Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: 3MjkUOywQk3+mc6er2dZS1tfgkQKqy+xV3mU8rEMqIY=
Subject key identifier: 01:20:67:67:CC:E2:E7:9B:AE:40:EA:C0:6F:31:96:F8:EF:4A:EA:0F
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 0199FBEBF9F02863E7DFD0EECE9B026EBCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: Urd6QFLnlsajBCbr5TQcHLERI7yyC0TVBVeOCM1MCxk=)
2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f9:f0:28:63:e7:df:d0:ee:ce:9b:02:6e:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=01206767cce2e79bae40eac06f3196f8ef4aea0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:ad:bd:54:3e:cc:aa:63:59:dd:f4:cc:e6:
ad:34:36:92:29:f7:52:13:b2:cf:29:1b:e2:86:2e:
13:c8:30:a5:d6:d2:e1:9a:81:8b:a1:24:ee:51:87:
54:aa:08:50:cc:db:43:d8:eb:8d:dd:d7:54:75:9a:
46:76:fc:c0:23:37:ca:db:a6:7c:73:f4:f2:5f:7e:
36:6c:a1:cf:7c:4b:d4:a4:37:f1:bc:03:74:51:35:
a0:f4:d8:68:90:5c:c2:a4:76:05:c3:ee:98:6d:5f:
51:50:0f:ec:1b:c4:d1:60:85:09:33:68:8e:6a:c0:
7f:65:09:b3:9d:8c:f8:5b:52:a7:cc:33:5e:00:da:
15:d4:73:e6:5b:63:27:49:13:12:f3:2c:8f:47:3d:
66:96:c8:72:3d:8b:f8:50:03:c7:ae:4d:84:d1:4f:
94:e5:71:2f:bb:86:5f:b0:83:48:3f:96:a6:d0:67:
98:3e:5c:ec:c7:ce:e4:7a:a9:60:59:55:ab:71:05:
e6:a6:94:75:62:7b:7d:7d:7f:4c:0c:c2:d2:32:32:
9e:9b:2a:d5:b8:41:cd:9e:a7:90:5c:da:fa:1a:d8:
30:16:67:7b:2f:73:fd:16:e9:71:8a:36:7d:c3:2d:
17:e5:19:36:7a:90:c5:d1:8b:d1:2d:15:9d:1e:7b:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:67:67:CC:E2:E7:9B:AE:40:EA:C0:6F:31:96:F8:EF:4A:EA:0F
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:14:c8:cc:22:1b:04:f0:40:e0:8c:bb:31:d9:e3:e3:86:a1:
64:40:21:24:d8:04:59:66:d3:5c:d0:2b:18:79:c3:a5:70:39:
ce:0b:c4:6b:2a:d0:a5:a2:f2:d2:03:d2:cf:d1:22:7d:fa:08:
68:76:dc:57:6c:46:3e:67:e3:19:18:d4:53:df:41:d8:c5:d8:
92:93:ae:f9:b8:4e:53:6b:d7:a0:84:3d:1f:cb:e5:1f:56:1f:
96:8f:f0:cb:3a:3c:38:79:45:1a:55:6f:4b:ad:a6:61:b5:7f:
66:b8:52:0a:2d:5f:b3:79:77:10:90:63:56:06:d8:4d:b3:fb:
a3:d0:1a:a4:36:dc:82:cd:db:2e:72:b0:3e:ee:d8:51:54:63:
c1:0f:e1:26:78:2a:c5:47:cd:87:7d:4f:0c:71:35:81:73:5c:
d4:e2:f2:fb:27:a8:64:9e:6f:b7:40:bc:32:a3:03:4e:88:3d:
b7:57:f3:3d:49:9b:34:b3:c2:e7:06:e7:90:33:cf:72:71:4c:
43:60:bf:9b:8b:9e:d0:e5:13:26:20:33:1d:e9:4f:8d:0a:fa:
c5:d6:29:3c:ee:48:c4:ba:47:59:c1:78:ae:25:47:50:a9:fe:
81:1a:5f:02:28:06:5f:f0:33:f0:06:3f:89:87:2d:34:5a:16:
ce:c5:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:04 2025 by rpki-client