
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: Eow3IolLNEnJAamRCPF5MhRuCaACpjGDrwia+w4zlFQ=
Subject key identifier: A2:F6:C4:25:6A:FA:61:86:0C:56:66:45:58:F7:E5:FC:3A:89:30:A6
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 0199FCC6A71A9825E42A1BD001A78199C608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0DB6
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=)
2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: D0Mo1ZER/JtIwa6pptAAUf9f1GRWrtoX+kmKyxhWx2o=)
3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a7:1a:98:25:e4:2a:1b:d0:01:a7:81:99:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=a2f6c4256afa61860c56664558f7e5fc3a8930a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:b5:f4:0b:6c:79:b8:a8:11:6e:48:24:49:
57:46:3b:68:06:42:d1:68:08:36:fd:55:98:e1:e0:
e1:9c:58:02:65:ba:5b:35:b7:e5:0e:cb:72:06:38:
a5:22:76:71:c4:1c:d6:3d:16:4d:2c:54:16:01:98:
5c:1c:89:02:e0:6b:d7:10:89:e8:b2:fe:23:20:48:
35:82:e9:9f:dd:50:d8:d7:02:9c:c7:b5:b1:1d:2f:
f9:c3:3e:22:2b:9d:0f:4a:12:b9:f5:85:da:b3:0e:
b2:68:0b:c2:70:a2:6c:c8:9f:27:7a:86:a4:92:3e:
82:ff:72:3f:c5:9d:9d:20:fb:f7:68:d4:1f:1c:bb:
45:ce:fc:3a:d9:16:21:88:a6:a2:8c:c9:c3:c1:05:
cb:dc:22:4a:08:15:12:92:61:8c:78:b9:cc:f6:6a:
28:77:bc:bf:e7:b0:4a:ea:d7:0f:0f:2e:75:ad:22:
eb:d7:74:94:0e:d6:63:85:2d:fc:5a:1e:2b:0c:93:
0d:0d:8d:bb:8b:ec:5d:fc:24:fc:c0:c5:89:5c:dd:
36:93:a2:1c:b3:bd:ef:fa:78:06:3a:46:1e:05:5c:
7a:f6:d5:4e:5a:84:ee:7e:9c:c7:d1:de:6a:3e:11:
c4:e7:93:d8:9e:d8:8a:dd:17:4d:41:6f:17:49:d6:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F6:C4:25:6A:FA:61:86:0C:56:66:45:58:F7:E5:FC:3A:89:30:A6
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bc:84:98:f2:7d:43:a7:39:76:d7:88:5d:3b:5b:10:ae:5c:
e1:0e:d7:05:d5:07:4b:16:8c:c2:b1:f7:95:55:2b:b0:3b:d6:
8f:2e:5e:d5:ca:a2:4b:66:4a:50:0b:dd:e4:4b:91:7b:ab:84:
f6:77:58:52:3a:ff:2b:c6:d6:cd:69:81:ae:13:ff:95:b9:60:
a6:15:3d:7b:0b:4c:a8:7e:08:58:f8:18:ae:45:c3:ba:6b:ef:
e6:43:4f:cf:b9:fb:64:b8:0a:7f:26:0f:65:e9:c4:24:18:a8:
89:73:c9:82:44:53:39:66:53:6e:22:12:86:19:65:06:e2:cd:
e2:8e:d3:e7:2b:4b:09:55:6e:b3:68:52:37:9d:22:11:62:87:
85:3e:6f:cf:dc:50:18:86:47:0d:81:a6:a8:41:bd:28:4f:f7:
47:b6:74:06:5e:78:7d:ea:df:0d:80:d6:36:32:59:95:f9:d5:
b5:88:40:70:b0:a7:a5:a5:65:d5:ce:f8:89:4e:4f:3f:15:ef:
f3:f7:e8:62:f5:c8:47:d3:90:fc:37:63:36:3a:c3:32:11:9b:
67:fb:b9:4e:82:23:72:4d:48:f6:fe:54:23:2c:93:d9:93:f5:
c4:d3:c7:11:6b:06:11:cd:7c:ec:8f:c7:1c:73:0b:62:aa:00:
41:51:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:09 2025 by rpki-client