Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: MLY/CBImiV56ThqIXFPzoESOCqEsBwEkaekD/b5KzMI=
Subject key identifier: DB:2C:2C:11:C4:A6:F4:68:93:0D:A6:55:3D:FA:79:11:F7:0B:33:87
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 0199FC2197302732FC91E9C85E91ED4CA020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: fmFzltJd/9fBN1dkG9V5PNB05DRHKVz0fN4y46x2ogo=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:97:30:27:32:fc:91:e9:c8:5e:91:ed:4c:a0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=db2c2c11c4a6f468930da6553dfa7911f70b3387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:06:c8:c0:fc:c7:6b:d0:0f:76:8e:27:e9:
7c:ff:ba:63:39:bd:f0:96:ff:66:09:4f:7d:88:c8:
ac:d9:1f:70:e8:61:7e:17:a4:99:b2:f5:f9:54:4d:
82:56:26:d9:8d:a1:1c:38:f4:66:76:e5:99:42:9f:
5c:37:13:eb:43:e5:46:b1:b2:cf:8f:59:40:a4:70:
bb:d1:e6:a3:a4:51:06:f9:26:ce:7f:dc:0a:66:2d:
a6:38:02:d9:c8:4c:75:17:cc:0a:99:3a:a0:60:d9:
59:99:ee:26:20:11:47:6d:f4:4c:dd:c8:7d:3e:bf:
f8:61:7a:04:f6:ff:93:83:3a:31:20:98:08:25:0b:
75:39:1f:23:6f:fe:ce:21:af:a3:62:6a:58:34:08:
6d:5d:d2:f7:8f:f2:35:0b:6e:50:87:ab:ef:83:c0:
21:be:81:88:73:15:5a:c7:73:61:32:b1:a9:b6:b6:
e0:dc:3b:6f:f5:cb:02:a8:c3:c0:1e:4e:1f:06:9e:
44:e1:94:07:1f:2e:04:15:53:85:b7:48:13:a9:6d:
04:ef:01:4e:f4:6a:85:3b:b2:b2:28:e8:d5:d2:0d:
31:20:6a:08:e2:52:43:0a:5b:52:92:11:4f:d3:8b:
88:60:4b:12:eb:1c:f3:f1:75:a0:90:67:25:99:b7:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2C:2C:11:C4:A6:F4:68:93:0D:A6:55:3D:FA:79:11:F7:0B:33:87
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:99:6c:8b:80:8d:62:63:82:28:b9:6b:ab:ed:b8:fb:3c:
8b:9f:e7:b3:68:49:c3:0f:7c:8b:42:73:8e:3b:19:ec:74:16:
35:34:6e:fd:db:13:97:a0:ff:02:02:54:fe:a1:cc:73:a0:13:
d4:66:ec:69:13:81:a9:28:06:54:bd:6f:70:61:ac:91:fd:51:
1c:d6:05:ee:dd:4c:58:2c:1a:64:2e:37:6e:83:b5:85:3e:9d:
1b:f8:cb:08:13:1b:0e:24:1f:4c:83:23:4e:6e:ca:52:12:34:
c2:38:61:a8:bb:dd:19:0b:19:f7:75:72:d9:b6:37:f8:8c:d2:
50:89:24:71:67:27:f0:4f:21:8b:33:09:bd:39:48:30:ca:d4:
07:d0:3d:21:39:68:9a:b9:6a:c9:03:db:35:81:5a:b8:0b:80:
75:1c:95:02:dc:55:89:9c:f1:32:4f:7a:3f:96:80:07:49:7b:
a1:dd:88:01:59:25:9a:e9:d4:9a:d7:55:cc:4f:26:2e:ce:04:
53:db:c5:ea:04:0d:53:8b:1d:c3:33:37:02:2f:24:a2:06:26:
47:b7:5c:46:c3:1d:7f:2b:00:a4:55:34:4e:7b:82:62:79:ef:
99:cc:c8:a7:f2:53:83:5c:c7:2b:e9:63:e7:64:3d:b4:0f:fe:
bb:75:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:56 2025 by rpki-client