Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: NG38CLQq1FPIcT2N04yzXNS0GHyTxV6XlaMPBzlyClc=
Subject key identifier: 0A:9F:2F:FC:A2:A5:92:5C:26:59:12:6D:E1:E5:9A:A2:D7:07:9F:7E
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 0199FB45A696F485E9F057714F3EC38F2CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 12A2
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: Vk-tGAmV5TZofFrkU8NsN6eg260.roa (hash: n+OnJ5MdOwQk0fYvXBBSZ9AYECq0X6y6UCleUqQHa9c=)
2: epViL3MVi9bWXcuzA24cAMVu98I.roa (hash: SrcEH3xgjkVSJRtnVeoxwKETukrMGUr8rXBzqe4u9C8=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: hlVQJk9+kNdtg47vtdHAMChaTWVyGiynxU06EfKWxko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a6:96:f4:85:e9:f0:57:71:4f:3e:c3:8f:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=0a9f2ffca2a5925c2659126de1e59aa2d7079f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:f6:3b:c9:ab:14:db:ff:c4:02:b2:cf:2f:
1a:8f:fc:5b:f6:e3:da:ba:85:48:d3:c7:42:83:8f:
0f:15:9b:7e:67:3c:86:a2:3b:a6:13:2d:bf:12:92:
ee:26:75:81:0e:d1:73:e4:7f:02:71:ec:e8:46:f8:
8e:6d:ac:ab:98:f3:6d:c5:b3:8c:ec:1a:c1:37:3a:
9c:bb:53:bb:56:0a:44:94:5a:a8:16:cb:2c:18:27:
9c:f3:d9:96:cd:e1:86:57:ab:a1:53:75:3a:e8:8d:
07:95:bf:d2:cf:63:4f:16:0a:f7:37:5c:c5:a6:fe:
b1:4f:eb:3e:7c:28:07:a4:6e:8e:2e:cc:81:65:aa:
90:ec:43:17:c8:95:d7:53:53:1b:95:91:a9:ed:79:
93:db:2a:a6:60:f2:cf:0f:e8:ad:ab:b2:af:d7:c0:
6e:61:85:7e:b7:d3:6b:ea:f2:48:06:45:65:48:42:
89:98:53:1d:aa:aa:1f:71:ea:0c:6a:df:cd:15:c4:
3a:f3:0a:97:0d:0a:f1:03:72:e3:df:81:c9:f9:37:
6a:89:2c:2e:c2:85:71:b9:b6:44:93:cf:0f:a7:a7:
af:29:7d:9e:5b:d1:03:7c:57:2e:e9:ec:c4:7e:e9:
28:fb:84:38:03:69:a0:1e:30:f8:c6:6f:c7:58:2a:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9F:2F:FC:A2:A5:92:5C:26:59:12:6D:E1:E5:9A:A2:D7:07:9F:7E
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d5:5e:c0:fb:21:19:51:4e:93:2c:70:f6:bf:4b:12:8d:de:
aa:e4:c7:2d:0c:63:50:f5:53:1b:24:7e:0d:5c:22:78:5f:43:
21:a5:d9:48:eb:61:61:7b:4c:19:bb:cd:db:0a:12:d2:fa:e9:
f5:d2:3a:5c:f8:c4:88:18:75:b0:7e:69:58:6d:fd:5b:fc:02:
db:23:b3:b5:a4:b7:c2:ba:07:66:1f:35:bd:a8:35:1a:74:71:
c2:ed:7d:22:24:c8:72:bc:09:54:7f:e2:a8:8d:71:a5:93:c3:
09:73:02:e5:cd:aa:ab:4c:16:28:3d:09:50:39:74:83:b7:56:
3e:ad:8a:fc:9b:be:7a:66:81:de:9a:4e:ec:f6:1e:35:a8:33:
be:21:ce:5b:d5:79:a4:95:5f:38:b6:17:65:46:65:52:57:38:
b1:fb:ad:c2:9e:88:b2:ea:1f:f5:89:39:57:ab:8d:52:dd:e9:
bd:2f:89:cc:2d:bb:58:a9:20:37:64:70:02:04:cd:16:fc:f0:
f2:30:b2:d1:a6:91:03:70:97:21:77:6c:9a:89:6a:95:38:9f:
64:d3:8a:ef:19:3d:21:7c:b1:5f:46:bd:33:98:0c:5e:21:0a:
29:6d:10:3d:43:d8:2d:fe:cc:40:ac:c8:e9:c5:b8:7f:1a:40:
eb:01:43:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:27 2025 by rpki-client