Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: c+/U6FoN9NEkZK3gP6LSxYYrCnPfJeGSY0tUb/EHgtU=
Subject key identifier: F8:7B:08:05:E5:D5:9B:75:08:35:7E:37:E9:D0:98:77:20:AF:5C:26
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 0199FBEB527D9C3B78D0D843CA4706DFF652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: lCDPxt/uJ3YBIKfRN+kHGdoNbEJ8YbOEIxFBuaNCdMk=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:52:7d:9c:3b:78:d0:d8:43:ca:47:06:df:f6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=f87b0805e5d59b7508357e37e9d0987720af5c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:dd:1c:02:5b:e8:53:6c:12:ae:17:54:82:
ca:84:0d:59:b7:6c:13:4f:7d:4c:0d:34:07:97:e9:
e5:fe:18:e8:7c:63:0c:b4:c7:11:55:d0:6c:26:52:
e4:3e:80:4d:d5:00:c1:df:8e:ba:f6:90:d5:fe:12:
82:62:cb:81:be:c2:06:b1:f2:15:d5:ad:1e:e2:15:
49:16:b6:81:c6:fe:c4:76:93:0e:f3:ab:3b:cd:5c:
37:42:cb:90:ee:54:06:95:27:03:d4:9e:74:cd:b0:
2f:c4:c0:8b:07:3b:33:68:2a:1d:5f:cf:a5:c0:8d:
e8:3f:38:c6:b0:a6:26:8d:ab:2d:ab:fc:6f:95:d7:
ff:de:61:68:11:d6:f8:ab:53:68:5c:2d:0c:c9:9a:
a3:8e:80:10:24:b1:ea:c6:4b:58:76:ac:fe:b0:1f:
b7:4e:de:34:b9:1f:13:fe:5a:ca:a9:98:d4:f4:7a:
93:7e:a2:84:93:23:ea:fa:ec:f9:21:44:db:13:19:
7f:c3:84:01:c1:77:9d:c2:f0:d0:91:cd:83:7b:86:
fc:97:97:71:2c:c1:7c:cb:d1:12:4d:dd:92:43:62:
c1:54:ee:72:fc:2f:d2:30:cd:da:f3:aa:00:95:71:
91:55:a3:a1:b1:4d:ea:90:65:77:f2:28:8b:61:75:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:08:05:E5:D5:9B:75:08:35:7E:37:E9:D0:98:77:20:AF:5C:26
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:22:48:13:fe:ae:ef:4b:c4:45:f8:12:61:0e:95:ac:e3:38:
83:de:23:a5:e6:99:de:b9:27:54:9c:7a:13:a6:70:04:4d:40:
cf:c7:06:59:ae:a1:0a:56:01:da:af:3e:3a:7c:e8:84:0d:be:
ff:a7:dd:13:62:e7:87:d6:64:2c:bf:b8:82:e2:f2:d3:16:9f:
81:e9:2c:ef:59:92:db:44:f5:97:06:19:80:c3:a7:9b:0a:d6:
47:6e:f3:67:a9:3d:bc:89:41:6f:02:7d:15:0b:19:e0:b3:94:
cf:46:d4:90:ff:3d:5c:e6:0e:4c:84:09:07:8e:fe:17:0b:40:
17:17:66:22:52:f6:05:d6:d8:32:cd:59:af:36:cd:c8:99:95:
8f:4a:c5:84:ae:6b:60:2a:c9:3b:0b:6a:2f:49:ec:4e:22:3f:
34:3d:ed:74:6c:56:a5:4a:79:f7:88:9d:12:95:77:53:a5:1b:
3e:4a:c6:05:2c:d9:7e:56:e8:39:87:a5:5d:7c:43:7e:dc:e5:
c6:4e:c2:e7:6f:87:8c:4d:06:3d:8a:d3:a5:3c:c6:0a:d0:b4:
69:95:8e:e5:b4:2f:32:18:69:47:fa:cf:06:25:23:7a:b6:ae:
aa:1e:c8:84:aa:51:43:76:fd:ec:5e:98:25:f3:d2:ca:a2:f0:
88:ce:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:18 2025 by rpki-client