Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: mwNy2cFGD8z1JEUgpQdFH8qO1dphGm1FsedLaeZpfUE=
Subject key identifier: 2F:3A:B3:A6:5E:DB:FA:C9:32:EF:6B:8E:B5:FE:54:2E:BD:B1:08:FB
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 0199FB7CFFDDCADCA06E3358FAEF97187C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 02D0
Signing time: Sun 19 Oct 2025 08:01:37 +0000
Manifest this update: Sun 19 Oct 2025 08:01:37 +0000
Manifest next update: Mon 20 Oct 2025 08:01:37 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: BKi3r1XYCrnjVPPaRFkdR5VvRAuIQYLtfKrCktKWojM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ff:dd:ca:dc:a0:6e:33:58:fa:ef:97:18:7c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Oct 19 08:01:37 2025 GMT
Not After : Oct 20 08:01:37 2025 GMT
Subject: CN=2f3ab3a65edbfac932ef6b8eb5fe542ebdb108fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:88:fc:78:9f:58:17:39:1c:24:16:3b:ce:
1b:dd:42:bb:a4:c5:36:4b:00:e5:b5:b6:a8:84:30:
2a:ce:f9:70:81:9a:f4:a0:ba:10:c0:bd:bd:5b:d6:
8c:ff:6e:53:96:1a:63:5a:c0:ad:bd:5f:51:66:85:
ab:5d:8c:6c:dd:ff:35:e4:f2:35:19:ff:4f:57:35:
62:df:a5:bf:73:6d:46:dd:cc:16:11:71:f0:8b:88:
fc:a8:99:91:e2:34:1a:ee:3d:22:1d:8d:3f:a6:52:
e4:3a:45:9b:89:d3:3d:4a:bb:6c:24:87:3d:d8:0b:
f4:b5:25:b7:0b:58:f3:a6:bb:f1:e7:de:54:c8:6a:
dc:d1:6c:57:1a:1a:4e:50:bf:f8:fb:8e:28:d9:53:
1b:d7:ea:a2:6f:ff:95:8c:d0:c3:30:9c:d3:b5:c0:
df:f6:12:f9:39:86:7f:af:74:7b:d3:4e:c6:55:84:
18:cc:02:e0:b3:ee:29:14:3b:68:a6:21:a1:d3:75:
4f:c0:f4:3a:71:28:c2:d3:03:6d:5b:97:f5:51:c4:
8e:bc:24:42:ef:c3:8c:02:2e:9b:8e:96:4b:11:98:
77:1d:0d:df:e8:0e:71:db:17:1a:6c:28:7a:16:ea:
6c:00:19:a8:ca:a9:7e:e7:99:09:13:ab:af:26:fb:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3A:B3:A6:5E:DB:FA:C9:32:EF:6B:8E:B5:FE:54:2E:BD:B1:08:FB
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6c:c7:1b:78:18:74:fa:d1:90:d3:94:cc:54:17:f8:4e:c3:
4d:2f:cd:a6:99:78:16:7e:32:b7:77:53:72:8d:4d:63:fa:64:
ba:be:82:2d:74:2e:69:37:13:74:17:90:56:85:68:e6:7c:9a:
f4:1e:2a:12:96:21:5a:46:3d:b1:aa:de:b5:ae:b7:ed:28:aa:
54:b4:a2:cc:61:96:f9:a3:35:da:87:5b:22:49:38:c1:0b:bc:
e2:9a:c1:11:26:48:4d:2f:0f:cf:ba:4a:8f:78:ea:b7:44:8d:
4d:55:d2:d6:ec:c6:79:1d:5a:70:00:3f:de:13:a1:10:eb:f9:
75:c2:ec:ae:95:77:c7:df:0d:2c:d8:08:9b:0f:78:9f:0e:68:
29:ce:09:43:ff:97:80:6f:24:56:d8:fc:8c:f4:a4:01:77:7c:
96:99:1e:73:0f:e8:d5:3a:55:40:e7:cf:40:4e:a5:c4:39:75:
35:fb:4b:86:75:2a:3a:0e:13:ec:7d:c2:c6:b7:e4:cf:51:1a:
f8:6d:e1:6d:7e:8b:dd:77:51:da:cc:d9:26:54:56:d3:f1:8e:
20:23:69:d8:52:31:29:1a:b4:8d:4c:e8:99:25:66:d1:d5:06:
6c:a9:0e:e5:97:f7:b2:4e:22:6e:53:9a:03:0d:be:4d:47:30:
8c:ad:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:02 2025 by rpki-client