
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: 2QKHM6CUtka1tRf4aTiRlXUJizjPSI37H+67Gr2d990=
Subject key identifier: 92:A2:13:C8:18:27:D5:8C:2C:D3:0E:73:C6:70:F7:10:FC:C2:9B:8E
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 0199FB4599104239CDEE4C58A8342B90CD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:06 +0000
Manifest this update: Sun 19 Oct 2025 07:01:06 +0000
Manifest next update: Mon 20 Oct 2025 07:01:06 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: uPEOinubUpSHgI8Af+EaEVsH9Y63yc5vRylTl009tE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:99:10:42:39:cd:ee:4c:58:a8:34:2b:90:cd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Oct 19 07:01:06 2025 GMT
Not After : Oct 20 07:01:06 2025 GMT
Subject: CN=92a213c81827d58c2cd30e73c670f710fcc29b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:b7:91:82:4f:d5:e6:dd:3d:62:34:bc:fb:
41:36:03:db:67:13:7c:6b:d1:b2:93:a1:8c:8b:b0:
b4:d7:23:f9:58:53:04:a0:c7:ba:d6:da:24:fd:47:
c9:1f:27:69:8c:5e:81:23:66:9c:ef:55:b5:45:b8:
de:35:b0:20:ed:fd:cb:1d:9a:8a:8a:c9:6a:4b:41:
38:d8:a0:1c:49:ec:74:db:43:e2:4d:73:13:5e:44:
82:1a:fb:22:3d:98:2f:be:95:ca:ef:cf:0d:b4:b4:
3f:40:4c:f9:7b:aa:56:98:34:2d:89:39:d4:7c:d9:
2e:9d:1d:ad:56:0e:dc:6d:c9:a4:54:ec:43:89:45:
be:fa:5f:66:48:b8:59:ec:08:2a:1a:cd:17:cd:c8:
1f:bd:09:97:a9:cc:64:a4:0c:6c:4f:27:07:55:59:
ad:4b:e7:ed:31:73:d0:f3:18:12:49:30:4a:5f:3c:
26:39:0c:59:46:22:60:99:94:06:c3:ad:1c:70:e9:
bb:40:69:03:20:c7:16:4e:2f:d9:60:c3:9a:b8:be:
7a:9b:ea:b5:e5:bc:67:07:9a:e1:fa:ed:a9:27:fb:
54:5d:ac:e9:7a:ed:ef:d1:84:e4:d6:bf:79:56:a3:
77:f9:e5:3e:0c:78:f6:c7:11:37:fa:2e:5a:e7:b2:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:13:C8:18:27:D5:8C:2C:D3:0E:73:C6:70:F7:10:FC:C2:9B:8E
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:66:c3:ce:2b:fe:78:b6:b6:57:81:bd:19:66:d0:4b:26:61:
3b:26:fa:32:96:66:94:56:1f:4c:12:48:1a:6d:40:0d:fe:fd:
88:70:ad:26:e2:40:d1:5e:0b:92:c0:36:c6:55:23:b7:4e:70:
6e:0e:03:a5:36:75:e5:c9:80:52:31:be:ab:43:cb:44:ac:6c:
34:22:36:69:99:c3:a7:50:f5:8a:c6:de:1b:dd:5e:c6:93:2e:
fd:fe:46:0b:22:1f:dc:96:ef:6c:92:dc:ec:7a:35:79:16:98:
ed:b8:cd:4b:fd:0c:f4:93:df:c1:32:82:a5:14:fd:74:6a:76:
65:e7:ab:04:ab:e0:5a:71:1f:4d:d5:f7:38:a8:ff:89:b8:42:
f9:8f:50:53:02:ab:d8:8d:e3:9a:7c:a7:2e:91:c4:de:13:01:
8f:ee:eb:37:5b:0f:98:8c:7a:50:b1:de:1d:a6:5f:57:54:d2:
bb:d2:d6:1e:91:b9:5d:52:e6:1e:84:3c:d8:f5:97:41:cb:48:
41:d9:26:c1:6c:df:62:b5:98:18:b6:1b:81:38:21:c4:f7:f2:
b8:cf:42:17:dc:e8:96:f2:1c:8e:28:8d:b4:5a:8d:50:19:4f:
f1:75:8a:6a:98:30:47:bf:c5:d2:03:c9:47:37:20:9f:2b:ac:
07:94:cf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:08 2025 by rpki-client