Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
File: o8p7HBOn17MSMUErj7aUehdH250.mft (raw, json)
Hash identifier: fYuy3BGTuAf8JB0kE4LJKQ/sg4J4t4nD8Kg1/PLJBaY=
Subject key identifier: 29:9E:DA:FD:2C:36:B8:4B:8F:A6:AB:5D:1F:EB:11:DD:7E:98:DB:E3
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 0199FCC6CDC4AE0D5A1DAD41AA58D126EF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
Manifest number: 04CF
Signing time: Sun 19 Oct 2025 14:01:51 +0000
Manifest this update: Sun 19 Oct 2025 14:01:51 +0000
Manifest next update: Mon 20 Oct 2025 14:01:51 +0000
Files and hashes: 1: X0-Djm0vHdUiJwsWds74O566gnw.roa (hash: wptFaY0ZwFbGnw/VuRN3robTidxbKoo/tyvxKrOBB/E=)
2: o8p7HBOn17MSMUErj7aUehdH250.crl (hash: ADBQJG4w9HDOju1tO4GqLhj/kJZTGLwuSo+Rjg7E9wk=)
3: wfeH5shQb9p8-APifaQwZCuXjuw.roa (hash: i3m8mYv5PGE+aCaz85jAgzkj3ipmT/iJy2vmh07ZehU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:cd:c4:ae:0d:5a:1d:ad:41:aa:58:d1:26:ef:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 19 14:01:51 2025 GMT
Not After : Oct 20 14:01:51 2025 GMT
Subject: CN=299edafd2c36b84b8fa6ab5d1feb11dd7e98dbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:5a:28:2d:92:29:91:a6:90:3b:a3:2d:d8:
1e:4b:8a:03:47:45:b3:e9:c8:48:fc:8b:2f:e5:de:
55:ba:a1:31:07:3c:a7:d8:e8:2e:0d:a7:45:53:d3:
f3:81:b4:40:87:d3:ed:0a:0e:10:ef:7c:2f:be:c4:
c7:4a:63:10:80:1e:6b:48:be:41:83:ee:39:04:74:
77:63:a9:3f:35:fb:a1:87:88:06:75:e5:09:56:03:
2e:b7:d8:76:cf:93:bc:24:f4:96:61:b6:64:3b:e0:
6d:50:f7:e2:f3:2a:c7:48:3b:12:61:b7:2e:b2:0c:
74:64:21:9c:38:fd:f2:47:73:b1:8a:b6:ed:08:5b:
32:a8:c9:8c:3f:e5:03:d0:a3:25:ee:59:cc:d0:3d:
e9:c6:12:bb:64:4b:ea:87:97:64:bc:f7:0a:8d:22:
9a:d7:0d:2d:aa:0b:db:4b:49:c1:1e:e9:29:9c:56:
41:41:96:91:ec:bd:aa:32:7c:07:e5:d5:ec:c0:18:
57:f1:f6:c3:38:7e:5e:87:bd:a6:33:f6:9f:df:af:
79:30:3f:fd:6d:ed:55:bc:d8:56:67:8f:0d:bb:d2:
e3:43:d7:28:60:89:7c:2b:91:a9:42:91:6c:a7:4c:
d1:52:d5:b2:ea:a7:3d:c6:a5:2d:09:73:ef:0a:b5:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:DA:FD:2C:36:B8:4B:8F:A6:AB:5D:1F:EB:11:DD:7E:98:DB:E3
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:20:24:ba:37:b1:bc:de:a0:d3:ed:a2:ed:82:31:42:4e:e6:
64:1d:e3:ef:d6:c7:79:a8:b3:da:e0:3e:c3:3e:55:37:71:91:
b4:64:75:42:f0:92:98:53:05:45:e4:55:53:e3:87:95:09:5d:
ac:d9:a6:22:71:54:5d:0b:b7:cf:90:fc:bf:b4:67:6e:90:56:
74:a0:ef:f1:08:e1:6f:e8:f0:a8:20:56:f5:bd:91:4d:d0:5e:
6f:55:47:98:cc:04:1c:fa:3a:94:a8:7e:91:00:28:20:0f:3d:
fe:6c:84:6d:8e:af:10:fd:b0:c5:1c:58:bc:ff:a1:44:9e:66:
90:ca:c7:92:d3:96:41:ee:09:35:65:5f:a8:9f:35:c9:83:4b:
a8:47:3a:23:46:c6:72:b2:c2:93:3c:63:6a:e4:79:bc:ac:48:
98:b5:f9:cf:37:88:9e:30:3b:6f:d1:9c:cb:e0:22:33:2a:2b:
de:50:00:33:9f:d6:9d:42:ea:70:0a:0e:5c:59:11:3e:4b:81:
e7:23:c6:97:18:17:8a:b6:9e:0d:52:47:40:17:be:ba:36:23:
72:32:96:ea:16:e0:c1:63:49:fe:fc:a0:42:4f:af:19:7b:68:
00:49:a9:a8:f5:a9:81:8f:16:e8:3b:37:2a:1f:85:12:a9:31:
c2:c2:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:33 2025 by rpki-client