Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: 0ankPyNAyzqbu8IHQzQAb9j1gUHSbuE7RdQCwaf024s=
Subject key identifier: 89:1E:A5:03:10:36:AD:C4:A8:57:21:F4:1B:B4:0F:E9:E5:08:AF:62
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 0199FD6B03AE7143AAF3E0A49B1BC8E55EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 07A5
Signing time: Sun 19 Oct 2025 17:01:12 +0000
Manifest this update: Sun 19 Oct 2025 17:01:12 +0000
Manifest next update: Mon 20 Oct 2025 17:01:12 +0000
Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: 2khqwqwPO2jbBxmUtktdG9NEf4k6vym45DGF49SriL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:03:ae:71:43:aa:f3:e0:a4:9b:1b:c8:e5:5e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Oct 19 17:01:12 2025 GMT
Not After : Oct 20 17:01:12 2025 GMT
Subject: CN=891ea5031036adc4a85721f41bb40fe9e508af62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:74:33:aa:8b:fb:b8:fe:ba:7d:35:85:e9:
f0:f3:d8:98:97:66:0f:a4:d5:e3:f2:04:35:ca:3c:
5e:0f:4e:92:92:56:b6:56:76:da:4c:c6:d0:e6:c0:
57:c3:3c:89:ce:2f:57:ab:c4:e6:11:0c:87:15:47:
4e:5b:f7:65:78:6f:3c:a1:8e:35:d4:1e:1c:c1:f3:
b0:aa:f9:30:6d:d6:9a:e9:f2:dc:8d:b0:83:84:9d:
3e:99:7e:46:29:4a:d0:e5:38:cf:08:b8:e3:5c:de:
c8:ee:c9:b2:22:e3:4d:0b:0d:31:4d:b4:e4:17:fb:
9d:a5:96:e0:b3:1b:dc:f1:cc:d6:a8:64:95:63:c3:
7c:68:b7:72:c6:75:06:73:cf:89:5e:96:36:4d:17:
6b:15:b3:79:c5:9b:62:e5:5d:f6:c3:5a:d3:20:c3:
91:cc:f1:4e:11:39:aa:bb:cc:34:d7:19:4a:e2:af:
15:f7:b9:43:6f:9e:88:e5:c0:3f:b3:46:38:fe:23:
17:80:ca:9e:d3:3b:16:4c:ca:6d:23:3d:5a:36:e4:
07:c8:89:77:95:b5:3c:53:7d:14:8d:9d:fe:9d:df:
8a:70:d5:14:3c:0d:62:58:1b:33:6c:23:2a:7c:8e:
94:4a:cc:73:c4:f0:41:c3:ce:e3:77:4c:18:e6:6d:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:A5:03:10:36:AD:C4:A8:57:21:F4:1B:B4:0F:E9:E5:08:AF:62
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:f1:40:75:0f:c4:4c:54:a7:54:39:42:05:d2:05:8f:4c:
38:a2:3f:46:93:4e:43:4d:63:4e:98:ea:7d:06:bb:b9:79:92:
ef:bf:0d:63:30:35:6d:0f:df:23:d7:dd:d2:4c:64:f9:a4:b4:
cf:cb:83:ec:49:df:ee:6b:14:5f:d0:b7:d2:66:f7:b9:c1:63:
ef:2c:f3:c4:79:4e:87:cf:5b:bd:47:df:24:c0:da:a4:65:f5:
1a:5b:fd:be:86:93:b9:3a:b2:91:1f:60:c8:0f:90:3a:02:82:
32:ff:ab:dc:8e:c1:fb:51:ec:cb:e7:7a:9e:50:03:ff:2e:0b:
fa:18:10:5a:7f:d4:d5:b3:2f:08:fe:9c:52:89:45:9b:73:74:
ef:3f:18:7f:8b:5a:4c:65:d8:4c:19:af:d3:ec:c2:f6:34:e5:
6a:9f:5f:70:11:84:a3:68:6b:65:69:54:fa:7f:4c:70:bc:fc:
8d:1f:0e:31:91:44:d6:aa:ac:3a:f3:a8:57:9e:a2:31:2b:f7:
fc:9c:12:10:3d:22:b3:2f:12:d7:48:3a:0a:c9:6d:15:2d:51:
65:5e:12:42:3b:27:cf:ca:1e:27:9a:7e:b3:f8:09:bf:7f:a6:
96:f0:d7:e5:a4:2b:2d:36:65:e2:66:aa:d8:be:65:90:49:53:
77:52:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:51 2025 by rpki-client