Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: iFROn3MUPlN96zrHbfypB4tVsxvmk24W+Ww3X/7l8wg=
Subject key identifier: 48:03:86:14:E5:09:7E:F8:DD:21:76:9B:1B:76:28:35:C2:F4:73:78
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0199FC8FAE53F9862BD71A3B69422F1E5091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 16F2
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: 1fLP/NlSly+ugJSxqLBshC+d0ElfLHd+3b1f7QGZI2g=)
6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ae:53:f9:86:2b:d7:1a:3b:69:42:2f:1e:50:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=48038614e5097ef8dd21769b1b762835c2f47378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:bb:26:87:8d:f2:43:59:28:4a:a4:04:c8:
0c:0e:fb:0b:bc:24:5c:64:85:33:d0:8c:7a:ac:d7:
86:eb:ed:88:2e:4a:0a:42:b3:ab:33:5e:d3:0c:9e:
c7:6e:54:8c:7d:30:c6:cb:6b:5f:d0:24:e1:ea:80:
f5:82:30:36:b9:bd:1a:d8:3f:89:b9:cd:08:d2:9a:
82:ea:23:52:7a:f0:d3:1c:60:00:3b:df:57:d8:3c:
26:f9:d6:64:0e:34:8c:0e:01:b1:5e:0c:15:02:78:
de:fa:94:b0:d6:7b:77:bf:59:4e:33:a2:1a:b8:4e:
5b:34:3a:41:03:0c:75:be:4f:9d:8b:b5:fe:04:dc:
9e:4f:c8:73:f0:ca:e9:8e:c4:87:2d:32:b8:74:92:
fd:9b:2d:b1:fd:cd:23:0f:1b:ed:db:5a:56:f6:57:
88:46:2b:0a:69:a5:93:28:51:63:1a:b4:ac:ce:5e:
7e:00:6f:47:3e:5e:45:cf:08:f6:98:98:d3:a5:ab:
c4:8c:35:24:8f:fb:b4:e6:4b:1b:8a:27:08:a0:00:
2e:ce:a6:b6:3c:b1:85:84:3a:1a:c9:cc:90:c3:f8:
5f:ce:34:cf:da:a2:e3:6c:cd:3e:bd:12:7d:54:2a:
ce:f7:4e:75:5a:76:ac:b2:77:0a:5d:67:34:6b:c6:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:86:14:E5:09:7E:F8:DD:21:76:9B:1B:76:28:35:C2:F4:73:78
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:42:f9:0c:88:5c:49:7f:a6:37:12:c2:8c:51:a2:e8:aa:26:
cd:48:f9:e6:8d:68:84:c7:1b:de:1a:43:50:45:0d:1c:e7:e9:
64:94:f7:ed:e2:76:a4:94:ba:33:e0:5d:ed:6f:fe:59:7f:fd:
22:bf:43:0e:70:7f:fe:47:72:e3:0f:25:4a:77:b2:04:4a:47:
21:4d:19:eb:27:8c:49:8d:0d:94:19:a6:32:23:80:90:47:81:
fd:73:63:a9:e1:2f:4d:9a:aa:ef:66:53:07:f0:d3:86:e0:0e:
5f:14:71:9d:16:0a:a7:7b:ce:ad:cb:db:f3:a1:5d:c0:7a:76:
c4:12:d1:a1:49:7f:02:ab:20:e4:b3:41:14:8f:65:90:25:da:
5a:a0:d6:71:8a:d7:49:dd:2d:58:06:79:18:08:e4:a0:11:4a:
f5:cb:73:07:bc:62:bd:4d:e6:88:26:ae:00:c6:7d:85:41:0d:
51:ea:2c:34:fd:23:f2:ab:1c:00:95:96:ed:62:41:5c:6d:7b:
f5:ba:1b:64:ed:f7:64:39:c7:c4:48:f8:45:30:50:fb:5e:f2:
0b:8d:93:96:c0:23:61:69:a6:cd:c9:6d:03:7a:c7:31:62:f8:
bb:c7:42:d1:bb:98:44:76:30:58:ed:41:b7:60:72:b3:03:2e:
69:4c:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:37 2025 by rpki-client