Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: l+dZs9tmFILi9jiTuB0Qyr4zQydG3rfoZ59MVojMNE8=
Subject key identifier: DF:2F:C9:F1:A7:7B:F8:1E:4D:2A:9F:AC:83:B5:4B:32:A5:65:FD:C1
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 0199FCC612690BBACBF1294ABD57C264FAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: YZGMIvadW2xPxhoSXpNJb8SDWu8.roa (hash: jQfGmlQO1sTVXZe+wmgboQPBpNBgVW+6jbuLSLsW9ZU=)
2: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: 3hMjCPkF2lQcDICFqWYiFZD/B652y0+4CloOc4vlRLo=)
3: rtetBP97DUA2lCqt3_qex3wy1cw.roa (hash: wIFAeHjq7EkgeOiBpciajSkZ9QKt8Kq/92+zr7+OjbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:12:69:0b:ba:cb:f1:29:4a:bd:57:c2:64:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=df2fc9f1a77bf81e4d2a9fac83b54b32a565fdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:d0:21:99:12:f4:fe:a7:6c:ab:d8:9d:8e:
38:22:2d:59:67:af:50:a3:06:93:c4:2e:b2:d8:aa:
ee:88:15:85:4a:d3:db:68:6d:e5:fa:4c:6c:3f:f8:
e1:80:27:4e:b8:f1:ec:2c:5e:46:91:35:60:ba:8e:
8d:20:8c:48:b5:a8:e6:7c:b8:c5:b9:cc:98:d0:e2:
e3:43:51:02:1c:5d:2b:38:e4:db:8c:aa:cd:1b:02:
a9:88:a8:e7:27:40:6e:51:0b:f3:19:f3:cc:e1:b2:
b2:c2:01:d7:d0:0a:40:62:60:f8:f5:91:d6:c6:d3:
ad:a7:2f:37:98:d2:cd:93:a5:c8:9a:b0:6a:a4:c2:
f5:65:e6:58:16:7e:c5:96:90:14:03:36:d3:4a:0e:
c0:19:43:f9:bd:f8:12:d1:df:e4:6e:d0:b7:de:13:
87:ef:62:30:78:e0:09:1a:ad:f5:42:35:0e:bc:de:
d4:42:a2:f8:4f:9f:08:ee:6c:db:cb:cf:c7:ed:d8:
1c:75:fb:0d:ef:53:ee:73:f0:3b:12:aa:fb:7c:84:
d4:cf:09:61:59:97:9a:99:b7:cd:b0:aa:7a:51:54:
29:ec:5f:a9:0e:d0:61:cb:48:9e:7c:d9:b7:23:d2:
14:5f:93:84:47:72:72:a9:37:9a:e4:b5:9e:fa:08:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:C9:F1:A7:7B:F8:1E:4D:2A:9F:AC:83:B5:4B:32:A5:65:FD:C1
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a2:ab:c4:dd:11:48:55:82:da:83:9a:f7:2f:c7:d3:3a:f6:
89:65:2d:61:b1:12:61:7a:9c:e8:cd:90:34:29:47:15:5c:f8:
68:9c:66:9e:64:32:13:c9:ba:fd:96:8f:0d:12:63:92:ba:2a:
e5:1e:38:62:47:58:21:d1:2a:1d:88:4b:40:63:bc:e8:83:1e:
f8:bf:f2:5f:84:8b:80:ea:86:e2:c4:a9:9f:ea:b8:a1:f2:0e:
f4:03:b2:95:8e:91:d1:09:65:87:3d:37:fa:a4:ad:74:01:c9:
b1:6d:6b:bb:0d:f3:23:a1:e4:e9:da:6e:df:92:65:4b:f2:b8:
20:7d:d5:38:9c:b5:41:92:d0:cb:be:63:c8:3e:9b:d1:34:30:
0b:d7:31:bd:2b:65:b1:58:73:90:53:13:5d:59:b6:4b:5b:c7:
4c:82:1c:ec:3c:5f:41:be:55:41:ae:c8:4d:b7:0a:0d:88:b9:
f5:1f:ef:62:38:73:90:bd:69:a1:47:d2:64:e9:b3:95:26:49:
f4:64:d4:0a:8c:04:41:65:71:1a:51:e3:19:a3:6e:81:21:34:
87:4c:ad:20:3a:66:4e:b9:e1:b9:9e:d5:d6:34:7d:c6:35:58:
69:6f:0f:59:a1:ae:8e:20:e1:b1:2f:91:60:0a:04:ca:45:5b:
e2:7f:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:06 2025 by rpki-client