Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: oRP6tm9a6N01vxaEMHAi1+004hlnjPC/wtj7OCQKRb8=
Subject key identifier: 06:FE:A7:C1:61:E4:35:A5:57:AF:74:A6:45:05:E1:F7:64:1E:AB:23
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 0199FE46F1AE87B5961D94E0CFF6C1C0CEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0994
Signing time: Sun 19 Oct 2025 21:01:26 +0000
Manifest this update: Sun 19 Oct 2025 21:01:26 +0000
Manifest next update: Mon 20 Oct 2025 21:01:26 +0000
Files and hashes: 1: GgSeZqBtPbDTA-VVXf9e6AoPvUg.roa (hash: LXq0XhZj1SmNEFSwc+aRkKJHZ0BEOQodJpp7/CVQB0M=)
2: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (hash: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: XgMcrcES9v3oM6DLblZao/vduJJy/TDaj5mG8AGAj84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f1:ae:87:b5:96:1d:94:e0:cf:f6:c1:c0:ce:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Oct 19 21:01:26 2025 GMT
Not After : Oct 20 21:01:26 2025 GMT
Subject: CN=06fea7c161e435a557af74a64505e1f7641eab23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:98:61:8a:3b:f3:17:1a:c6:44:05:e4:d9:
03:a9:7f:63:09:71:df:c3:60:13:99:77:20:32:b0:
e8:51:83:24:b0:8c:8f:e7:a7:f8:74:80:d7:b1:88:
f4:e3:e3:17:0c:09:3b:01:38:a1:57:fa:16:93:bf:
9c:f6:0f:7a:2b:50:25:a8:15:c7:8b:e6:1b:f0:c3:
57:8d:65:e9:18:b5:a7:cd:7a:d7:56:75:e3:33:5a:
b7:7b:c8:7f:4e:35:bb:bc:b6:4d:49:1c:74:fe:e1:
15:da:2b:b7:fa:cb:88:18:fd:48:1c:fc:99:e0:19:
fa:59:8c:df:89:ba:01:68:13:36:d3:79:71:d2:0a:
87:29:0f:99:0c:ae:ce:eb:7c:ac:4f:86:68:5e:7e:
93:bc:20:c9:a6:c1:ee:fe:3d:5b:b7:ec:05:1c:1c:
33:36:a2:eb:63:18:67:f5:60:9a:7f:bb:ae:5a:d9:
44:d4:60:11:c1:92:bb:73:8c:2d:78:f6:94:92:8c:
dc:cd:70:10:4f:af:27:4f:db:2e:53:cd:0f:32:45:
15:d8:bb:06:f2:3b:4b:5c:5f:1e:09:56:70:f8:13:
2b:f7:45:f5:f5:47:cc:04:ac:56:0c:c7:fd:55:d3:
da:40:e2:78:83:f0:34:42:f5:68:ec:64:1c:49:ec:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FE:A7:C1:61:E4:35:A5:57:AF:74:A6:45:05:E1:F7:64:1E:AB:23
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:23:dd:67:ee:d8:34:a7:1f:a1:57:9d:51:97:25:53:dc:12:
b2:10:81:30:aa:43:1c:bc:52:dc:2a:96:9f:b6:fb:45:9b:dc:
1d:f3:d9:9c:22:96:1b:de:a7:b2:a6:e2:ce:9a:75:40:cc:3f:
e6:60:67:fa:0c:bf:51:b4:ae:b6:2e:9f:c5:c4:76:3b:05:dc:
44:1b:03:ec:67:9e:6c:12:f2:57:b5:d6:17:9d:b5:e0:3a:b3:
16:b1:74:70:7e:1a:cb:1a:4e:7b:1b:dc:a6:21:46:5b:72:b8:
2d:db:cf:1e:06:d7:76:1b:da:04:2a:46:43:4f:21:1e:ce:36:
6e:e2:1f:bd:08:23:b1:5c:53:40:62:80:10:a6:97:ae:22:45:
65:08:1a:fa:ec:7f:40:c6:ae:fa:69:cc:bb:a5:43:5d:71:3c:
bd:54:84:b0:59:6e:a3:e6:36:65:65:ef:ef:8d:c2:f9:83:fe:
52:e5:39:4e:5e:6f:0d:28:44:29:0a:92:ef:76:1e:44:9f:87:
51:4b:fa:6e:54:ba:8a:f6:b6:84:26:cb:45:98:51:67:76:24:
53:9d:7c:2b:be:b8:77:6a:87:b3:d0:2f:f4:22:37:65:ec:85:
e1:cd:28:0a:e0:40:90:e6:8c:eb:ab:cb:7b:f2:05:87:ca:36:
60:7b:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:06:47 2025 by rpki-client