Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: caLYTd+MpGSJlzLtNzG8KxrH6YFr5DSodeG2NxXCT6k=
Subject key identifier: 1F:A8:B8:42:7A:AA:C6:BB:1A:92:3A:4A:24:BD:E4:73:3E:A3:3B:F2
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019A00A37ACD3E744C9D33AF363487D8D318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0C19
Signing time: Mon 20 Oct 2025 08:01:45 +0000
Manifest this update: Mon 20 Oct 2025 08:01:45 +0000
Manifest next update: Tue 21 Oct 2025 08:01:45 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: fFG2JQ3w/3w5ih7mRZIwrqRyyGl3uyd8g7YrZ6BynkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:7a:cd:3e:74:4c:9d:33:af:36:34:87:d8:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Oct 20 08:01:45 2025 GMT
Not After : Oct 21 08:01:45 2025 GMT
Subject: CN=1fa8b8427aaac6bb1a923a4a24bde4733ea33bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:8d:a3:d1:69:5e:17:77:cd:3f:a6:e7:b6:
3f:8a:a9:77:c0:89:44:f3:1b:07:97:27:32:fe:77:
24:80:fb:dc:f9:a4:f4:d0:e9:17:03:2a:c4:13:43:
a0:b3:71:11:59:c7:93:c5:ab:ec:b3:6a:e3:f1:f9:
05:67:5d:30:78:34:45:e8:73:25:6a:cc:36:65:e8:
d1:2e:11:dd:6b:c3:7f:68:7d:ae:ec:53:7a:e7:f2:
44:5d:3d:5e:da:96:b1:62:c7:1d:c9:bf:7b:49:83:
40:07:95:60:c5:02:92:ac:c8:1e:cb:a9:f0:ca:f5:
ea:de:52:50:e8:70:20:79:10:bf:5f:04:07:a6:be:
6a:8f:63:09:22:d5:29:33:52:f1:a2:4a:95:6f:97:
ed:5e:15:38:f8:8f:77:d4:0e:5e:94:17:5f:b9:6b:
30:c7:82:e9:3b:a0:4d:a9:5f:a8:44:df:9b:74:86:
1d:a8:4b:63:c0:a7:bb:e0:01:a0:9f:82:d7:80:46:
9d:83:54:18:05:8c:e3:f4:6e:3d:e9:aa:6c:46:b4:
84:66:f5:6a:ef:45:4b:67:c5:37:32:22:e3:0c:53:
cc:48:3f:70:67:01:29:49:2a:ec:ad:a8:51:16:da:
82:3d:2f:76:da:8f:98:56:f9:4b:a2:4d:8c:5e:48:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:B8:42:7A:AA:C6:BB:1A:92:3A:4A:24:BD:E4:73:3E:A3:3B:F2
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0c:76:37:c8:be:15:c5:ba:a9:f9:f0:90:83:b4:bf:0f:c4:
fb:e3:12:50:5c:ad:e9:8d:ee:bc:30:c4:b0:6e:02:d6:bc:e3:
0a:45:20:36:0c:5e:c3:c2:24:8e:dd:44:5c:e5:14:bb:e0:71:
fd:03:89:70:61:f8:7a:ba:dd:81:e6:1e:9e:de:18:38:34:46:
dc:36:e1:7a:7a:4f:e1:18:f2:d7:e4:f4:75:ff:3c:f2:0c:28:
a9:df:9f:40:8b:2a:fe:dd:a1:8c:fd:c0:3b:38:d9:13:34:03:
c1:6c:37:05:40:29:82:60:9d:88:06:c1:3e:45:ce:f9:6c:35:
21:5a:d2:f0:54:83:bf:52:95:06:b1:8c:d6:88:20:35:55:d2:
69:3d:06:53:ea:84:0d:8b:e9:42:0a:4f:50:ce:0b:89:f1:99:
a7:61:6b:b4:db:5a:0d:97:52:49:76:c4:62:be:7d:9b:f9:f8:
ff:90:8c:9b:31:10:7d:c1:26:08:44:8b:29:f7:88:38:e1:72:
a1:e5:fd:71:eb:dd:7c:5e:cf:50:43:c2:06:32:45:97:e8:09:
cf:16:96:d9:f1:4e:ae:e5:f1:03:32:c2:84:d5:e7:ec:7c:8a:
96:c2:b3:c1:9a:bf:31:ec:bf:56:fb:f9:60:f3:24:f3:15:ca:
35:8f:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:49 2025 by rpki-client