Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: 1tjwnfNioXb89GHYr552gTsfL3oao2r7CHPjLvBDrEU=
Subject key identifier: 51:CD:50:33:E4:A7:FC:3D:33:82:F9:CF:72:55:C8:9E:10:9E:C6:58
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 0199FC58521C8D4840039AA47A1AF2EBD45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0627
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: H8MeUSGwPW/+/0zj6dU7127A/AzxetONonKWGyeSJwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:52:1c:8d:48:40:03:9a:a4:7a:1a:f2:eb:d4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=51cd5033e4a7fc3d3382f9cf7255c89e109ec658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:42:97:f0:51:a7:c9:e1:ed:57:5d:a4:34:
f8:77:61:df:71:f8:d2:d6:47:02:85:16:2a:bf:15:
58:57:48:7c:98:06:9c:de:7f:37:2f:50:c9:d2:bb:
50:8c:1b:b5:46:01:0b:4a:8c:5b:b4:8a:2a:b3:b1:
82:ea:c5:3b:78:a4:56:8a:16:fe:96:85:14:d0:da:
1b:71:36:81:86:0e:a7:c8:38:83:94:bd:c3:ba:79:
50:02:55:c0:d3:14:2a:f5:c9:28:f4:f7:7e:27:35:
33:9b:03:23:b9:61:b8:b6:2e:79:2e:07:0b:6b:cc:
95:34:2e:5c:a9:38:04:66:87:8b:d8:e7:b9:55:8f:
60:9f:1a:bb:cd:45:91:9c:e7:ae:c0:1b:1c:67:e7:
55:28:46:35:bc:19:77:27:07:02:a5:1c:4d:2d:aa:
9e:07:61:44:17:e4:b2:00:6d:bf:a2:03:95:83:dc:
e2:ad:fd:53:3a:a7:af:59:32:e0:15:3b:59:cb:64:
4e:be:ac:42:ac:2f:78:6e:71:a9:0b:ba:2e:f7:09:
26:8f:99:70:eb:22:bb:1c:90:47:60:aa:3c:49:36:
ff:bd:6a:06:45:80:c2:c9:fa:3a:6e:a1:ae:09:02:
c5:a9:fb:b8:da:e6:88:3c:33:c6:ca:66:f7:c4:d0:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CD:50:33:E4:A7:FC:3D:33:82:F9:CF:72:55:C8:9E:10:9E:C6:58
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:19:4a:81:4b:0f:8e:05:09:43:a2:71:b3:fa:f9:14:00:e8:
2c:8b:16:de:32:ac:b5:ed:ad:8a:21:be:67:16:eb:8a:69:07:
bb:03:a4:36:92:3f:ff:9e:0d:a1:25:4b:8c:1e:9c:42:a3:5f:
c9:67:e1:56:31:bf:a2:98:46:69:fc:84:c3:56:e9:b3:8f:f4:
32:7b:e1:82:af:84:73:8d:e9:7c:7e:86:b0:77:1a:71:c7:99:
4e:89:27:d5:b5:50:a3:78:a8:1f:73:dc:65:68:f5:8d:14:ac:
1b:97:ff:de:7f:33:e6:fc:79:7c:38:59:64:50:61:9e:4f:23:
1c:d6:76:1b:7a:e2:19:d5:15:ba:67:6a:f7:99:ff:43:36:14:
6b:3b:c8:cc:2d:f8:92:3e:9a:02:41:06:1d:0e:bb:60:8a:e2:
9d:69:f4:b4:ea:2b:0e:28:9b:39:06:dc:1e:f5:0e:98:24:7f:
1b:aa:8d:30:4f:54:df:ff:9c:78:f8:20:e3:18:86:5a:68:05:
b8:5d:2e:45:ed:93:c3:76:73:10:aa:85:2a:4b:97:37:c5:f9:
84:f8:35:33:f3:ac:2d:44:98:f4:7f:6a:51:01:bc:ea:72:82:
c2:f9:17:5c:21:22:bf:c8:16:1f:7c:c6:34:84:79:91:64:48:
e1:a3:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:32 2025 by rpki-client