Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier: vNi3MtSERl6MT1S4oeMU0X+z43wB/P4SgtG0r0af+UE=
Subject key identifier: 06:83:DB:27:B8:F8:A6:BA:35:C0:0B:8A:FD:03:DC:D3:57:24:44:2B
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 0199FCC68863BFAEBCFB98BFE857C3988D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (hash: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=)
2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: kNLOQUPHSwFKorrabojvzIUGRLmmD89mKJ0c0lE1WsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:88:63:bf:ae:bc:fb:98:bf:e8:57:c3:98:8d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=0683db27b8f8a6ba35c00b8afd03dcd35724442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:46:d6:ab:8f:dc:99:22:b9:b8:e9:65:33:
8f:87:d4:e0:fb:db:3e:12:5d:b7:99:0d:db:22:7e:
cd:65:cc:f1:01:5d:0e:16:b4:8b:08:24:98:29:b2:
83:86:b1:b0:9f:37:f8:02:ca:a9:8b:76:c4:00:45:
3c:6a:e3:b8:6c:81:77:c8:ef:b5:b4:9b:fa:21:3c:
36:a7:be:57:5a:ac:8f:26:7c:7e:3b:26:55:ac:20:
4f:04:49:23:07:7f:cf:28:98:4a:47:0f:17:07:a7:
03:c9:12:a9:6e:f0:62:7c:ff:82:5c:a8:2f:ed:47:
a2:2b:b1:52:09:ca:b9:40:dc:1e:ed:5d:bc:d9:71:
01:0a:51:a4:4d:aa:5c:d1:aa:ca:0e:b4:f6:37:20:
85:21:9d:8d:db:94:1a:88:61:c2:df:4f:c2:dd:84:
f8:c2:62:82:d7:6f:a8:81:e6:c4:4e:7b:27:6d:f8:
90:aa:04:d9:a0:53:fd:84:2a:44:a2:5a:48:12:79:
c5:ae:69:ec:c5:5c:cb:97:01:46:eb:a6:1e:81:64:
c5:ab:1c:36:3b:01:69:54:3e:e6:cb:55:48:c5:fa:
c1:dd:0a:30:e6:cd:df:7d:4b:b6:2a:c5:85:49:1e:
a4:ba:d7:89:23:93:a7:c3:63:e9:b0:54:46:2c:cb:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:DB:27:B8:F8:A6:BA:35:C0:0B:8A:FD:03:DC:D3:57:24:44:2B
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e4:d3:40:38:a2:b7:57:d1:29:b2:88:53:68:57:82:46:fb:
57:46:e2:a2:26:85:21:6a:48:e8:42:4f:1c:db:7e:3c:92:6f:
03:d0:7e:07:a1:8f:4f:86:ed:65:72:0b:89:d7:1d:e1:86:92:
bd:1c:3b:78:af:41:d9:ad:7d:cc:ea:e6:d2:8e:c6:e8:22:aa:
ce:ee:c8:f8:cc:ae:0c:52:a6:4c:de:c9:da:d8:a6:41:af:97:
dc:43:1f:b8:83:3b:1e:6b:bc:87:14:37:ff:79:6f:ae:79:95:
ee:ef:23:a4:93:53:05:82:82:2a:79:db:e3:32:c4:2a:b5:4f:
36:87:b6:7c:c1:5f:08:fa:0c:7a:59:44:1d:f9:a7:1b:d0:e2:
2d:07:1a:3a:c4:1f:c0:e1:f6:38:68:13:bc:dd:f3:63:18:c9:
a6:52:95:6e:7e:72:4e:e5:05:b3:a6:56:03:18:6f:7d:8a:22:
e6:31:a4:e0:93:79:08:5e:24:17:49:23:5c:0e:15:37:2f:a2:
77:87:f1:69:ce:20:b6:2f:4a:26:06:29:2f:ba:bc:4a:e3:79:
67:c7:1e:e1:0f:46:cd:90:67:91:54:d1:7b:46:52:6b:83:44:
96:94:31:33:82:6c:b0:b7:ea:e5:22:f1:9c:50:cc:93:c3:80:
1f:d3:f1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:20 2025 by rpki-client