Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: fpUz79Cf72gTKmJbV9e6GTHuJxx/1i8iKJTUEaP5ArA=
Subject key identifier: 1B:D0:CF:B5:64:1A:53:AB:5A:0C:35:23:2C:BD:28:13:0F:E5:50:ED
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 0199FC5872A37A39BAB775149696B8E71787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:18 +0000
Manifest this update: Sun 19 Oct 2025 12:01:18 +0000
Manifest next update: Mon 20 Oct 2025 12:01:18 +0000
Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=)
2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: cQwotQi8LGFvFh6ULEyDchc72SCu7tH+f689sC/2/vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:72:a3:7a:39:ba:b7:75:14:96:96:b8:e7:17:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Oct 19 12:01:18 2025 GMT
Not After : Oct 20 12:01:18 2025 GMT
Subject: CN=1bd0cfb5641a53ab5a0c35232cbd28130fe550ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:7c:f7:c0:5a:e9:ac:6b:bd:91:03:a9:4b:
f7:37:8a:b4:58:6a:d0:87:62:c4:17:72:cb:25:6d:
7f:af:d0:ed:ca:cd:06:7b:0c:62:46:8f:a1:38:04:
c9:65:11:0a:1e:7e:d2:1c:02:95:c5:d7:95:81:e8:
7e:37:c8:f8:ba:fa:8a:36:87:f0:52:ab:d0:69:23:
bd:c9:ef:18:ae:1b:af:81:0a:d9:0b:ba:a2:a1:46:
11:f9:62:38:ae:fe:6e:8b:3d:9d:1e:e4:51:e4:53:
6a:2c:ef:21:46:d6:16:50:cb:ea:67:46:ae:eb:3a:
7b:cb:23:ab:31:0f:75:84:fb:79:f7:4c:cd:87:6a:
66:16:81:46:f7:0c:ab:80:5b:a1:59:85:76:79:b1:
e1:c6:d2:01:02:0b:87:36:89:fa:f0:58:de:fb:51:
08:92:fe:73:05:66:68:a7:ca:c5:f5:db:5f:d9:1e:
58:89:ea:f1:0e:43:55:48:22:97:21:0b:0a:82:33:
83:bb:d5:4d:c6:b8:67:58:85:b7:11:58:06:78:ce:
06:18:6f:a5:60:fd:6a:62:ee:cd:5c:de:8f:02:22:
71:a0:36:a6:c9:fa:a4:47:7f:e3:12:47:80:fc:20:
dc:67:41:13:9f:31:d8:87:37:87:61:39:87:11:23:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:CF:B5:64:1A:53:AB:5A:0C:35:23:2C:BD:28:13:0F:E5:50:ED
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fc:a3:d3:95:a9:aa:73:f7:3c:9a:54:c8:a7:a2:71:09:da:
27:e5:d9:82:5c:e0:00:0d:0e:ba:56:42:ea:d5:41:96:14:1c:
de:13:5e:b9:1a:85:90:4b:5c:7e:a6:a3:e5:35:2e:51:4b:72:
e2:45:3b:8b:e0:a4:c3:aa:72:5f:8f:b3:54:6d:0c:5f:ab:08:
63:53:e2:cc:52:06:91:25:b4:fe:2d:31:71:f4:f0:ba:84:a7:
08:74:ca:ef:a2:12:8f:7c:15:ca:4a:3e:b6:04:42:a2:c2:fd:
44:b3:73:76:d0:7c:30:a1:d7:83:24:df:6e:d7:66:93:45:86:
e5:73:1c:72:95:5b:e6:f9:f8:22:77:94:71:5a:5c:35:e7:98:
8c:79:83:20:0d:b9:f2:a6:11:0b:fa:5c:6b:4d:ec:92:df:ab:
d6:99:65:b0:b6:30:76:8c:35:e4:ea:6a:42:87:64:08:d3:4c:
80:1c:eb:b4:ac:83:31:8f:52:89:68:bc:75:e5:02:1d:ba:9d:
10:34:16:2d:cb:81:ee:30:bf:8a:de:2c:69:2b:cd:90:d2:42:
84:a3:1f:be:61:90:6a:d5:03:f4:f4:be:9a:e4:0b:ec:e8:87:
0d:2d:16:64:39:88:db:1f:25:38:b9:db:a9:5a:da:b1:ff:82:
a3:fc:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:32 2025 by rpki-client