Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: UzNu6R0CZqc0ul7BeM2VAOz0LLZbjPV7VNfLJmYaNYA=
Subject key identifier: 92:E4:99:4E:8B:C1:3F:4E:DB:BC:C7:0F:54:23:70:E7:6A:C0:9A:6B
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0199FE7DC7C0D1F04C6DC4B534884535EF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 16FB
Signing time: Sun 19 Oct 2025 22:01:19 +0000
Manifest this update: Sun 19 Oct 2025 22:01:19 +0000
Manifest next update: Mon 20 Oct 2025 22:01:19 +0000
Files and hashes: 1: OMJBBrbct5lJ3NPYQmwZDQfwPtI.roa (hash: P3SI0RFFQoE5StxjZVsTtoH382rKU+KGYXsOJugHreU=)
2: cJdu0V5pMBHO2m87So-B01Jh_Jc.roa (hash: 6fxmkYyCblDli/sa68IlSqPDlhmdfGTFCuG9dCmK83s=)
3: iXq0qrpCPo99PfUTjErWp7OhuBI.roa (hash: X22zlHUhN0LvDPli4rURv75ZdIFsXhRBny1jLbjYx7g=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: SDbkfPXQ0cB2sFZZZadvyiZFsw+Hhimgased2OF3yBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c7:c0:d1:f0:4c:6d:c4:b5:34:88:45:35:ef:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Oct 19 22:01:19 2025 GMT
Not After : Oct 20 22:01:19 2025 GMT
Subject: CN=92e4994e8bc13f4edbbcc70f542370e76ac09a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:db:15:fc:4a:53:91:14:60:2c:4e:fd:3d:
cc:6f:68:ef:a2:89:ca:43:81:7d:c1:64:77:1d:2a:
3c:af:31:ab:fc:f6:49:e3:80:23:0f:8f:ee:1a:40:
2b:88:76:b8:b9:26:92:c4:33:ba:e2:40:79:b0:73:
da:d3:59:85:cc:d8:4b:37:82:25:3f:10:34:15:3a:
69:77:99:c2:67:77:86:65:65:fb:10:3b:52:e7:b2:
dc:01:6f:9f:95:b4:8b:00:05:ad:42:af:c6:03:6d:
67:21:db:9f:2b:18:fd:cc:2f:c5:16:7a:07:0d:94:
58:80:3f:bb:18:5d:5b:f3:c1:b8:f6:f1:04:81:af:
97:f0:45:45:73:56:b6:2a:57:d9:92:4f:e0:ba:3b:
37:17:9e:c7:85:ed:ed:b5:d0:df:81:03:30:bc:3c:
82:91:19:06:9f:65:16:0e:53:b1:f9:ba:78:96:f4:
b7:5a:4a:0b:e2:46:73:de:be:44:b5:c9:94:e2:82:
a8:41:07:40:1b:4b:f2:31:3d:3f:ed:52:cf:44:c8:
f2:7d:26:c7:46:f7:00:1d:9a:57:4e:0f:21:90:9b:
cf:38:73:59:b1:dc:a0:fc:76:7e:9c:be:59:aa:83:
c4:b9:b8:d3:7e:f6:7c:33:78:6a:ee:94:cc:1f:39:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:99:4E:8B:C1:3F:4E:DB:BC:C7:0F:54:23:70:E7:6A:C0:9A:6B
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1d:a0:13:f3:e6:70:16:1a:58:b5:9e:5d:9b:53:a4:e3:c8:
52:f3:c1:42:8f:a3:8b:21:46:86:e1:ad:86:3b:9f:6a:81:3f:
f0:b9:19:68:63:c4:da:b8:c0:28:bc:31:74:b1:36:1a:57:cb:
c2:7c:25:eb:d5:33:20:f0:5a:59:bb:05:80:fd:e3:1f:64:62:
1a:ca:03:97:ee:7a:9f:45:4b:6c:72:24:57:7c:10:39:d4:ea:
38:50:ab:63:cc:4f:bf:2c:a1:ab:0b:c4:65:67:cb:ee:6c:52:
2f:85:2b:5e:51:39:be:12:09:e4:5c:d1:62:8b:84:38:4d:0b:
b1:6f:7c:1d:84:4c:f2:25:48:67:19:e4:18:8e:d9:ec:2a:94:
c0:a1:d8:be:51:29:a3:a0:fb:f5:9d:1d:da:a5:44:9a:d4:9a:
9f:8d:5d:4e:ae:18:30:1a:52:cb:20:c6:22:f0:64:c5:85:03:
f2:7a:3e:1b:43:8b:80:1c:7d:d9:6d:e1:c0:88:6b:7c:f9:24:
35:7a:53:79:cc:7b:71:38:1c:8f:1f:c0:ad:83:10:3f:ab:f6:
18:9f:3d:22:53:f4:01:7a:aa:d5:b7:1c:ac:32:5e:c8:bb:1c:
3e:e8:62:b1:4e:b4:ef:05:86:f1:cd:3d:20:b0:d6:07:41:50:
ca:54:d3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:40:06 2025 by rpki-client