Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: xBU6OjfChY5ofuwFjA3ec2YayoBhxLQ5zoEYaJgQKoA=
Subject key identifier: DC:C5:A2:74:94:B9:31:60:68:6F:A2:B8:49:63:EB:ED:91:1E:61:86
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 0199FDD9EB478A0932C1256CAE135C6A3E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 14A1
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=)
2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=)
3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: uNScqAtApFbr/zZ4r514rH25KZuOoqTBMVO4GYFpTMA=)
4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:eb:47:8a:09:32:c1:25:6c:ae:13:5c:6a:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=dcc5a27494b93160686fa2b84963ebed911e6186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:97:78:96:07:50:39:6f:34:25:43:ab:6d:
0e:5e:ee:f4:9a:8a:e1:78:36:2a:68:5b:1c:07:e3:
51:96:a8:10:fd:dd:7d:22:97:77:08:f3:45:f3:6f:
17:7f:0d:83:60:16:a0:1b:a7:7c:9f:ec:f5:51:7a:
01:0c:e1:70:3b:3e:99:39:f5:3d:b6:8f:a8:c3:8d:
f7:6d:22:50:d6:e8:fa:de:94:f0:59:87:31:7c:2a:
57:02:63:f6:f7:5d:e9:24:e1:d2:4e:83:f5:fc:f9:
b9:d1:a0:b9:dc:0d:ce:08:be:f6:61:c7:e3:54:7d:
01:b5:21:ae:15:ce:b4:17:c6:7a:21:16:bb:27:25:
62:89:73:86:be:bc:86:8e:9f:cd:d6:da:b2:53:a4:
12:0c:2d:90:04:5c:3d:a9:4f:98:a1:42:52:aa:35:
0a:a1:39:6b:c2:e5:aa:01:99:82:b0:65:e0:5f:d9:
06:36:b9:3d:ea:0b:2c:ca:7e:cf:b4:80:17:83:17:
0f:f9:08:1e:2e:b5:e6:18:a4:51:cb:71:78:d1:5b:
d8:94:8c:dd:f0:ba:fe:75:4b:72:41:c8:18:54:3f:
fa:87:92:40:a2:6d:d2:73:04:69:06:35:f8:22:29:
f4:ce:fb:ba:4f:38:e2:4c:32:01:2a:ab:ae:94:7f:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C5:A2:74:94:B9:31:60:68:6F:A2:B8:49:63:EB:ED:91:1E:61:86
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:48:91:67:ef:a6:da:e5:e5:94:18:cd:47:19:2d:93:fe:39:
38:56:20:dc:de:91:06:9c:c6:91:2d:8c:73:24:85:6a:dc:ad:
f4:ac:51:95:4e:56:8c:09:93:30:7e:20:79:12:a7:97:6c:a5:
09:6f:60:2c:4f:47:f3:0d:c9:e6:16:6c:f8:1f:cf:d2:7d:65:
12:2e:74:34:56:13:f3:32:aa:94:c0:b1:94:81:c3:07:6c:0c:
0a:d7:7e:92:3f:b9:79:30:a5:4b:ad:55:8e:d0:eb:43:89:af:
77:54:bb:f7:4d:52:67:ff:09:1a:d1:13:62:b4:0f:d4:1f:45:
f7:26:ea:e8:6b:ba:ce:bb:66:6c:d3:c6:ee:92:cd:d8:fd:c8:
dd:17:71:79:bb:fd:36:ce:f4:c6:66:7c:05:c2:b7:15:00:57:
4a:33:3c:1e:4e:be:15:0a:70:a6:54:d7:e9:c6:c7:26:3e:75:
c2:02:e6:36:54:9c:5d:01:f1:1f:3f:4d:9f:ab:6e:fe:d4:df:
72:64:4d:83:73:5e:75:86:41:64:82:fe:76:4a:d7:3f:12:01:
65:45:88:6e:b6:7d:ea:26:08:b6:42:68:a7:5b:0b:26:09:19:
72:03:88:98:1d:d2:39:35:35:66:a8:96:41:00:0b:0c:f8:37:
62:d3:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:46 2025 by rpki-client