Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: +bRvu8Aw+YTH4spurOdV8zqYW3PQaqoem1R8ZxAve8g=
Subject key identifier: E3:FF:8F:1C:C1:F9:B0:99:3C:1A:09:A6:AC:7C:27:D4:A9:17:A9:4B
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 0199FBEC024B56D5521A55BB7FB9435B331F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: 6XMMUoR5VGU5FHFT9XchuUcLtyJ5/AmkdEgM4v0kkH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:02:4b:56:d5:52:1a:55:bb:7f:b9:43:5b:33:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=e3ff8f1cc1f9b0993c1a09a6ac7c27d4a917a94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:76:41:48:0e:9f:9a:68:99:6d:14:a4:fa:
e1:fe:ab:76:33:c7:aa:7c:c8:7c:d2:39:8d:7c:7a:
cd:17:7d:01:90:79:a1:67:5e:a8:53:4f:9f:e1:93:
94:5d:2b:de:48:a5:c3:57:50:a3:10:b5:c1:74:46:
03:82:eb:b5:ff:bf:ed:76:04:f2:ef:4d:a5:d5:45:
6c:d5:9f:b7:59:80:63:da:82:7b:2f:02:61:e1:36:
87:2f:e9:ab:9d:f7:b5:5c:69:79:4d:fc:9b:33:7d:
14:26:48:3b:e2:5a:bc:6d:83:3c:18:e2:fd:ab:35:
09:c7:01:42:86:80:4d:2b:dc:75:00:c1:5a:b7:6b:
bd:89:8f:23:94:f7:3c:db:b1:ca:66:f7:80:4d:ca:
ea:29:8e:90:a5:5e:06:e0:0e:85:48:ea:aa:24:ca:
04:5c:93:49:a4:f0:67:b7:62:55:ec:1c:d2:3e:3d:
69:91:27:cb:1f:3b:90:31:01:01:66:15:b8:c3:87:
ce:90:6f:dd:8e:4f:a7:a8:74:68:11:1b:63:f4:8e:
40:d3:54:44:dd:e4:42:0f:fd:1b:ac:62:ea:a7:a5:
a1:c3:b8:64:8a:f2:91:f0:1c:31:6d:85:f5:5c:4c:
4a:12:ee:bb:86:05:3f:15:f3:be:70:be:92:1e:d2:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:8F:1C:C1:F9:B0:99:3C:1A:09:A6:AC:7C:27:D4:A9:17:A9:4B
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:33:cb:91:6b:74:a5:27:d4:d8:cf:5b:73:69:6b:8e:85:33:
4c:26:2c:72:7a:26:d7:b6:20:e3:fe:da:8f:0f:3b:47:b0:11:
9b:20:cd:ec:c9:2c:42:cb:44:97:1c:11:c3:ba:4b:7b:86:52:
fe:e6:1c:9b:99:1f:69:50:be:99:f9:12:8c:91:c2:7c:3e:79:
92:7a:b1:fd:43:6d:48:fc:c4:32:63:92:81:fc:b9:d1:ce:17:
00:9c:4f:dc:19:9d:ad:d3:93:76:48:d5:d5:b8:19:6f:a9:2b:
c5:00:d6:3b:55:99:a3:3c:bf:4b:d5:d2:a3:a4:3c:2e:4c:b7:
45:a0:41:34:2d:e7:a0:56:73:0c:ae:30:9d:19:db:87:89:0b:
a8:06:95:23:a2:cf:f1:fc:14:9a:09:28:61:d2:4e:3a:f2:dd:
b5:27:21:1a:13:fe:57:a2:6d:76:20:5a:64:02:2c:fa:37:27:
eb:10:9b:60:9a:58:f2:cc:80:75:0b:aa:98:97:f7:e5:09:46:
ef:2a:68:6d:aa:b9:64:2d:bb:e6:04:44:56:5a:91:0c:5d:1d:
03:c0:64:8a:66:ff:dc:3b:27:95:b6:a9:16:31:1a:44:3d:03:
79:5b:ed:74:0d:96:92:4f:34:02:d1:51:57:d5:7a:e9:43:55:
fd:fa:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:48 2025 by rpki-client