Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
File: oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft (raw, json)
Hash identifier: /9SSwpfZYq0crAbn9eRfSAjRFXSB/b/TwCfemh8zxIU=
Subject key identifier: E7:DD:1F:B3:10:72:DA:99:13:EB:6E:ED:E8:71:CD:B0:1F:C5:78:52
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 0199FCC6C2A0961DA8DCECCC0E985CACC5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
Manifest number: 0527
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: WacUruZTE83WEEePnyB3KKF0YFU.roa (hash: IGW0uLOK6yIPDXD8+jDEju++6EJZMklynz//i9x70Jo=)
2: oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl (hash: d7PeOzZ6WpGD5fW4VzI+7417yuUPbTSMK35G9Ygnm7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c2:a0:96:1d:a8:dc:ec:cc:0e:98:5c:ac:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=e7dd1fb31072da9913eb6eede871cdb01fc57852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:f1:6e:d5:3e:a9:88:16:8a:01:41:70:9b:
8f:65:11:57:83:58:61:64:22:1d:bc:c9:0b:31:8e:
6e:22:40:8b:d2:7b:32:f1:8a:38:71:7b:5f:12:f6:
18:ab:d2:1e:b7:f3:75:6d:2d:f1:f8:6b:24:6a:c0:
88:03:47:5d:56:08:7a:16:80:39:4c:bc:be:84:6c:
be:2b:dc:24:99:50:a9:db:17:4c:7a:54:f7:e9:89:
48:43:58:3a:10:9a:d3:53:57:70:4e:a6:76:49:d3:
0b:3a:a0:21:16:57:7a:30:f3:f2:8b:b6:18:1f:03:
85:0f:a6:7f:fa:0a:9b:3f:44:6f:1a:45:5c:cc:84:
c2:f6:9e:eb:31:76:72:21:8b:3e:76:0c:ed:3d:a8:
96:18:64:ce:21:3b:ae:95:c5:64:4b:6a:82:dd:d9:
49:05:06:fd:fa:bc:22:fd:82:97:f1:1f:82:a5:c9:
09:6e:b8:7e:7c:bf:e4:e2:40:8a:9b:d9:c4:8d:9a:
30:cb:f2:0d:d3:d4:4a:a4:de:29:30:45:32:86:d1:
7e:38:4f:83:e0:25:5b:e5:21:81:47:9a:14:8c:08:
8b:89:c3:21:3a:29:ca:a2:a9:6f:b5:d3:8c:1e:de:
2c:41:7e:9e:8f:fe:76:f7:d5:8f:57:e6:30:4b:14:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:1F:B3:10:72:DA:99:13:EB:6E:ED:E8:71:CD:B0:1F:C5:78:52
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bb:2f:8f:10:9c:43:32:e5:36:a1:fb:37:c7:5d:ee:78:64:
b6:b0:2a:12:11:82:be:24:ee:4e:a8:d9:17:47:78:78:f9:b8:
4e:0e:9e:3d:c1:a7:cf:2a:af:72:6c:bc:bf:a1:6a:43:3b:fe:
9c:bc:82:b8:78:6f:e8:20:b2:93:c2:a5:96:7d:fb:a9:67:04:
54:66:ad:40:80:ce:4d:6d:f0:30:b4:31:2e:2f:6a:ea:75:69:
16:64:f2:6f:ff:ef:73:5d:d4:69:3b:cf:4a:92:54:f4:9f:03:
15:7a:c9:75:9a:c3:b0:e3:da:4c:24:0f:9f:3d:06:aa:eb:af:
77:64:6e:55:d1:50:75:96:06:92:a6:5b:06:2f:97:bf:ec:60:
c2:26:a5:07:7f:c4:56:73:53:08:cf:f6:f1:2e:32:38:7d:0d:
5f:2b:b8:84:89:1a:05:72:46:29:a9:2e:f2:a3:e8:56:6e:47:
d1:55:7f:cc:c8:0a:c4:d8:c3:52:aa:47:7c:a7:a7:88:f4:5a:
a9:97:aa:8f:74:43:be:6d:a5:47:0c:c7:8d:95:cf:ab:f6:aa:
7d:45:1c:72:bb:e3:00:f3:91:e1:87:de:95:7f:e7:97:03:3b:
8c:28:1b:48:56:2d:9d:74:be:4d:4f:d8:89:ac:91:4f:aa:e3:
48:16:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:33 2025 by rpki-client