Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier: 7s7Qiq4bstPfwIXcCRzmGUhn7tqSXYPO4xLWzpWBOm0=
Subject key identifier: 1F:09:22:CD:BE:D7:01:D0:FC:8E:55:68:0E:C9:F8:62:E3:65:7A:AB
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 0199FDDA4E8FE1F22E99FB2936C8092F7B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number: 16D5
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: JQFRevUesYnGzWy86if_lRLWdpc.roa (hash: t3BYwJZyAAH5HRBi+AIKc99FxTLmFzwx0nZw4AplB88=)
2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: B2ef8sjNvU4jpgU+MK15KzH2B9Ed1WhOFot0MnV4vaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4e:8f:e1:f2:2e:99:fb:29:36:c8:09:2f:7b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=1f0922cdbed701d0fc8e55680ec9f862e3657aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:3b:9b:82:d2:99:b2:4f:19:d5:7a:39:72:
15:c4:e9:8b:5e:15:d0:1a:68:ee:41:34:b7:37:dc:
3e:d6:59:67:2d:17:30:f5:4b:e4:91:65:67:0b:a6:
a2:08:d2:f3:69:38:9b:95:e9:f5:d2:c7:9b:0a:fd:
16:d4:64:7f:75:a9:5d:a3:f6:47:d8:ab:25:37:1a:
15:0e:06:c6:42:64:12:b8:14:99:76:79:b7:0f:dd:
f4:dc:e8:1c:48:0e:e3:f8:81:04:1f:7e:14:d6:9a:
8a:c1:c5:12:2d:14:47:fc:60:a4:38:cc:85:a6:0f:
c9:41:14:b6:0b:a5:5c:f4:21:0d:af:30:bd:65:e4:
8f:08:b1:bc:00:2f:9e:2e:05:d5:dd:41:e9:22:57:
dc:1e:fa:96:f2:8b:8a:01:bc:52:b5:2b:44:b8:86:
bb:f0:88:56:2c:09:71:3f:21:ed:21:c0:d1:ba:a2:
50:8f:65:3e:b9:93:b4:23:63:ee:2e:c9:d6:cf:2c:
0a:5c:7b:14:7e:9c:73:e1:15:19:84:e2:ca:84:28:
d0:d9:7d:e1:18:ea:e5:5b:ee:83:6a:80:bb:11:5f:
16:f5:16:8c:67:44:c6:e1:e1:59:7c:5f:91:32:d6:
cc:7f:e0:78:b7:5a:38:ad:dc:97:e8:49:2c:d9:cf:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:09:22:CD:BE:D7:01:D0:FC:8E:55:68:0E:C9:F8:62:E3:65:7A:AB
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:84:c4:85:2d:7a:17:f8:b3:f0:db:bc:24:7d:3e:30:28:2f:
7d:8c:fe:0a:6c:38:68:7e:81:2a:8e:c1:48:8b:17:be:d7:b5:
27:65:2a:05:4b:0a:eb:a6:e6:74:32:b4:62:c4:e0:6e:e6:bb:
67:3f:b7:33:16:9c:e2:c5:ec:86:4c:32:89:34:9b:a5:43:ca:
3e:78:d4:fa:30:92:61:21:9b:50:50:c7:b2:d4:64:eb:9a:0b:
72:7c:f8:38:13:e6:4d:2e:bc:f2:27:68:ec:2e:d5:4a:42:63:
19:a9:e3:4c:89:6b:df:c9:74:ae:9f:3c:ce:24:34:d8:2d:c7:
d4:68:80:d3:1a:0e:8e:3b:5f:f6:3a:6c:b5:cb:d4:cf:05:29:
78:76:41:16:f9:b1:b7:9c:5e:36:f1:b4:46:d2:0b:e0:c7:91:
c4:ad:47:92:96:1a:4e:b5:8a:06:79:b0:ce:32:71:5e:de:b7:
09:66:61:39:f7:ff:04:8e:af:14:60:12:b3:db:2b:d6:e6:a2:
09:47:7b:95:72:4a:1c:fc:81:8e:2c:9f:bf:e7:a3:97:84:d3:
ce:71:f6:de:0d:76:c2:3c:00:b9:a0:2f:cc:d4:67:77:c1:43:
1f:9b:99:43:3a:29:03:58:e2:cd:61:df:0c:1c:27:6c:59:97:
b0:4c:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:02 2025 by rpki-client