Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier: LFwOmfnFiJ70Av7DYEHVg0GckWXMwDPiF1yBeiY8Mr8=
Subject key identifier: EF:46:5A:A2:3B:23:4B:E4:ED:2D:5B:5C:0B:36:28:4F:D6:BF:53:93
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 0199FDD9039DC532264D2E492C07506F89A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:21 +0000
Manifest this update: Sun 19 Oct 2025 19:01:21 +0000
Manifest next update: Mon 20 Oct 2025 19:01:21 +0000
Files and hashes: 1: PIjwt9cncSl25mT3dJ9vyyH9P2g.roa (hash: AHd8tSkEey/Gb5PQrQUs/SSKNf7k6H4ql5Wspc/zuFo=)
2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: EPejMRKA1fRd4ujKU1EKShrqkbRBTTJIsUKhbVZ38tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:03:9d:c5:32:26:4d:2e:49:2c:07:50:6f:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Oct 19 19:01:21 2025 GMT
Not After : Oct 20 19:01:21 2025 GMT
Subject: CN=ef465aa23b234be4ed2d5b5c0b36284fd6bf5393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:68:86:70:80:c5:af:fb:6e:98:dd:a6:91:
1a:05:d9:bf:33:f3:9e:6d:ba:bd:58:e0:65:f9:4f:
6b:4d:5b:6d:bf:eb:c1:ae:76:9b:a6:47:f6:75:6c:
e8:6a:fd:52:e9:d7:f9:5a:e8:3e:e9:d7:ba:52:11:
a9:ce:1b:bf:ae:ee:a9:98:11:7e:76:8e:c9:24:69:
97:99:ee:6e:b5:35:b4:c4:8b:89:ea:2c:14:4d:f0:
b1:c1:8a:19:dd:94:9f:b1:e9:46:7c:c6:7f:82:d7:
a6:bf:66:e7:68:86:89:97:73:97:64:06:69:63:5d:
d8:6f:7c:14:ea:e8:07:90:99:d3:1a:d9:7e:b7:73:
ae:56:03:ce:1e:84:57:93:db:d4:ce:46:40:a4:ff:
b6:b9:5a:2b:98:c0:5f:59:42:7a:a5:d7:d7:f4:69:
e5:ff:a5:c4:17:55:3e:4f:1a:0f:d2:fe:c6:f1:9e:
4c:31:5f:50:75:46:80:07:70:d5:ef:e3:aa:c2:e8:
4a:5e:c8:86:62:c1:09:5b:bc:35:31:d4:bc:89:7a:
6d:9b:3e:21:03:93:fb:61:2a:07:d6:71:92:95:ca:
73:1c:cc:c6:19:7d:de:85:6e:32:a7:d9:8b:99:71:
82:c9:94:41:4f:22:4a:92:09:a6:1f:63:6d:f5:61:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:5A:A2:3B:23:4B:E4:ED:2D:5B:5C:0B:36:28:4F:D6:BF:53:93
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:09:3f:e2:22:07:43:ac:e4:bf:3b:30:57:79:9f:3b:7a:58:
ab:c1:b3:98:2c:95:bc:f9:3b:09:bd:02:a3:b5:95:06:9e:10:
4f:72:8f:bc:5d:14:f1:10:62:3f:f0:55:b6:97:70:82:ab:ec:
80:41:4a:cb:9a:14:15:51:21:da:8b:43:e8:0b:89:99:3e:16:
5b:89:3d:be:f2:f2:ba:ef:d6:52:dd:e7:9b:02:22:c2:94:43:
9c:f2:e2:e7:0a:56:cd:d4:f6:12:17:77:ea:8b:3d:48:26:b1:
78:0a:c7:3c:32:8e:df:5b:74:48:ee:55:29:32:d9:33:53:ef:
83:8a:67:a1:3b:bc:dd:1c:26:d6:fc:49:7c:c7:48:54:45:dd:
eb:c9:68:c5:bd:36:28:70:66:c5:b0:d6:71:81:8f:09:25:3b:
62:18:4b:c3:06:83:c2:03:36:44:78:a7:7c:bd:20:32:71:7c:
ab:4d:c5:e3:89:79:c6:0e:d0:17:2d:1a:7a:de:3c:4e:a2:5c:
3a:2a:c9:b5:f5:dc:1b:fe:fe:78:82:ec:d4:00:19:d0:86:87:
3f:f6:29:45:2d:13:81:33:34:16:4f:5c:68:75:79:ed:7f:c2:
4e:f5:55:e5:16:d4:7a:ec:06:44:8b:0b:20:ed:cb:3a:65:89:
ea:70:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:13 2025 by rpki-client