Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
File: o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json)
Hash identifier: pceiq6Z/KVyNPH8Ufa/BbOy0xRjUSqH//hmywMNRDLY=
Subject key identifier: 04:68:49:9C:AD:57:4E:6C:81:59:85:70:86:57:B5:19:01:7B:46:8E
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial: 0199FBEB9BE3A98675EC93A83CFDCD67E219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
Manifest number: 03A6
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: IThQt7fbZjTxBPjVToQUiBMJLfw.roa (hash: oQVD23q0+FFPZozW7epeAMXOc9QR32sT9Z0RYH7NZss=)
2: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: k7Sb2OjA+eDBB0EKo5zCteoRw97UeWZVmu8RumQ+h+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9b:e3:a9:86:75:ec:93:a8:3c:fd:cd:67:e2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=0468499cad574e6c815985708657b519017b468e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:6b:4f:2b:10:09:94:fb:08:3f:a6:cc:aa:
f0:41:34:f9:66:0d:18:83:ed:b2:8f:8b:82:7e:fd:
4a:80:5b:19:b1:09:24:9c:53:12:b4:fe:ab:bb:b1:
2d:f2:98:57:23:c0:bc:aa:31:4e:0e:dc:3b:51:65:
f4:3a:2e:c4:81:7f:31:8a:c4:c6:eb:f8:8a:ca:e9:
4d:82:8c:25:2b:ce:f9:3e:3f:5c:a9:27:09:4b:da:
a8:5a:fa:39:16:8b:88:3b:1a:ee:ba:83:b2:de:04:
4f:21:41:d7:62:ff:82:4b:58:2b:38:95:89:c7:59:
92:c4:2e:d7:25:c7:70:99:f5:75:b9:16:e9:d6:22:
ab:b9:e5:98:82:7a:0e:5e:48:40:33:a7:03:a1:fd:
10:5b:41:56:31:65:0c:0b:7f:9b:a2:a9:81:2d:0d:
90:91:8f:05:cb:29:41:85:93:f3:27:b6:dc:8f:71:
5e:19:f4:1b:00:ba:4f:66:15:dd:bd:e2:e0:2c:00:
c2:18:e6:b6:42:a1:0b:08:6d:eb:9f:e5:b2:67:e5:
6c:77:a6:64:3f:64:9b:4a:12:cf:f4:9e:d4:f3:ad:
59:33:5b:cd:aa:07:ed:a8:9c:0b:aa:a8:53:3d:e9:
98:1d:18:90:95:a7:b3:df:0d:f5:a4:1c:6d:ad:2b:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:49:9C:AD:57:4E:6C:81:59:85:70:86:57:B5:19:01:7B:46:8E
X509v3 Authority Key Identifier:
keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a8:e4:93:b7:4f:b3:85:89:9d:c3:5d:a4:39:9e:86:34:97:
8c:7f:50:ca:0c:4a:dd:74:7e:21:91:2a:8c:37:00:c3:82:15:
1d:d3:77:fd:bb:ea:1d:36:e7:5a:a7:2e:ac:95:98:d2:08:cf:
92:4c:ed:39:4e:9d:c3:ef:68:85:fe:e5:3d:5b:5d:10:4e:dc:
6e:ee:b8:e0:22:50:4c:4f:9a:88:35:f1:ea:f9:26:93:aa:26:
6d:53:ce:8b:d9:d3:80:21:69:db:8b:ee:c6:13:38:af:af:2f:
01:cc:b6:43:66:de:92:23:40:00:df:4d:89:c8:f7:cb:a7:01:
48:6d:25:02:75:4b:fe:7a:44:29:b0:9c:48:90:22:e6:0a:03:
b3:8d:e6:5c:ee:6a:d1:e5:25:b4:e1:d7:73:6e:c3:07:6c:4d:
bd:99:e8:e2:e2:c4:29:7e:d5:03:28:b3:3f:cb:3d:ae:78:36:
f1:5d:93:2e:80:fe:b8:b5:2e:d4:f3:fa:eb:36:c1:78:53:99:
6d:b6:dc:9e:bc:ff:43:20:9b:35:66:57:55:d4:01:cd:5e:79:
21:ac:ff:2d:58:dc:7d:6c:e4:51:c7:e8:47:25:f4:2c:2e:91:
2e:7d:99:5f:bb:0e:19:e2:70:07:58:2c:69:64:cd:24:c5:33:
ba:d3:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:51 2025 by rpki-client