Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: j6aJFBRJEbeI2ELjMhOCqoPkSlBOnzEeY0H5ITHmMmo=
Subject key identifier: 78:B7:1B:AF:E3:06:BA:CF:3C:36:0D:62:B5:CB:E7:23:AC:B4:C2:24
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 0199FDD9A04F421C5582B84ABA49DA95F49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 19:02:01 +0000
Manifest this update: Sun 19 Oct 2025 19:02:01 +0000
Manifest next update: Mon 20 Oct 2025 19:02:01 +0000
Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: dqcOUA7ZcldzFfLgx/MPRPw/uoDGn4/d1n2z+/x4S9s=)
3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a0:4f:42:1c:55:82:b8:4a:ba:49:da:95:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Oct 19 19:02:01 2025 GMT
Not After : Oct 20 19:02:01 2025 GMT
Subject: CN=78b71bafe306bacf3c360d62b5cbe723acb4c224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:f3:52:ba:9d:ee:ca:31:6a:56:9f:b3:4a:
11:c9:3c:51:5d:c8:0f:8e:f9:8d:16:d7:9a:25:ef:
41:fe:a6:74:5d:1c:ee:bd:3f:6a:9a:29:2f:d2:44:
54:1d:52:cf:28:52:82:8e:90:1c:ce:77:b4:a0:84:
5c:4c:cf:56:74:ac:a0:24:29:c8:9d:89:e3:cb:06:
ff:aa:9a:28:ee:0b:d8:1a:f9:35:36:34:ba:03:92:
27:0a:b7:b4:7c:c8:5f:da:72:01:3e:23:dc:ca:3c:
f4:14:d0:7f:46:a1:44:0c:43:89:91:75:c5:96:e9:
3e:7f:a1:36:fb:9e:af:68:af:a0:24:74:5d:44:a1:
8e:4f:65:43:6c:41:8f:06:7c:cc:b6:e1:d2:7b:ef:
aa:c0:7f:60:41:5c:2b:fa:a7:c2:8b:b2:4d:41:ab:
1a:82:12:04:c5:4b:03:e9:aa:45:36:5e:d4:c0:69:
16:b1:b2:77:0f:55:94:ea:eb:72:d7:58:a5:02:4d:
52:68:6d:c3:eb:99:2a:d2:a3:a7:1e:33:59:a5:00:
0f:0f:2b:00:8a:28:ec:46:b2:55:f5:83:03:c3:89:
b5:bc:b5:9d:1c:cd:ce:2a:c9:e3:59:05:da:dd:b9:
78:ec:21:2d:4e:bc:3c:9b:d1:fe:b7:41:2b:10:03:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:1B:AF:E3:06:BA:CF:3C:36:0D:62:B5:CB:E7:23:AC:B4:C2:24
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f2:41:ff:c0:c5:33:ef:8b:47:dc:52:c7:67:f1:cf:e8:26:
dc:9d:94:03:2b:f0:0c:10:18:d6:57:42:63:ce:27:d1:21:94:
7f:e7:f6:79:0e:4c:a8:a5:9d:4b:fa:14:e5:5e:37:83:5a:dd:
67:ea:54:9b:8d:16:5f:61:ad:18:1d:bb:91:13:1a:fa:4a:9f:
3f:27:ba:50:6a:a1:74:f3:eb:4c:ae:b3:5b:b0:81:1f:fd:3d:
41:76:74:88:17:16:8b:c5:45:94:79:fa:0d:41:35:a1:53:66:
5a:1d:19:ff:92:7f:15:d2:af:63:ac:9c:2e:55:fd:0c:64:2f:
3f:7a:57:3b:bf:1d:cd:d9:c7:75:de:62:36:48:ae:f6:9d:11:
5c:b3:29:ec:ac:a5:93:d9:03:71:66:9c:90:78:dc:88:6c:14:
fa:7a:7d:bf:ac:7b:a8:c7:da:1c:3a:a0:ad:46:13:fd:e4:68:
ff:6b:86:09:0d:f4:d7:f8:4d:ee:4e:5f:b2:8b:58:eb:22:72:
83:b5:e7:aa:06:73:08:18:5b:8e:da:f9:6f:17:b7:4f:59:a6:
54:d5:7a:8e:93:90:b9:b5:9a:96:04:88:ca:1d:c5:f4:f9:5d:
9e:ac:1f:44:77:e5:f6:2b:25:87:64:9a:e0:04:d0:78:7e:38:
bf:a1:f6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:51 2025 by rpki-client