51:88:
de:ce:36:c2:f5:bb:5b:1b:e7:13:52:8e:ce:05:c8:1b:c4:48:
19:ee:1e:a9:35:62:df:ce:91:31:6a:3f:61:c3:a5:96:10:97:
02:8c:ad:6f:44:43:3d:f8:24:a4:40:63:27:2b:a1:da:02:a8:
94:9a:80:ca:c0:3f:eb:08:07:9e:9f:a4:1a:db:2f:76:bb:e1:
ac:38:01:fd:fb:a2:a3:02:51:b8:98:14:16:0a:1a:7a:bf:68:
91:70:42:33:ac:b3:df:4a:d6:e3:0c:5b:74:a7:16:62:e6:4e:
f6:5a:9a:2f:e3:a0:45:94:ac:52:fe:81:2a:d6:1e:cb:a2:fe:
db:26:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:14 2025 by rpki-client