Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File: u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier: KMnSmokIHiB0AQ/PuA+V5TL8t0YFuHAhMu10XHDmdSo=
Subject key identifier: 18:53:94:7E:D1:D4:84:3D:49:AE:03:6B:51:4C:82:41:35:E4:33:D9
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial: 0199FB7CC82AC829558D1CB77C6933CEC0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number: 0348
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=)
2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=)
3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=)
4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: 0GZcxMqYfcJRF0xubJraIUw2153ROrV+LNDy/B2rLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c8:2a:c8:29:55:8d:1c:b7:7c:69:33:ce:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=1853947ed1d4843d49ae036b514c824135e433d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:03:d9:48:f3:e1:6d:f5:4e:0d:c8:46:4c:
1d:5e:bd:f1:ee:48:c2:eb:6c:36:27:c0:a9:cd:23:
14:6f:57:f8:6c:f9:d6:90:38:7f:f7:3f:6d:a2:d6:
96:ce:df:52:10:36:70:11:f6:f5:fb:c3:60:34:4e:
16:28:8a:be:17:03:54:c2:ee:3f:3a:a4:5a:4f:db:
59:4a:a4:54:78:c5:3c:c6:b1:c7:31:e6:96:de:8b:
b3:81:33:a6:d0:7b:2f:ba:5a:2f:00:33:00:f0:ce:
40:10:ca:26:22:6c:df:ca:49:ca:11:c0:04:44:3e:
df:c3:4e:45:df:fb:a3:6e:1a:ba:1d:b0:3f:6e:e4:
07:fd:61:4e:3d:6a:5e:34:ef:0b:88:8a:dd:d5:e8:
13:df:92:f7:82:6f:ef:ee:1b:3b:af:b3:57:d4:ca:
f5:9c:46:e1:e1:9b:9e:95:1a:4a:71:55:5b:88:a9:
14:7d:7f:ed:b8:3b:1a:f3:4c:c7:dc:88:09:01:da:
b7:ba:06:65:f5:f2:fa:9c:13:52:bd:43:6f:78:6b:
f8:13:49:79:84:84:7b:8b:66:6f:63:05:f6:75:52:
df:51:51:8e:84:45:1f:52:eb:a6:70:39:2b:38:cf:
75:28:a4:9f:70:f4:ae:90:90:bc:c4:d4:09:81:86:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:94:7E:D1:D4:84:3D:49:AE:03:6B:51:4C:82:41:35:E4:33:D9
X509v3 Authority Key Identifier:
keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:eb:26:2b:26:1d:33:b1:af:51:7c:1f:11:72:fd:5b:2a:
a0:29:c5:1f:db:f3:15:0e:a9:eb:bd:ba:e3:99:c5:da:07:07:
5f:b7:ec:85:ce:0c:a1:17:ee:51:72:19:ff:eb:68:5d:a8:22:
ff:ce:29:ff:12:73:d9:13:5e:5c:72:ea:45:b6:94:29:2a:74:
85:18:e3:48:fc:74:54:09:84:ed:bf:52:59:86:72:00:d3:68:
ec:9d:03:a1:4f:d6:f1:6e:c9:b8:4d:af:e9:d5:32:fc:53:3d:
15:2c:7c:dc:d5:95:dc:39:81:ca:7c:ef:bf:6f:df:8a:cc:68:
a2:a2:b7:c0:8e:82:c6:4f:aa:3b:1c:a6:fc:ef:2d:4f:75:90:
92:ae:7c:7c:b3:a1:0b:e1:58:f5:cc:38:99:50:9e:52:2b:bd:
26:61:cb:0f:89:e2:65:5e:66:b4:a4:e7:1b:d4:61:75:69:9d:
77:09:6a:7a:1c:33:c4:44:83:1b:5d:38:96:77:7e:df:53:f1:
c2:b7:ab:7a:c6:0a:f6:80:f5:ea:7b:11:d5:c8:54:47:41:a5:
bb:f7:3d:f1:68:95:c6:94:ce:f8:68:8f:09:16:46:31:6f:ca:
bb:ed:5f:26:19:e3:f1:2c:96:12:30:90:e0:ec:54:63:e2:3a:
89:a4:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:24 2025 by rpki-client