Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: qUtbeY6veueggLh9sTUiwRLzxA3fy70bnszxhqfhucM=
Subject key identifier: 7F:14:EF:BE:D3:27:FD:A9:51:7F:AC:3A:53:10:07:DC:EC:85:ED:B5
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 0199FE7DA5A2D39C7A1B192F285AE5DF38A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 0306
Signing time: Sun 19 Oct 2025 22:01:11 +0000
Manifest this update: Sun 19 Oct 2025 22:01:11 +0000
Manifest next update: Mon 20 Oct 2025 22:01:11 +0000
Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: RwkW8j/3vtq21vCwFKBkL4ch2YuGAtx3tyqhpkfLzZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:a5:a2:d3:9c:7a:1b:19:2f:28:5a:e5:df:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Oct 19 22:01:11 2025 GMT
Not After : Oct 20 22:01:11 2025 GMT
Subject: CN=7f14efbed327fda9517fac3a531007dcec85edb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:3a:e0:bb:84:c0:8d:ab:51:2a:12:db:4a:
f9:e9:8c:e6:cf:c5:6b:4d:fc:75:42:b1:c6:19:b2:
c4:b8:4f:a9:fa:8a:82:9a:52:bc:dc:46:1c:01:72:
42:7e:6f:3d:cf:37:e8:15:01:b4:2c:9c:3e:36:6c:
f4:ec:ab:89:a3:8a:36:ff:57:46:7d:14:86:5a:21:
73:ff:89:6d:f2:29:00:ee:7e:41:49:ec:43:16:6d:
61:0d:85:1c:96:98:92:a0:3c:a8:58:8a:a5:8d:00:
b9:2c:5a:b6:4d:c7:ae:d1:dd:08:bd:33:8f:47:e8:
de:84:e4:54:64:2d:99:e5:e5:9d:54:59:f3:1c:6e:
22:e6:98:ea:79:f1:1a:20:2c:a5:9d:8a:5f:65:18:
93:46:5d:01:a8:43:d0:20:33:d7:03:60:12:41:69:
27:e0:16:21:f3:28:ea:ce:e3:96:db:5c:6f:87:a0:
96:67:63:b6:71:13:20:22:a7:f4:04:40:37:b3:a2:
5b:08:69:a2:5a:9b:98:a1:60:90:23:a1:cf:e3:92:
b6:84:ef:9a:e5:e6:b1:1c:ee:8c:e1:cc:93:af:d6:
d5:ca:55:cd:b8:23:6d:d4:dc:eb:92:28:13:48:79:
e1:53:6f:bb:7f:09:cb:6f:8a:31:b2:40:47:b8:3c:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:EF:BE:D3:27:FD:A9:51:7F:AC:3A:53:10:07:DC:EC:85:ED:B5
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0c:86:41:3b:5e:39:52:32:1a:f5:27:ac:0d:d0:a2:2c:ca:
64:b3:bd:9c:de:bf:f4:88:8e:ab:a9:dd:c9:70:43:b2:11:08:
c5:6a:d3:89:94:40:99:fd:b0:00:27:0b:1f:39:28:7c:d3:96:
73:46:b5:b1:3a:aa:b9:39:75:07:53:ea:db:45:a9:d4:f7:9d:
07:5d:82:22:e8:76:20:b8:74:d2:45:a5:5b:d5:6d:f6:8d:17:
80:6d:98:2a:d4:83:2b:58:98:8c:d5:b9:d9:74:aa:d2:f8:f7:
e3:80:6f:a7:c2:a8:16:04:eb:03:07:ea:c4:1f:9d:73:db:f3:
09:6e:37:3c:a8:82:63:02:75:b7:55:3e:9a:74:d1:d1:33:b0:
7d:d7:cb:42:0d:4e:bd:7b:99:63:b4:e0:53:3f:21:cf:91:63:
0a:0b:0b:d8:72:54:d6:e0:20:1a:95:89:8f:10:1f:8a:3e:e7:
20:f1:03:72:70:1d:04:6a:d3:e4:77:03:9f:17:2b:ec:dd:23:
30:4f:da:90:38:b0:f9:fe:f9:69:0f:3f:ef:bd:1d:51:7f:45:
e9:97:8c:82:cd:62:f2:7d:2c:c5:32:43:b0:cc:a7:a1:ca:0e:
99:f3:e0:8f:e1:43:8c:a9:9c:7a:2d:48:37:a0:e2:a8:33:6a:
e4:47:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:31 2025 by rpki-client