
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File: oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier: Ksrx9CBhSyfmZG0xwAaYu82rQs3EjZais0pxngjoICU=
Subject key identifier: 61:92:36:F5:35:16:13:86:CB:6E:6C:CC:21:F4:6A:F2:4B:04:27:47
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 0199FBEA9AC98D975997A0932801AC8D4A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: ZHl9gIsaeFhaQHxgcvr/rlI81K/FGmT7qoVK6oRqw7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9a:c9:8d:97:59:97:a0:93:28:01:ac:8d:4a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=619236f535161386cb6e6ccc21f46af24b042747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:f0:54:03:6b:aa:fd:65:30:09:e9:54:7b:
f0:18:25:01:ab:eb:d7:ed:01:c0:51:19:09:1a:15:
c4:bf:02:95:b1:fd:54:0d:18:76:a1:b8:9b:e7:8a:
d4:1e:6e:66:30:e6:b8:a9:d2:7d:da:46:ce:98:9b:
c3:bc:7b:a4:de:b8:17:02:73:45:67:02:52:f0:4c:
eb:72:62:67:9e:6a:82:e5:70:4b:ba:87:72:d1:e0:
13:e4:c8:0c:10:b3:b5:5d:42:4e:24:58:ef:47:f0:
09:b7:77:70:ad:54:d6:16:96:73:93:50:a7:51:03:
55:70:5c:79:85:d2:cf:54:f4:2a:53:27:0f:e4:f8:
21:42:1a:d4:97:68:4c:a6:3a:12:65:27:65:04:a5:
53:32:f9:00:b9:d2:c0:fb:4e:7b:21:2a:01:f6:cd:
ae:8c:32:03:9f:73:5f:4f:62:4c:70:ff:8a:0c:0b:
9b:73:fa:eb:66:0e:66:94:18:bc:34:6b:f0:ef:37:
91:33:e4:41:7e:5c:b8:67:e0:9a:2f:8a:40:56:63:
02:ad:97:bd:ce:16:7b:b3:91:0f:cd:d5:1e:b6:8e:
e8:af:a1:36:bf:ed:cb:b4:0d:e5:b6:15:5a:ee:af:
d6:11:3e:36:a5:49:fe:b5:73:5e:f4:f2:65:a7:6e:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:36:F5:35:16:13:86:CB:6E:6C:CC:21:F4:6A:F2:4B:04:27:47
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:09:e4:60:90:78:4f:f4:df:59:73:6c:bd:7b:10:36:6c:64:
32:41:01:c8:0a:ee:19:4b:ec:35:df:9f:f6:38:c9:39:59:d7:
d3:4e:64:f9:3b:b0:90:81:62:31:18:bb:9d:e3:79:ab:cc:60:
57:3c:1f:05:92:69:cc:c5:ef:78:d8:11:85:f4:3b:55:29:bb:
10:0e:af:da:e9:e1:5a:fe:4d:ec:e8:06:bd:25:8f:82:02:db:
d3:5b:f7:9e:19:ef:55:f7:d7:cc:d3:89:67:22:21:0f:7b:f1:
a1:b9:85:43:71:4d:85:04:3d:61:4c:7a:8a:91:77:2a:98:62:
b6:84:d0:29:a6:e3:50:f7:9e:39:2b:49:b8:b3:3d:7c:89:46:
c8:10:f7:f2:88:d8:aa:0f:14:57:37:6b:24:b5:a4:5c:f7:c8:
5e:a6:f2:d3:e2:36:c3:e2:90:1c:1b:a4:f0:bb:0a:46:61:fe:
50:42:32:85:dc:81:1c:e6:62:92:b6:82:12:36:79:22:9e:6c:
93:85:fe:85:07:75:03:eb:7f:15:1a:6e:53:ba:ef:cc:6c:89:
34:39:72:07:d4:bb:ec:d8:8b:37:43:d0:01:15:4a:82:d5:14:
ab:a6:ee:39:2e:ef:e1:59:72:cf:7d:c4:53:a2:7f:c7:9f:4c:
fa:f5:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:18 2025 by rpki-client