Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
File: mdOi1vrWUWeOltJOJNGdcf44BAk.mft (raw, json)
Hash identifier: oSdFXWIJJGxH16LsB/LF/L86if4/cXTuR+k73bLp+Tc=
Subject key identifier: BA:EC:85:91:58:B2:CE:8C:5E:5D:6D:94:06:1A:37:82:DC:5F:47:6C
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 0199FC8F5AD1DCA89FFF35646426C53B3FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
Manifest number: 0F1D
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (hash: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=)
2: Z259DsTig8t3A9cd7HAu8mMPpR0.roa (hash: JRmS+LkkqmTVluxufvzadoY4Pc8kUr0Ok9oaH67NvH8=)
3: _ltzxuGkz6znSaa7SgLi6XMBftU.roa (hash: +kNXhyoqNb3mbEFSERmsDLNGdx3dBqclzBGCcZo07A0=)
4: mdOi1vrWUWeOltJOJNGdcf44BAk.crl (hash: QSFWZdJHwY/kZt6pNw1Nh3vKb42Bcrpm9iGZwJBwDxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5a:d1:dc:a8:9f:ff:35:64:64:26:c5:3b:3f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=baec859158b2ce8c5e5d6d94061a3782dc5f476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:ad:d9:bd:0e:68:10:e0:39:98:2f:2f:b9:
51:52:c1:c9:67:02:c9:45:3b:75:cf:9f:6b:21:3e:
09:1b:8e:a7:88:31:59:15:bf:a3:8d:fe:45:f5:fd:
92:d4:eb:5d:39:23:85:9b:4c:2e:14:ae:13:f5:11:
4e:a8:7c:9b:f6:e7:60:2e:de:09:c6:53:ef:98:7e:
e4:f3:7d:d2:30:11:36:34:31:7f:79:bc:fd:18:9b:
00:47:8a:71:d4:69:3d:8b:f9:6f:83:be:43:ea:79:
f7:7a:de:32:7d:bd:44:06:ad:ea:a4:65:55:8d:26:
19:40:3d:8f:f5:92:e3:20:1d:d4:f2:a6:2d:4d:37:
16:9c:cb:2c:8d:ed:09:9a:86:6a:3e:7c:3b:2e:ab:
fc:bf:1e:85:b7:09:95:3c:7d:d3:86:ec:c8:d3:3b:
eb:e3:1c:25:8c:cb:21:0f:b1:c7:f8:4d:9d:9a:ea:
9e:16:1a:30:5e:7d:b8:3f:c2:4c:c7:6c:be:d5:27:
73:fe:f3:18:c4:b1:81:6f:ce:a1:3b:44:8b:a6:4b:
9e:a5:7e:1a:25:10:82:9b:da:6c:5e:fa:34:65:90:
13:5e:d2:e2:6e:5f:be:00:08:6d:15:ac:e9:e9:0a:
8f:7c:12:17:a3:94:6d:f0:79:55:4c:82:05:b1:40:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EC:85:91:58:B2:CE:8C:5E:5D:6D:94:06:1A:37:82:DC:5F:47:6C
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:83:8f:fb:9f:b4:47:37:74:b1:ba:46:34:95:02:db:de:e7:
bf:5c:ba:05:6a:6f:55:99:17:3c:f9:f4:c3:61:41:c5:7b:7b:
cd:47:f1:37:7f:56:be:7e:57:9e:06:e3:bb:d8:9e:b0:29:1b:
49:64:a0:17:ce:85:9a:60:50:db:e9:bb:71:a8:c4:2b:40:30:
69:14:ac:f7:d7:9e:c3:37:16:a7:4c:c6:9f:5c:ed:d2:e8:dc:
40:b6:3d:a4:dc:f7:d4:92:cf:33:a3:6e:96:2d:f8:ad:da:30:
fd:af:3a:cf:55:44:23:e9:41:8e:c3:bc:b7:59:c3:83:70:bb:
a7:aa:c3:c1:b1:3f:d5:6a:66:e1:33:04:bc:4c:32:d9:f7:0d:
38:9b:a9:72:06:6f:a9:7d:85:40:43:95:8d:ba:3e:65:00:49:
d0:ca:e0:c0:26:8c:4d:90:4a:bf:0d:5d:51:c0:26:bf:e3:33:
c7:69:21:9f:0b:c4:2a:3e:d0:bd:dc:ee:e0:35:43:3c:04:77:
07:67:ae:ed:cf:20:6a:7c:7d:c0:95:b7:0f:fe:65:c5:6d:a0:
fe:a0:53:2b:78:7c:72:a3:93:f5:03:19:5e:6d:13:d9:3c:5b:
05:0f:53:6d:93:6e:d4:97:d2:0d:8d:b5:94:1d:7a:08:47:70:
ea:97:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:10 2025 by rpki-client