
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: CWemUSNOvbgxbYRuC1uNi6nCaEivRIzbbtmbj6NGU1A=
Subject key identifier: 1B:ED:D3:66:1A:38:5D:21:80:A3:D2:93:F8:D2:D0:59:46:65:3A:E2
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 0199FB0F3389B9233425A08B6287429397E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 01BA
Signing time: Sun 19 Oct 2025 06:01:41 +0000
Manifest this update: Sun 19 Oct 2025 06:01:41 +0000
Manifest next update: Mon 20 Oct 2025 06:01:41 +0000
Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: V4rD0srug0idsKsWtzCCNL1bx6HHggwanRfDHRpHNQs=)
3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:33:89:b9:23:34:25:a0:8b:62:87:42:93:97:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Oct 19 06:01:41 2025 GMT
Not After : Oct 20 06:01:41 2025 GMT
Subject: CN=1bedd3661a385d2180a3d293f8d2d05946653ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:90:68:6d:f3:f4:d4:56:02:ce:ba:2e:41:
29:43:5c:6f:d6:d0:e7:73:b7:3e:2e:1a:ce:ae:08:
91:de:56:b8:97:91:89:19:b9:e5:17:ae:66:20:2e:
d4:68:27:36:88:9a:57:67:33:b5:dc:4a:ea:c4:ee:
68:11:e5:76:a0:1f:a0:f6:09:16:bb:4c:63:39:e9:
85:b3:b8:61:6a:c4:4a:dd:02:b5:f4:2e:bb:19:ee:
de:b8:a3:f8:25:16:20:51:ff:8e:4a:79:d6:8c:d7:
8d:0a:07:b1:09:c9:b2:24:07:07:74:ed:c6:75:69:
6b:50:c0:9f:48:20:23:e8:cc:8d:ed:2b:93:f5:72:
85:a2:e0:9f:da:15:1d:6e:84:e0:02:3b:f9:63:1e:
e2:28:da:6d:9a:f4:c2:58:bd:50:3a:d8:34:7b:a0:
14:34:bb:6d:ce:42:4a:3e:d9:9f:d4:b2:01:c9:39:
30:e1:db:8d:10:9b:1f:c2:35:05:61:d7:7b:c1:5b:
27:70:01:81:8f:5c:be:5f:cc:79:18:c5:0e:e3:71:
d1:a0:7d:03:00:49:5a:43:46:98:59:58:5e:91:33:
0f:fe:fa:70:b5:c3:e1:b5:77:8b:a9:6c:1e:64:6b:
9c:d8:2d:16:e8:3b:70:c6:d5:79:d2:db:76:69:13:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:D3:66:1A:38:5D:21:80:A3:D2:93:F8:D2:D0:59:46:65:3A:E2
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:76:91:35:80:19:94:e3:e1:6b:60:c5:d7:d4:67:e9:a1:cb:
cf:b3:49:d9:91:e9:9a:36:0a:67:c5:39:1c:7a:a3:ec:43:aa:
34:0a:88:f3:22:37:63:17:08:8c:c5:78:ad:d8:1b:b7:9c:28:
2e:e2:21:c6:25:f5:d3:06:a4:7d:94:a6:6f:88:50:50:de:16:
ce:c4:ca:a7:23:85:4f:65:dc:f6:d0:e6:78:9f:ad:bb:24:30:
83:d0:3b:d4:8b:e5:5d:9b:08:d4:5a:4a:18:cb:a8:61:6f:5e:
f3:73:d0:2e:e6:12:5d:43:9e:78:27:25:92:76:f1:63:02:f0:
30:77:7f:46:7b:5d:bf:a5:75:d6:ba:46:49:01:25:de:44:2d:
f2:ae:be:bd:f6:bc:8b:80:6e:f1:0a:a3:87:38:4d:45:8e:e6:
45:28:77:94:37:c9:c6:05:6c:4e:7f:b1:b1:31:31:ea:af:21:
1d:37:da:25:52:57:f1:62:e6:3f:28:57:82:ee:c8:e5:8d:63:
d7:f3:a0:0c:ff:e9:63:40:d6:9c:22:22:4c:05:17:8d:d5:c6:
df:de:a5:88:4f:eb:e5:ff:38:7e:11:6e:9f:63:a4:b8:a9:e3:
27:98:16:8e:83:1e:64:c1:f9:ec:3a:d2:96:13:dc:26:e4:0a:
63:92:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:50 2025 by rpki-client