Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json)
Hash identifier: RZsIvt+O3iRKrxQtpNhUAmgV49fYtkhg2umeJn/uKt0=
Subject key identifier: A3:42:3C:F3:86:D2:EE:A6:3C:E3:12:D7:79:B6:A6:46:00:67:F3:4B
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 0199FD34895FEEDDC89E0610A549F1FE0CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
Manifest number: 0AC0
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: PttuSfjxa79MH7rLTOnjgReDQvw.roa (hash: AT0RYNQBGnwCZ5SCURqKkKKbeaLJOuOT7slKjRXHVFY=)
2: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (hash: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=)
3: eGHMp6XiUZXSvWaQdrxkZKMhkiw.roa (hash: w65T1Q47xszh2JQk5p3/bfyIzCGf7RqoYh4hz/srZNQ=)
4: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: Kyu+5E73a9I/GU2R3dW8quwyHimwZDEROA/IlZ/jjug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:89:5f:ee:dd:c8:9e:06:10:a5:49:f1:fe:0c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=a3423cf386d2eea63ce312d779b6a6460067f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:50:99:1d:0b:69:46:a6:80:6d:49:24:c6:
f7:27:7f:79:6f:40:4d:37:a0:4c:77:b3:e0:54:68:
cf:f0:f1:66:4b:cd:d5:c1:8c:6e:62:ef:76:17:0e:
55:f5:d6:f2:e1:42:6e:c1:e3:7e:3c:99:c4:13:f1:
89:76:fd:8d:31:70:4e:e7:8a:69:e0:07:71:e0:f1:
62:54:9b:8a:ea:05:3e:48:ff:ab:8d:9f:49:c6:cc:
c2:73:16:67:21:18:9b:d3:29:77:8b:24:d6:1e:7d:
14:6e:c2:00:36:37:07:67:77:7b:a6:4f:55:0a:ca:
31:b1:84:27:43:f9:6f:3c:30:81:0d:69:46:29:2e:
1f:0a:78:96:0a:4f:4d:04:bf:d9:65:cc:3a:23:04:
2f:99:d5:3b:74:f6:f1:a3:7a:e2:71:2a:35:0d:18:
57:3b:4b:16:6c:fd:8b:3b:7b:6f:83:b2:72:d1:de:
7c:67:a6:fa:6f:1a:14:74:1a:ab:ed:20:d3:73:c4:
d1:a4:12:70:1a:db:f9:dd:08:a9:6d:85:06:d5:de:
75:89:cb:b6:46:e7:9b:4b:bf:95:ed:e3:22:ea:69:
fe:67:8c:83:f5:34:57:00:12:c7:07:20:ee:94:cc:
97:4a:d7:30:be:af:6f:f3:3f:01:df:35:fe:5c:7b:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:42:3C:F3:86:D2:EE:A6:3C:E3:12:D7:79:B6:A6:46:00:67:F3:4B
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:72:e7:8a:b4:20:29:95:51:de:7e:eb:97:78:f7:1b:d6:
e8:6a:55:b2:54:4a:35:76:0c:77:6d:b7:8b:66:66:c3:e7:4b:
b4:28:8f:4d:02:7b:6a:7f:6a:fb:bf:c6:06:30:e2:b2:c6:e1:
c8:30:2d:70:93:f5:7d:55:6b:a2:e9:9a:57:90:b7:84:f0:e1:
78:c2:b6:e0:11:48:01:26:b1:b1:e0:df:5d:17:fe:e9:a3:72:
09:d6:61:00:74:e8:53:a1:94:64:3a:1b:36:35:70:8c:04:2c:
d2:4f:1d:db:0d:7c:a4:ed:96:8c:a5:5b:7c:b5:72:da:3a:12:
5c:5c:32:68:71:55:26:a2:a1:21:e9:ea:58:ce:ed:bd:f2:31:
30:98:11:c6:2f:02:76:cd:2d:b6:ca:49:3f:ce:61:9c:fa:2a:
90:87:5a:79:f3:fa:61:1d:14:35:33:3b:7d:eb:8a:83:05:f7:
2a:9c:7a:5d:9c:b9:1f:33:05:87:14:f2:8f:4c:9e:81:fc:a6:
8a:91:01:78:a9:af:bc:0b:42:20:0a:8c:ac:74:59:dc:c9:85:
bf:4b:6f:3c:69:cd:ab:98:10:01:95:51:d8:8d:30:a6:e1:35:
ad:1f:03:b3:c4:5a:be:1a:d0:3a:68:02:5b:5c:55:0d:99:ef:
99:7d:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:38 2025 by rpki-client