Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: O0UGg1Gz/KxWxUA2Jtka4pmMRFLKkDTVCfQhGCK9r5E=
Subject key identifier: 54:D6:AE:9E:2C:45:BB:07:CD:90:6F:68:94:57:78:63:5A:80:B7:AB
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 0199FC21B0285252B08978511BABAB4141B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: Pgm3rUbqq04uzR3ha1dAxTDrLfCS2OwpB+Xdq+XSyfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b0:28:52:52:b0:89:78:51:1b:ab:ab:41:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=54d6ae9e2c45bb07cd906f68945778635a80b7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:de:12:9d:4a:c9:2a:20:bf:34:af:bb:13:
52:13:be:cc:86:e2:b9:b9:02:84:bf:74:b8:ea:3f:
ad:32:50:d8:9d:65:98:90:f2:e2:51:bb:b2:f5:ae:
51:f0:b7:e9:8f:a2:dc:4e:a7:39:dd:05:82:c3:c5:
86:07:fa:29:51:74:35:dc:7d:6b:e3:36:c4:e0:b2:
3c:6a:c9:4d:80:5e:fc:93:ea:de:9c:e4:47:8b:48:
94:5b:51:10:d4:e9:fe:84:54:ff:98:bb:87:e5:09:
ed:83:70:be:64:3b:f3:6c:0b:5d:83:c1:2b:8e:79:
09:58:9f:69:e2:23:80:40:b8:57:df:da:8e:65:a0:
45:66:0d:d3:c5:a0:14:2c:31:c2:12:e7:55:49:6f:
43:66:a1:ff:03:90:93:0d:7a:f0:d3:cb:e4:bf:e5:
59:10:3a:7d:8e:98:33:60:0a:e4:7f:53:54:62:03:
c5:f2:1f:a5:ac:54:02:31:d5:f0:64:d4:b6:09:29:
5e:0c:03:a5:95:0d:f3:b4:0c:26:a8:b2:17:26:09:
27:ba:13:d6:be:4a:28:3e:81:20:ec:1f:3a:f8:4f:
8e:95:14:a0:d3:49:18:77:2a:68:bb:2c:5e:60:74:
36:59:04:bb:50:7c:2e:43:78:55:ff:69:82:30:91:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D6:AE:9E:2C:45:BB:07:CD:90:6F:68:94:57:78:63:5A:80:B7:AB
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b3:dd:76:0f:b4:07:6f:97:81:58:a0:db:e0:d7:11:d1:b2:
73:7e:43:7a:2f:9b:72:4a:07:ee:f5:5f:93:4c:d6:56:a4:5a:
a7:9a:04:aa:45:dc:d7:95:5c:b9:75:02:53:99:a8:e0:50:65:
1e:4f:ac:4b:9e:18:ce:ef:1d:f0:60:00:c3:dd:7b:76:fe:da:
3d:a8:aa:9f:d5:2d:7c:36:15:c1:d5:45:01:fc:22:d8:15:94:
04:14:f7:4d:6c:2c:3b:b8:4f:88:65:c5:c6:74:ef:87:58:89:
ad:d5:41:7c:3c:5c:c2:e8:db:df:28:d9:30:09:7f:5b:25:75:
df:4d:f0:66:a2:4e:ae:80:ec:32:80:e6:a2:ad:58:55:c0:3b:
66:b0:3e:a7:40:f5:2d:23:c6:3a:b1:6d:36:bd:1e:e6:f4:6a:
c4:12:98:df:a1:f7:4b:65:a2:d6:10:ad:93:a0:18:a1:72:76:
7d:2a:76:a1:45:5e:ee:73:9f:08:80:5e:de:c6:f2:d8:8e:db:
37:b2:7b:34:f6:48:aa:e3:68:95:20:c5:d2:d5:3f:42:3f:90:
b4:6a:a4:70:ed:de:6e:55:96:b7:14:c1:d7:e2:52:25:5e:60:
47:df:05:d4:de:15:9c:b2:76:50:91:c0:de:d9:83:e3:fb:05:
45:dc:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:53 2025 by rpki-client