Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: T/63zAFZNb6lVttuXzkAPRtx9Y73022INdDARvzqY/8=
Subject key identifier: E1:AE:78:10:01:C8:59:74:7E:58:2F:6C:72:88:E7:05:9D:85:7D:B3
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 0199FC21BE42549F4860C21D0955493D684A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: FZX8hmyhmByD/Es+64ZOP029jv7zKlynOXIuddHIYmY=)
3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:be:42:54:9f:48:60:c2:1d:09:55:49:3d:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=e1ae781001c859747e582f6c7288e7059d857db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:ef:87:a5:83:17:49:f4:2b:e5:3a:01:df:
6d:18:b0:2f:dd:3c:e0:39:38:2b:07:fc:99:89:22:
ae:43:79:b6:00:96:84:f2:11:de:bf:16:f2:9c:2e:
58:ea:a9:1d:f3:92:cd:c0:6e:33:39:7e:72:fe:38:
5f:18:9d:b9:44:ac:08:16:05:33:e4:2e:19:5a:22:
08:01:f6:52:aa:17:ec:60:ad:42:7a:48:c7:ec:fd:
67:25:05:c9:a0:b9:16:39:f4:54:b3:06:bd:30:71:
57:e4:20:62:b5:59:5f:de:3d:5a:d5:d0:7e:de:65:
0c:23:96:bf:15:6a:80:68:46:20:ff:5f:12:26:ff:
b9:5c:96:25:ae:0b:ca:d4:f4:df:c7:f5:c4:39:c3:
14:e0:85:a4:ba:76:07:8a:07:40:69:43:b9:54:ff:
c7:c1:bb:e1:b6:4a:0d:b9:88:92:f7:21:d4:d9:2a:
86:68:e4:3b:f9:d0:5a:f3:f3:1a:9f:e7:3d:29:74:
7d:97:0f:01:42:c3:5a:f7:b4:27:1c:00:7a:b7:c1:
ca:c7:b5:58:6e:ef:c3:cb:8b:c6:fb:03:62:8e:f9:
cb:ac:25:d8:6c:0e:67:15:f2:5b:60:45:f4:8d:50:
84:10:34:1f:1b:79:90:ac:43:ac:d1:0b:82:2d:59:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AE:78:10:01:C8:59:74:7E:58:2F:6C:72:88:E7:05:9D:85:7D:B3
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3d:61:20:50:20:54:4b:db:f9:cd:41:57:61:05:54:1f:fd:
1e:d2:20:e7:5b:50:86:19:02:6d:e8:9e:b4:75:3f:6d:8c:3f:
39:77:b7:bd:9b:f4:cd:34:4c:a0:8f:ec:ac:5e:78:2f:22:d9:
bb:5d:55:d8:e4:0b:af:1b:3d:70:a0:ff:e3:e5:c9:7e:0a:b6:
4e:43:0c:0a:8f:70:1f:3d:8f:6c:7a:22:96:e5:16:c6:7e:31:
b3:17:79:d3:2b:02:f3:bc:2e:35:6d:ef:49:dd:1e:fb:31:56:
b5:b6:56:82:c1:6c:c0:88:cd:d9:4e:cd:bf:03:e9:b6:4a:22:
1d:16:14:01:80:21:ba:64:22:8c:b2:38:5e:ea:e0:64:3e:e3:
4c:34:dc:53:4b:fc:a6:2c:03:bb:d0:e3:81:71:06:0f:d2:f3:
80:47:2f:9f:50:ad:16:c4:7c:0f:a7:26:8c:4c:e0:6f:a4:7b:
d1:5e:9a:1e:06:73:2c:aa:09:21:4a:e1:58:cf:6c:09:21:3f:
8f:a9:8b:32:fd:a3:43:6d:c9:8e:15:5e:83:df:92:7d:fb:56:
7f:53:14:25:9e:f0:0e:c4:4a:ae:d8:04:ef:4a:e7:b7:ed:66:
cc:99:02:cf:cd:7a:44:b4:c0:c5:d0:4a:d6:d1:64:ad:16:03:
70:ae:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:55 2025 by rpki-client