Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: zyNI4MRNij7faYmmh3dUZH2I+XNk1Q7+Jx0iqhjmRcA=
Subject key identifier: 89:9C:EB:68:37:89:93:CC:93:72:58:32:41:71:6F:12:3E:F0:21:B0
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 0199FC219EAA761F7D4B787A1B6208BF265D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=)
2: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: FVSE3w6DxsNQH5N+InpyL7H6gohzQAcOcvOgYIq97Bs=)
3: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9e:aa:76:1f:7d:4b:78:7a:1b:62:08:bf:26:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=899ceb68378993cc9372583241716f123ef021b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:48:07:5b:e0:13:da:96:45:38:86:e2:ff:
a1:da:35:32:75:4f:fd:7e:37:35:2c:16:6d:ac:76:
ce:8b:a5:41:53:03:94:f6:f3:e3:eb:29:a2:b4:1a:
f6:97:7e:20:de:69:cd:be:68:e2:83:ed:75:c3:11:
03:2f:ab:46:32:f5:7a:ea:fb:80:9e:21:4f:cf:69:
df:58:84:fa:80:ec:0d:59:e3:22:9e:68:89:f6:af:
34:97:60:80:21:a9:ca:64:ec:d8:d6:60:05:c8:56:
fb:f8:c8:de:b1:57:2c:89:32:e1:cb:9c:5b:23:0f:
d5:1f:08:b5:55:58:b4:d0:68:30:31:c9:cd:3a:d2:
68:44:62:7e:0d:fe:a6:95:39:cf:e1:6c:45:84:d7:
3f:90:c6:d6:5a:f3:a8:a5:20:4d:e0:a1:60:7c:91:
49:a6:fb:73:87:5c:d6:93:6a:2f:9e:d2:82:d3:28:
68:ce:da:0d:1f:62:a0:83:6a:55:df:44:87:1e:9c:
10:16:12:ff:e0:e0:41:63:2a:ce:93:9a:d3:e7:a8:
a0:30:b3:d5:5e:6a:01:3b:b3:3c:f7:9e:62:45:b4:
63:c2:b4:45:f7:be:d5:37:38:3b:b4:56:49:b1:95:
39:62:a9:68:74:2a:79:f9:da:ac:07:71:ae:20:c4:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:EB:68:37:89:93:CC:93:72:58:32:41:71:6F:12:3E:F0:21:B0
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2f:fa:6d:44:b1:35:e1:99:39:9c:2d:70:e5:53:4e:07:14:
96:f2:4d:a3:0c:f9:9a:06:6f:fd:78:0d:4d:84:97:f6:f9:68:
67:c8:16:2d:35:fc:38:55:e1:05:04:77:31:a1:b6:97:e5:5a:
99:9e:ab:fa:46:31:4e:c2:af:ad:6e:c7:f6:6b:e2:40:ff:fd:
21:a1:d3:6b:52:06:81:54:45:12:3d:2e:6b:c3:98:54:4d:53:
95:bf:bc:c6:4b:92:41:32:a9:6f:ff:e6:a8:fd:a8:c9:24:55:
40:f7:3b:02:ff:e5:b1:60:eb:4e:8c:8c:28:0d:2f:a8:fc:b5:
20:1d:88:b7:51:62:b4:c5:d2:30:ad:28:ea:93:cb:8c:9a:07:
b7:5c:bd:63:0b:b2:4c:d6:ac:c0:a1:6f:a4:70:d3:2b:16:67:
cb:0f:21:d6:e8:16:fa:2b:93:61:fd:ce:8c:f5:0c:a3:4a:d5:
2a:c2:c6:87:c2:23:ff:4d:84:1f:ae:23:7c:59:2f:f2:2a:ff:
a0:f1:e6:1e:2f:de:4a:17:69:c6:ce:aa:d9:71:6b:67:25:3d:
10:20:f7:e2:99:87:42:65:1b:41:73:66:1f:74:a9:95:0b:16:
ac:95:81:0e:ed:46:ce:8b:d7:b0:22:1d:cd:82:92:2e:b0:8e:
fa:aa:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:59 2025 by rpki-client