Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: jMBofIUC7h/8MLtlaTTbddVeRFIvYdWki9M3vxyeZbU=
Subject key identifier: A6:60:C2:E4:D4:7C:38:D0:84:9D:B9:E8:81:17:41:81:75:07:C7:6B
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 0199FC8F75499E067371BB4BDD7DCF3033AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: IXwdyS86SbDEc5r6DTqF-yyMhKo.roa (hash: MHPw/G9JdYVbN864pG/b/kFkrvcqi5VhnKr+4T0l/48=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: xdKEbG1m07kNvpcwoXA67V8JyNWvalRCr15B4o01N5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:75:49:9e:06:73:71:bb:4b:dd:7d:cf:30:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=a660c2e4d47c38d0849db9e8811741817507c76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:7a:22:3a:1e:e9:17:cd:cd:91:17:89:11:
e7:cc:f7:48:3e:21:41:82:b0:d1:dd:c1:b5:f7:9c:
c8:16:e0:f6:be:44:27:e7:6e:58:4e:99:df:81:14:
e1:fa:9c:ff:89:bd:e2:44:c4:23:74:56:89:08:2e:
38:e8:cf:27:60:98:30:91:a8:ab:eb:92:7b:c8:fb:
74:ed:e1:ac:81:2e:c7:e9:59:04:8b:10:2c:01:16:
4e:a4:c3:6e:71:08:02:90:11:10:05:c6:d2:f3:a8:
77:0d:e6:bd:0a:65:d2:08:61:c5:78:0c:c8:6a:9d:
90:8e:f2:dc:00:84:91:a4:84:39:93:14:65:14:20:
a4:21:78:f3:cd:93:7b:9d:d4:02:c9:83:42:ce:6d:
72:09:01:43:c1:78:36:c4:5d:35:ea:54:55:04:37:
45:ef:04:17:5c:c9:c3:84:cc:b3:df:cb:04:1f:81:
71:67:c0:f6:26:d5:87:20:1a:1f:26:fd:6d:dc:df:
7e:1a:3f:6b:92:da:82:a6:ca:1f:96:a4:cc:29:eb:
80:32:01:8d:c5:98:68:a3:fb:37:d1:4e:23:5f:56:
7b:0e:a0:0a:9d:87:f0:2c:90:7d:3d:18:06:3f:7c:
38:83:08:8c:43:0e:5b:6e:61:87:78:9f:ae:55:2b:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:C2:E4:D4:7C:38:D0:84:9D:B9:E8:81:17:41:81:75:07:C7:6B
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:59:ec:c1:b5:7c:ae:15:5c:43:cc:08:d9:9c:c2:82:cd:b1:
b5:f0:d2:37:70:2c:1f:79:30:0e:46:45:05:2a:fc:be:54:75:
7d:40:d1:c2:10:03:ff:76:89:52:dc:75:f5:c1:1c:2a:4f:8b:
98:75:ac:5e:eb:c1:c4:b4:05:29:d1:f7:75:3c:e2:2b:e6:e2:
88:99:9e:00:ce:1d:d2:9d:de:d6:fb:fb:6c:97:16:e0:23:06:
cb:9d:5a:08:7a:97:1d:78:2f:fc:41:db:7c:b3:e3:2e:7b:10:
9e:8d:1a:f4:b2:52:12:34:2a:4f:f6:7c:6e:c6:90:65:f7:8f:
84:d7:fa:4a:ad:39:eb:b3:2c:22:c6:db:ab:9a:d9:11:d1:01:
4e:42:3a:a6:f2:99:b6:f2:51:af:3c:51:bc:82:3e:63:6f:53:
b9:21:c3:b4:f3:75:86:f2:f1:29:d0:34:a0:ac:6d:69:f3:37:
03:97:42:87:bb:bc:e0:a8:d8:67:9d:96:e6:72:34:4b:1e:4f:
a0:44:e0:3e:72:2a:69:1b:04:8d:de:f1:40:8a:87:2e:18:51:
2b:51:60:9e:8e:33:39:15:60:34:32:72:93:ab:81:a2:25:19:
3e:4c:bd:8b:ef:b9:c4:5b:0c:df:88:d7:72:8f:f4:52:c6:81:
a0:6c:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:00 2025 by rpki-client