Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: UeYsjuyTEf/2Pn8Cklvcb3jjnJ9gwXOj8gA9ks8w4I0=
Subject key identifier: AD:73:E4:82:5A:4A:3B:BC:24:8B:20:45:D6:20:54:E2:CA:82:C3:51
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0199FD6B439B44BB2CA538B190C498AD74E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 17:01:29 +0000
Manifest this update: Sun 19 Oct 2025 17:01:29 +0000
Manifest next update: Mon 20 Oct 2025 17:01:29 +0000
Files and hashes: 1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
2: DHT86uq93soXgimlreq7l63TpDc.roa (hash: wHf/DMhPu6ocTE0CoJNwsMGJB1c1KuC84P7yMVgDFoQ=)
3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: XcWy5zNOgzOHShhIBQ94vs8sP+otdWW0nB54b6o+vRU=)
4: PFZpLIhhyuxMIxoL3doX43uXr_0.roa (hash: vtL2UJAi6kU5TeC3dZFl0hJ0UyS0aR5hnJoB/XiExRo=)
5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
7: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
8: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:43:9b:44:bb:2c:a5:38:b1:90:c4:98:ad:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Oct 19 17:01:29 2025 GMT
Not After : Oct 20 17:01:29 2025 GMT
Subject: CN=ad73e4825a4a3bbc248b2045d62054e2ca82c351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:82:8b:7b:1c:28:93:8e:f6:52:cf:8c:6d:
82:5e:de:91:c1:22:46:aa:9b:66:ca:0b:2a:5a:ae:
e3:42:32:bc:ee:e1:31:6a:4d:5b:43:d1:65:bf:23:
5a:c6:11:26:b5:6a:34:6b:58:06:d1:5d:9d:a2:51:
39:3f:43:6d:e8:4e:60:ce:0f:60:28:6c:47:eb:b1:
4b:e3:a9:c3:72:c0:6c:1f:8f:74:d1:17:75:32:ca:
91:0e:ab:47:d1:d7:1a:61:66:eb:3c:df:1d:af:6d:
af:77:0a:4e:d3:57:ae:0a:94:73:9a:f5:7b:59:ae:
cc:6c:42:eb:0c:81:42:6c:4a:97:5d:9d:5b:37:75:
8a:bb:ff:91:f2:e7:70:69:80:84:67:cd:2c:0e:12:
59:d8:43:86:6b:5b:68:26:87:e1:3c:34:6d:da:84:
fc:8a:cb:77:d1:33:47:e1:d7:97:6e:f5:66:3d:14:
f9:6a:2d:6e:0a:49:6e:f7:0b:eb:da:eb:63:f3:1d:
3f:f3:df:07:f6:53:8a:71:e4:49:4a:0e:5e:50:6a:
fe:89:be:bc:6d:a0:fb:c4:e4:2e:d4:36:59:ee:5d:
e5:fb:8a:f3:ea:fe:88:b8:2d:24:ba:e8:eb:be:da:
c3:e6:d0:14:4f:a8:52:d5:21:7b:89:f6:7a:93:d4:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:73:E4:82:5A:4A:3B:BC:24:8B:20:45:D6:20:54:E2:CA:82:C3:51
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ff:46:8f:c6:7c:4b:b1:b0:51:86:11:95:1e:6c:9d:9c:c1:
63:14:d5:ce:dc:7e:de:ac:04:b2:59:09:cd:c9:8e:31:6f:ad:
88:bd:9a:23:de:89:5e:cd:73:3f:b9:9f:eb:52:12:a9:d9:b4:
cc:7c:b2:c2:83:16:a8:f8:01:3c:6c:46:c5:07:8a:5b:eb:3a:
73:45:1a:e0:36:97:d3:45:ec:bd:1b:98:05:3e:d1:6f:e7:cb:
74:e7:8f:fa:a7:a4:90:06:3d:de:98:6d:81:04:22:92:ca:12:
29:45:5d:51:35:ba:8e:67:e9:91:1f:03:f8:62:4b:e5:cf:50:
bb:ce:92:f9:48:7d:99:d9:31:81:b3:c9:43:6e:bf:0a:92:03:
07:3b:67:2c:60:e6:b7:b7:d5:92:fc:d9:2c:66:6d:a3:9d:02:
8c:04:e6:d6:89:3f:cd:de:8b:26:6c:5e:95:5e:65:e1:ab:ce:
0c:83:23:9f:c5:ba:81:4a:1b:06:a4:24:a7:bb:85:6a:f5:77:
9d:a0:f9:25:33:5b:59:4f:7b:83:39:82:4b:e4:60:c9:c4:43:
6e:0d:18:4d:21:bc:b1:69:88:cf:7c:85:c1:c5:3e:7d:bd:40:
a6:4d:af:6e:6d:a2:28:75:bc:8c:c1:f7:94:de:d1:44:7d:29:
c5:bf:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:32 2025 by rpki-client