Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: YKz0BWVgdqL+XMk4cKhMVKmcwX7Nc2phsNANldNA3AU=
Subject key identifier: E3:06:9A:A3:18:52:7E:1E:3F:1A:EF:0A:02:61:65:AF:17:33:8E:A2
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 0199FC21879AEAFEE3E90FAB4C8381C8FF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (hash: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: gyJQzRIs4/zQKV4j/o0cMv5fyXbTsPpkseK04o8gmyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:87:9a:ea:fe:e3:e9:0f:ab:4c:83:81:c8:ff:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=e3069aa318527e1e3f1aef0a026165af17338ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:c3:7f:97:e8:41:15:79:0f:b9:a1:2a:63:
bc:4f:fd:11:35:5b:94:43:99:68:c4:f8:ea:46:ad:
69:96:f5:1a:dc:b9:56:18:21:0d:b1:54:30:10:5c:
3a:aa:ca:75:a8:e8:03:21:9e:c3:47:0c:b0:fc:dc:
00:fb:85:0f:3e:70:ad:1c:3e:db:19:0f:55:5d:e4:
17:5c:8e:52:a4:c7:16:97:be:12:2f:12:6e:fe:af:
0c:0c:77:e4:92:bf:b5:db:e5:ee:57:f1:5b:e4:69:
a6:4f:55:36:47:7c:1f:57:9d:59:6a:f7:b6:35:2b:
7b:22:ed:2c:c0:b5:34:53:3a:c1:e3:ac:54:6d:5c:
f6:1a:e6:6b:71:6e:0e:ab:c7:81:99:cd:7e:39:ee:
aa:a8:b0:af:4a:dd:4b:a5:4e:9c:78:7d:70:d7:87:
0f:5d:d1:00:28:3f:21:7f:c2:91:11:1a:f8:03:f1:
13:17:a6:57:28:6a:46:61:67:4a:f4:d5:02:df:5e:
89:20:07:e2:0f:78:d3:cf:30:f4:cf:ad:35:36:82:
fe:47:b1:4f:6f:72:0f:97:18:01:5a:87:40:cc:d5:
0f:c0:46:39:07:d9:4c:67:19:68:87:0f:f3:9b:31:
86:8f:84:7d:d0:9b:34:35:66:ee:f7:25:3c:c6:20:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:06:9A:A3:18:52:7E:1E:3F:1A:EF:0A:02:61:65:AF:17:33:8E:A2
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b3:f5:de:9c:63:0a:fa:d3:02:99:6e:bc:23:a7:d6:ad:b7:
7b:74:9b:89:d0:23:02:b1:c4:59:91:ef:d8:af:ea:27:dd:60:
e7:e0:b6:38:90:2d:e9:ce:0a:23:bc:18:5e:fa:0d:b8:76:36:
49:d2:c6:45:33:a4:21:85:0f:7c:13:2b:f5:f9:ef:c7:ce:e0:
33:45:54:8c:a8:f5:26:53:8b:f3:f3:f7:2e:d0:57:6f:71:34:
16:18:dc:f9:eb:ef:81:6a:70:3c:52:10:0e:b4:6d:d8:d8:86:
ab:84:9e:92:fa:04:4f:67:61:ca:cd:3c:6b:93:0d:9f:8f:b0:
25:38:9c:d9:62:79:3a:5c:d1:9a:47:14:17:fb:cc:f0:db:e2:
da:7e:fc:66:1b:bd:59:6f:04:c6:6d:2e:49:14:19:59:3d:85:
41:0a:3e:6d:df:41:f7:ee:0a:a2:86:57:f7:b8:c2:06:9e:d6:
d3:aa:41:6b:86:b0:eb:9b:dd:f5:d8:e4:25:ab:ab:75:24:0f:
fc:67:9c:5e:9f:d0:e7:c7:cd:3f:3d:cb:f1:08:d6:7b:62:77:
6c:74:9f:ab:be:bb:f2:1d:5c:34:aa:77:b0:55:f6:c3:b7:37:
e8:ae:1c:cf:f4:ee:3e:42:cc:a5:2c:92:d1:52:e7:e8:e9:61:
47:b5:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:27 2025 by rpki-client