Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: hveQrxaXq8UcBSrTmQRSBdiqPmpZcxkV81NzW98EVz8=
Subject key identifier: 16:1E:0D:B5:EE:A7:D2:A0:80:EB:67:10:68:CE:CC:0C:31:22:CC:A6
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 0199FC21A11267FA48C8BB12EBE782FDA937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 051B
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: BnMtq2BXQjnri1b+N2An3MP66mD+86F6Da/uVsWXcSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a1:12:67:fa:48:c8:bb:12:eb:e7:82:fd:a9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=161e0db5eea7d2a080eb671068cecc0c3122cca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:90:77:a4:dd:64:7a:93:d4:2b:f9:26:72:
81:ef:e8:38:e6:d4:a8:56:ed:04:16:95:c1:b0:01:
14:e3:10:9b:cb:54:c8:ee:fa:11:8d:74:23:7c:7c:
8f:f7:80:dd:01:73:84:a4:52:4c:c2:c3:cb:9b:87:
c0:66:f8:12:d6:43:9c:f6:81:e0:fb:cc:a8:85:e4:
1b:57:71:23:bf:96:b7:eb:ae:7c:18:73:b1:2a:f1:
51:cc:d0:84:83:56:6c:18:af:74:f8:68:e7:cd:7f:
de:03:67:ce:a4:00:f3:0d:de:e8:78:20:01:e0:d0:
9c:3c:2d:d3:08:99:e9:f8:d8:55:21:9e:a8:9f:65:
44:55:94:69:b8:80:24:cf:6d:06:98:3d:15:77:14:
b1:1b:a0:1d:93:fd:64:5a:6a:73:e3:52:c1:18:64:
c4:b5:95:0a:91:58:5e:84:93:3a:fd:70:82:ba:a7:
dd:2a:df:05:fb:b6:e8:0f:67:98:af:4d:98:17:a9:
28:c9:4f:16:2a:b0:27:19:ed:c2:b4:72:14:57:37:
6b:9d:7f:2c:0e:c1:97:a6:32:b0:22:54:8f:c3:9d:
24:86:d3:2a:e9:e0:2d:27:ed:ec:f7:8a:ad:67:00:
2b:63:5a:73:8d:b7:11:e5:ab:4a:97:21:f9:11:f1:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1E:0D:B5:EE:A7:D2:A0:80:EB:67:10:68:CE:CC:0C:31:22:CC:A6
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ed:f3:db:be:b8:0f:e7:4e:fa:77:f1:f8:5f:10:bd:9f:20:
ab:13:5d:0a:21:72:fa:77:cf:0b:85:61:c1:ad:d1:15:3a:c5:
ff:34:e4:aa:6f:15:0b:86:db:ec:56:9f:35:51:f4:3a:27:c6:
8b:59:21:af:ae:36:f8:30:7f:7e:fe:fa:9a:85:11:18:30:f4:
45:a0:c3:7f:5c:e4:a0:83:76:7e:93:0a:c0:3b:64:f9:ae:03:
fa:ff:79:a1:63:da:b9:82:1b:88:b8:c3:48:8a:2a:92:05:c7:
b8:43:d1:a9:6e:93:43:2e:2b:b9:ba:e3:25:cf:79:0e:6a:42:
a5:a9:a3:b8:fa:0b:79:34:f4:44:b7:3e:0c:56:b6:a5:17:c7:
22:d8:1f:c7:1e:34:23:c8:58:d7:ce:a3:2d:d4:a1:a3:94:8b:
b3:d2:4f:1c:fb:ec:4b:90:00:ad:1c:bc:6f:b0:e6:9e:a2:3e:
2b:fa:6d:00:ce:46:be:bd:6f:f7:4d:5a:d1:c1:1d:5e:3e:90:
52:80:47:21:57:a1:d2:72:c4:9c:9e:f5:d4:e3:18:d1:37:71:
a4:58:27:28:fa:6c:21:2b:ec:0d:f4:b9:3e:98:d8:2c:3f:13:
22:3a:b1:13:dd:b9:03:8f:c4:05:c1:2e:4f:58:09:71:77:b5:
96:2a:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:59 2025 by rpki-client