Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: 2PPekXnZFr8InKBpzoOzkZRBJuPqmxkEGNKM1eYZjg0=
Subject key identifier: F6:0B:DD:5C:1A:91:55:3E:3A:0C:22:F2:9E:12:D4:FC:66:DA:85:3D
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 019A01EBDA7E690CCC5F0B9487F3A040CBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0B68
Signing time: Mon 20 Oct 2025 14:00:25 +0000
Manifest this update: Mon 20 Oct 2025 14:00:25 +0000
Manifest next update: Tue 21 Oct 2025 14:00:25 +0000
Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: +AWBYegtcIkT5cEjFWi1KqNp+EcNmQALWBMxwsV8FLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:da:7e:69:0c:cc:5f:0b:94:87:f3:a0:40:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Oct 20 14:00:25 2025 GMT
Not After : Oct 21 14:00:25 2025 GMT
Subject: CN=f60bdd5c1a91553e3a0c22f29e12d4fc66da853d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:79:64:31:10:e5:e2:16:15:10:dd:4c:2b:
9c:3e:47:05:4c:62:a6:34:a2:08:5c:36:45:78:e8:
1d:75:6b:13:20:11:03:dc:ff:20:a7:3d:b2:ff:29:
2b:45:f5:f7:69:23:3a:50:dd:3f:19:ec:f5:57:73:
3b:0b:ac:3c:05:0d:ea:14:18:b1:8a:fa:8a:af:60:
35:86:d7:2e:01:06:9a:06:93:95:29:54:18:d6:3b:
f2:19:d6:55:a6:23:74:4d:94:ea:a3:32:f2:10:8a:
4e:21:1a:71:d7:e8:75:04:1e:d7:df:b0:58:cf:f8:
73:98:24:94:2a:04:f0:da:01:e9:89:76:da:91:f5:
20:04:b4:e6:b3:73:60:36:58:84:7f:25:c8:c2:fa:
5c:11:01:dc:40:b1:c2:7a:88:62:aa:e9:ba:61:3b:
1b:8c:e6:82:79:5e:19:ae:fa:02:24:77:75:7e:07:
5f:5c:c8:86:c3:1f:73:62:f8:16:5a:1a:86:62:85:
eb:cc:43:b3:82:c8:56:48:bb:ea:bd:1a:f9:78:44:
9d:ee:65:f9:56:91:eb:73:73:ba:ef:1c:5c:de:a6:
2f:78:ab:08:d9:19:38:83:bc:d9:2a:96:9e:0b:46:
23:14:56:3f:2c:6d:24:0c:1f:77:a0:3a:5d:a0:66:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0B:DD:5C:1A:91:55:3E:3A:0C:22:F2:9E:12:D4:FC:66:DA:85:3D
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:a3:86:ee:f0:d8:26:2f:b6:6b:c7:07:56:79:21:a9:8e:
66:f3:6a:0c:95:6b:7b:d1:a0:aa:12:bf:67:f5:61:55:f4:e9:
45:2f:9a:8e:bb:e1:3c:73:a7:55:08:ba:5f:d8:5e:e3:e3:c5:
22:27:14:7a:fa:0c:60:02:5a:55:1b:ec:0d:3c:5e:53:9f:be:
4c:a9:e3:2f:27:64:48:6b:60:fc:42:e1:6f:1f:a7:d6:62:1a:
63:74:77:43:3f:2d:d3:2a:e4:57:2c:60:6f:ed:4b:bb:cb:5a:
35:cf:8c:29:39:fa:3f:ad:74:7a:f8:9c:05:f2:8d:ed:2e:b9:
8e:96:b1:26:22:06:21:2f:15:fa:0d:3e:5f:bb:ea:a0:02:d8:
e0:b4:49:2a:68:e8:5c:6d:c8:6a:67:b6:a4:0f:2d:91:49:0e:
58:cf:f5:63:54:f5:aa:d6:89:da:63:b9:8a:7a:66:8a:66:7e:
c6:af:8f:ea:8e:0c:08:32:93:ed:13:b8:8e:ec:1f:06:c7:74:
f0:10:d8:ae:d7:b8:9e:6a:23:f2:82:60:c8:98:e6:bb:df:cc:
a9:e1:c4:71:f5:b6:24:b0:5c:f7:20:2a:0d:33:57:06:e4:60:
b8:d9:f4:ea:dc:bd:bb:3e:cc:cd:3b:fb:dd:d8:e5:e5:ba:8e:
7e:3e:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:21 2025 by rpki-client