Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: F9Ya9T2uY8GMonXbui42jXcEcUAWBGPmlqJQRIgMABk=
Subject key identifier: 81:03:73:C7:C0:D0:66:76:C6:1A:83:75:0F:F2:BC:0C:25:FA:62:E3
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 0199FB45C5CBED9502984D42CEE9370598A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 1679
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=)
2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: 5+qCk0O7anEcNGg4DRwPrmibl1S9ovP1Md4qAgBybl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c5:cb:ed:95:02:98:4d:42:ce:e9:37:05:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=810373c7c0d06676c61a83750ff2bc0c25fa62e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:6f:6a:3c:69:34:16:58:41:1b:b4:e3:2f:
c8:e0:89:9b:01:3e:6f:f8:52:67:2c:99:bc:bd:ed:
94:a1:e6:93:1f:18:46:29:2b:fd:8b:26:3d:5c:1d:
7a:6e:13:3d:09:2c:45:fb:ca:fa:cf:60:27:d3:e9:
f1:63:1d:6d:d9:37:da:98:41:98:ef:48:5a:2d:34:
ac:0f:74:cd:cb:d4:d2:07:4a:78:86:e6:b7:05:11:
86:9b:0a:06:77:26:e4:58:5e:07:4a:8c:83:72:58:
5b:6f:e4:31:73:37:6b:ca:a0:54:cd:5b:35:fd:8f:
53:ea:5c:6e:9f:40:00:b3:ab:ae:f6:59:3d:10:df:
c6:10:77:70:be:5e:ad:ea:56:e1:01:a3:56:5d:72:
6f:dc:9b:8f:e4:b7:6d:22:6a:e1:85:99:ee:39:24:
fc:15:a1:fe:43:6a:df:a4:fd:37:93:2e:b0:54:fb:
d6:fb:1c:7e:75:13:f3:15:25:20:e9:53:8d:17:6b:
0f:55:94:b2:23:89:5f:38:64:16:1c:91:5f:69:df:
1a:96:d2:6f:9c:18:39:35:31:0c:f8:71:fc:48:9c:
af:e4:60:65:94:20:bf:95:1e:95:fb:d5:56:36:f7:
3e:1f:c0:bb:94:45:eb:55:f0:ba:ee:a3:4d:93:31:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:73:C7:C0:D0:66:76:C6:1A:83:75:0F:F2:BC:0C:25:FA:62:E3
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:57:15:0e:bb:7d:8f:36:9b:7f:f2:06:2e:77:3d:3a:d0:d4:
5e:2b:b1:e3:15:5b:68:a6:0f:24:7a:f2:60:5d:b3:89:8d:75:
e6:cf:b7:72:25:62:e3:78:90:41:3d:5b:e5:b8:3e:0a:b7:c7:
bc:1e:cb:07:23:dc:9a:92:76:96:60:ce:c1:cc:73:c8:1b:df:
b7:90:bb:ba:67:f2:40:c6:de:55:c7:a4:45:20:eb:fe:53:a0:
46:5d:75:41:8a:64:b5:84:c5:98:db:6a:ad:25:4e:e1:a6:46:
4e:4a:b4:1a:7d:ff:8c:5f:28:f1:90:7a:18:95:0b:0a:2b:89:
fd:ef:eb:37:4e:2c:f1:3c:ce:cd:1a:aa:dd:32:ec:fb:e9:8d:
73:12:67:9e:c5:97:42:3d:0e:0d:de:97:ba:43:53:5a:b2:b9:
ef:72:c1:62:76:e6:50:1b:f8:84:a4:12:b2:b5:dc:e4:50:04:
9d:d0:6b:77:fd:b7:d0:50:88:8a:93:81:4e:b9:49:14:86:e8:
f2:b5:b8:66:78:2b:f8:11:d9:fb:b6:48:83:cc:71:d0:ad:a6:
1d:cc:e1:a8:b8:d8:4a:8c:14:48:0d:a9:5e:b4:a4:85:4c:fa:
12:ec:83:1f:a7:e8:21:0b:65:37:62:45:52:2a:18:5b:06:d6:
d4:89:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:23 2025 by rpki-client