Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: t+xdEziKXXaUQBr2q2+xwt+SU91mUDBKgIDduTeyzac=
Subject key identifier: 11:35:B9:5B:0C:D0:03:4C:12:51:DE:B5:C5:A9:4D:94:BC:22:AF:34
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 0199FB7C9D2787B7BB6920CE19AED8739F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0F10
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: 6gUGaABrv7PnVzFNdMsz10D4+I4geX3QTTn2FKuPNE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9d:27:87:b7:bb:69:20:ce:19:ae:d8:73:9f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=1135b95b0cd0034c1251deb5c5a94d94bc22af34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:27:d6:4d:08:7b:b2:6e:60:59:35:98:76:
05:72:a5:f1:42:9d:60:03:db:c6:4d:66:b3:b9:32:
f0:c2:df:2a:90:3a:25:d0:37:97:e2:50:89:a0:4a:
30:74:8b:cf:a1:04:e3:27:51:e4:56:9f:7a:5f:67:
9e:a0:74:67:f1:d0:e5:33:b5:fc:1c:8e:52:c3:63:
4f:51:26:e4:41:62:91:7b:e5:36:61:d9:e9:37:5a:
3f:a5:78:ed:65:6a:93:b1:b1:be:bb:b9:ca:54:ad:
ad:45:95:5e:4c:26:aa:4c:3d:ae:a8:2c:55:7f:e4:
c4:81:af:d6:b3:d4:33:a8:98:18:81:7c:3d:63:c2:
84:74:cd:a5:8c:e4:73:ad:d8:2f:d9:9b:fa:7d:80:
11:c7:50:92:dd:8b:4e:00:fc:42:39:f5:c6:de:5e:
52:bf:c6:95:36:95:13:53:bd:13:61:c6:6a:3d:b5:
a0:be:f8:55:4a:72:2d:c3:2b:69:0e:78:15:10:71:
06:32:0d:94:d7:e5:5a:5c:86:e7:7f:5a:2f:5a:e3:
ff:f0:65:bf:54:be:39:c8:b8:2a:90:84:52:d5:91:
2b:44:bb:b9:75:87:e8:eb:f0:10:9d:6d:da:81:31:
a9:b6:45:89:69:85:df:96:e8:a8:3c:ae:cf:34:8a:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:B9:5B:0C:D0:03:4C:12:51:DE:B5:C5:A9:4D:94:BC:22:AF:34
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:50:65:21:f1:f5:ab:a5:52:1d:35:4b:21:23:69:0e:54:ae:
ab:40:3d:c7:4d:4b:34:01:31:e7:e1:9d:7f:ac:cf:81:94:e8:
ac:06:ad:dc:bc:7e:72:f3:e8:8d:07:39:dd:dc:4e:fb:6e:22:
91:84:73:ef:62:e2:95:58:50:ca:e3:d5:91:9e:67:62:b0:72:
f6:13:99:15:ec:5d:81:83:fb:ce:8e:09:2a:d0:46:30:3d:6a:
37:32:b7:c4:94:73:78:83:42:94:c1:3f:0e:ec:04:5c:59:83:
99:c9:0a:58:6d:f9:2d:1c:7d:eb:4b:8c:b5:6a:14:94:ca:88:
a6:88:d3:f9:75:a3:9c:dd:bf:20:ff:82:22:c4:13:a4:e8:bb:
8a:cc:94:43:45:73:a3:fe:86:65:21:f3:c2:56:37:c2:58:65:
47:7c:6b:e0:a5:65:67:c0:8b:ea:ed:26:13:fa:35:65:e9:8c:
6a:a8:c1:0c:a7:0e:32:d5:32:a0:8d:0e:94:94:2e:b0:31:08:
b5:e9:ca:31:e3:86:45:fc:3e:16:63:e7:8e:33:09:ad:a1:ff:
23:6d:1a:b4:24:c0:ae:e9:65:44:1b:ec:11:cd:01:97:02:34:
bd:41:8a:85:94:43:da:61:99:30:e1:e8:42:19:c0:5a:ee:9b:
c2:50:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:59 2025 by rpki-client