Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: vWThGN4DTQ2Kf0ML0SV8BT326n5IvpqUAeiZ5hwJI4s=
Subject key identifier: F5:B8:B9:56:94:06:FB:B0:A2:CC:A3:79:7F:77:7D:36:A5:6F:E9:19
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 0199FC588586C27CEDFC29336F4D42A0F275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: RUqglM0+e1WL2cisQGmk4N0J6sWTSJErnCGDrL+dG44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:85:86:c2:7c:ed:fc:29:33:6f:4d:42:a0:f2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=f5b8b9569406fbb0a2cca3797f777d36a56fe919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:93:ae:8b:9b:bc:e0:da:cd:39:d9:40:3f:
6e:11:a9:b9:25:b1:a8:26:ac:6d:bc:42:aa:51:38:
64:da:31:00:ad:cb:ab:54:2a:df:2d:31:84:a4:e3:
6b:53:8c:40:e9:7a:dc:60:47:38:6f:52:2f:ae:2c:
c3:13:0a:5f:36:e8:d3:aa:b1:07:ae:e9:7e:68:d8:
4b:09:4c:52:76:a3:c7:2e:98:58:0f:86:54:0d:e5:
65:98:34:c6:80:59:28:b9:08:58:e6:79:31:19:bc:
b1:ff:20:ed:e9:09:57:1f:93:12:b0:6e:e3:f9:7e:
5a:c9:a2:a5:8a:7d:a2:63:4f:7c:6d:63:62:d1:81:
8f:25:f6:7e:33:8d:cb:8d:d7:fd:b9:7e:33:a2:f2:
19:2a:62:db:90:b9:1e:1f:98:22:6e:c9:63:e7:c3:
3b:b9:df:08:a8:a4:44:3f:16:14:e4:39:9c:f6:60:
15:1e:bb:f0:55:2e:f0:90:3f:8a:79:b6:44:d7:65:
5e:52:2b:92:42:e5:54:9e:40:71:2e:8a:29:91:26:
c2:d0:2d:b0:75:aa:0e:0d:cb:f3:65:3c:db:dd:c2:
79:ce:62:da:3c:c8:4c:d2:8f:04:e7:81:1e:d6:54:
03:b2:3d:54:e7:ca:3a:6c:f6:1a:63:48:83:7f:6a:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B8:B9:56:94:06:FB:B0:A2:CC:A3:79:7F:77:7D:36:A5:6F:E9:19
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:50:28:90:d5:97:90:2f:70:50:a6:9b:03:d4:51:82:0e:
ee:3d:b1:8f:ea:f0:a3:49:8c:39:49:b5:f5:ff:7a:15:3f:92:
94:1e:ed:14:5b:74:ef:12:b9:2b:6d:71:ca:7b:1f:5f:15:fc:
18:2b:b4:4b:68:dc:d8:99:c3:64:b4:c1:43:f5:4c:78:04:be:
bf:bc:51:f0:48:7f:29:c7:80:2b:de:e6:67:59:b1:20:ba:6f:
db:4d:61:45:a5:6b:af:62:0e:22:e8:f2:55:c3:ce:83:0b:40:
68:61:b8:11:a9:de:8e:87:17:ef:b8:22:b6:15:49:29:a0:dd:
b2:fa:06:a2:05:22:d9:46:9f:ec:8a:d3:94:25:c0:6b:a8:ba:
81:59:04:09:c8:71:0f:11:cf:8d:1c:48:2d:05:fe:b9:4e:aa:
11:e8:e0:fa:a0:5a:b9:45:79:a6:f6:8a:60:41:4c:2a:5d:73:
e8:26:c9:bd:2e:c9:3d:d9:60:43:ea:b9:7a:df:cc:f6:bd:3e:
f5:78:1c:39:fa:48:5d:71:7b:08:b6:83:1b:78:12:79:7a:a7:
9f:93:77:1e:0d:1f:cf:3f:01:cc:2f:ff:45:ea:15:b1:a3:96:
14:be:ea:b0:e0:74:0e:b4:94:96:cf:fc:f2:92:9a:03:89:37:
b1:d4:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:11 2025 by rpki-client