Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
File: oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft (raw, json)
Hash identifier: 7VNRogm5ZFct100EZAxGVnOou6mIX1OynsOEYDLBhX0=
Subject key identifier: 28:4A:9F:4B:71:D5:87:69:AB:6A:A9:2E:B7:E3:65:46:0B:C1:68:2D
Authority key identifier: A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
Certificate issuer: /CN=a220dda64843a4ee364b089356ca87995830fd77
Certificate serial: 0199FBEB38991F70AFFC0F2443ABF877E339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
Manifest number: 0E09
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: f3Wn9TOfcfxB3VYXWanqfMC6WRI.roa (hash: CJSEzeKkH+A8u48zVCzb/MrI7FvV/Beze1CPp3UTLZU=)
2: oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl (hash: NJ6wlsd+YGj2SBU/BGOLvaDlVswdC6AGurlXD8Vmp+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:38:99:1f:70:af:fc:0f:24:43:ab:f8:77:e3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a220dda64843a4ee364b089356ca87995830fd77
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=284a9f4b71d58769ab6aa92eb7e365460bc1682d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:f6:b4:69:c0:6c:1f:d4:dc:45:43:a2:6a:
77:dd:d1:a9:7e:ef:d1:02:79:e7:73:1c:18:93:24:
04:e5:2d:4f:4d:19:12:c3:6f:36:7b:01:8e:1a:4c:
5c:a3:98:70:6e:f8:72:18:81:04:06:55:ef:78:8e:
34:39:73:33:2e:eb:f7:76:e5:37:57:74:45:39:90:
9a:61:b1:06:e4:38:66:49:65:33:84:7c:a4:e1:95:
f8:f6:d7:80:be:4e:61:dd:dc:38:ae:77:af:da:7f:
5a:e7:69:03:b1:9f:7e:43:30:6b:e1:18:6c:c7:af:
28:71:cc:45:7b:60:80:6f:32:ea:81:5d:2d:b2:fc:
31:e8:79:83:00:59:7d:b2:3d:55:bd:77:d9:44:71:
d0:5d:53:e3:44:41:cc:6b:3d:37:fa:e9:21:b0:a7:
1d:ee:88:d4:89:40:4c:d0:73:59:6f:86:cb:27:8a:
96:ce:e4:14:d8:c1:a0:7f:ef:b8:fd:95:a9:19:e9:
7a:c6:a3:80:e0:1f:e0:63:0f:71:70:da:18:59:87:
65:32:88:31:fb:fc:d3:5d:6d:f5:a8:63:ab:fa:60:
a3:d1:9a:cd:b5:bb:d6:4b:8e:35:eb:3f:25:6e:45:
66:0e:91:af:1e:56:a3:8a:ed:78:c8:c4:90:04:24:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:9F:4B:71:D5:87:69:AB:6A:A9:2E:B7:E3:65:46:0B:C1:68:2D
X509v3 Authority Key Identifier:
keyid:A2:20:DD:A6:48:43:A4:EE:36:4B:08:93:56:CA:87:99:58:30:FD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiDdpkhDpO42SwiTVsqHmVgw_Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ffa6d4-5089-45a7-a38f-f5f8145651d3/1/oiDdpkhDpO42SwiTVsqHmVgw_Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:25:6c:83:97:ca:20:6c:d6:71:56:ff:73:1b:f9:c0:d7:a1:
0b:3b:79:b8:d7:7e:dc:d6:4f:a0:36:7c:1a:fd:ae:9a:83:50:
1b:57:e2:07:40:8d:77:ed:f4:06:34:4c:14:70:94:89:99:da:
ad:7e:f4:e6:ff:33:8f:03:94:94:9c:72:35:64:46:94:43:72:
0c:e5:f7:e2:5c:63:6a:ef:8f:a2:5a:64:8e:36:a2:98:cc:a8:
d2:d7:d2:fa:da:fc:c1:2b:69:4d:0a:9c:fe:c0:34:5f:b3:16:
41:84:af:f0:f7:28:87:59:49:57:b3:45:cd:00:1f:d1:9a:5f:
5b:e9:f6:a2:7f:76:5d:8c:79:21:fa:da:fd:b0:cc:76:6c:96:
40:6d:c1:4c:8d:4e:c2:8d:80:94:f1:61:d1:5a:d4:32:99:af:
00:16:18:0f:ec:bc:1f:d5:1b:56:26:91:d1:40:d8:5a:1c:cc:
85:f5:97:f9:32:f3:70:02:f8:88:d6:2f:0b:21:96:23:31:6a:
9a:35:b4:2c:87:e7:1f:6c:26:e8:9d:53:e8:db:ba:89:9b:1c:
a6:21:ca:07:19:97:39:42:a3:69:e7:2e:af:20:1e:54:09:ea:
0c:37:4f:90:b5:90:2b:7f:02:aa:df:96:55:8e:1d:50:32:df:
cb:30:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:02 2025 by rpki-client