Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: Hlt5hhw7dj392oRia8qy0yvcDqA7nCzu+Urln0sGT1A=
Subject key identifier: 1F:BA:3E:0C:18:C6:FA:68:0F:3F:28:E6:DE:35:93:EB:0F:AA:89:02
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 0199FAD82E8153085100FA0327FFDCD89AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 050E
Signing time: Sun 19 Oct 2025 05:01:35 +0000
Manifest this update: Sun 19 Oct 2025 05:01:35 +0000
Manifest next update: Mon 20 Oct 2025 05:01:35 +0000
Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: rIZwiJhoEa0BkiU9AUET1rcclFgaMmWzH2Zw25GR7U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:2e:81:53:08:51:00:fa:03:27:ff:dc:d8:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Oct 19 05:01:35 2025 GMT
Not After : Oct 20 05:01:35 2025 GMT
Subject: CN=1fba3e0c18c6fa680f3f28e6de3593eb0faa8902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:e3:13:29:b3:01:e7:22:ac:62:8e:20:2c:
ab:5d:2f:ff:ec:25:41:c8:b1:68:e3:28:21:13:cd:
c0:af:a9:5a:67:1a:53:4c:8f:d8:90:61:b3:62:c6:
85:0b:df:b8:6e:3c:91:73:19:ee:18:c7:68:55:8e:
8f:c7:fc:74:27:c2:0c:98:4e:a3:6e:bd:ad:92:ce:
6a:15:e7:1a:38:8b:11:74:6a:09:79:50:41:02:65:
79:c7:38:55:b9:7d:4c:59:c5:10:b6:61:31:3d:5c:
13:91:48:d2:11:77:21:0f:6c:6b:35:2e:e9:e7:c6:
98:45:a8:89:76:f2:c6:cb:31:9a:4b:d8:48:5e:17:
52:52:36:94:22:eb:33:bd:c0:cd:05:9f:0e:b5:ba:
10:36:3e:3f:63:7c:14:97:4e:53:1a:4e:a0:63:7b:
66:d4:3f:3b:98:bc:e6:ad:f8:d3:b2:c6:63:eb:c6:
ee:52:64:5a:59:69:86:42:cb:05:0f:32:bc:58:3d:
ad:47:64:13:56:1d:18:51:b8:4c:b1:fe:c4:5d:47:
3e:0b:8d:42:b8:2d:1f:62:0e:a1:d3:47:5a:26:b9:
94:fb:2b:4a:d6:74:de:69:b2:38:26:27:db:f8:9a:
4a:2f:d9:ed:bc:4c:28:81:ff:10:9e:5d:ff:84:46:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:3E:0C:18:C6:FA:68:0F:3F:28:E6:DE:35:93:EB:0F:AA:89:02
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:db:1f:e1:82:26:91:b2:49:bf:90:cb:a3:ea:80:23:1a:96:
5c:44:22:15:aa:e5:fd:40:a3:13:4a:e7:64:f1:4e:52:d6:af:
79:c7:08:d7:f3:92:13:a4:58:51:9d:b9:47:39:50:e8:ce:d8:
6d:6f:04:0b:7e:98:b2:a0:dc:5d:0d:8d:28:84:99:c3:ba:f0:
e7:ef:8a:46:be:7d:33:19:c2:32:81:85:e0:13:01:a7:0b:5b:
92:fb:d4:a1:e6:fc:49:02:2d:b7:00:a8:15:b9:ac:0c:06:87:
4d:eb:24:ce:c5:bc:6e:a6:36:f1:bf:79:c8:f2:94:b2:59:69:
e4:fb:28:41:98:c9:60:23:aa:2d:d9:eb:be:93:bc:83:96:41:
73:28:49:b0:c8:77:6a:cd:df:83:0e:07:b9:56:db:c3:6d:16:
a6:e5:60:cd:0c:7c:6d:ab:2a:c8:cf:e7:a1:9d:88:5e:bf:2a:
8d:ed:47:2e:cb:59:d5:88:a7:cf:dc:6c:69:ec:b9:7c:73:ee:
d5:81:4e:93:3b:12:37:0d:71:81:bc:4a:d7:4d:ca:11:9b:14:
b4:ca:07:99:1e:7a:c1:0e:1c:48:45:55:5e:38:79:a4:56:0e:
89:83:09:9b:74:d5:f8:ba:d3:05:10:cf:5d:56:2c:98:20:30:
8e:96:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:43 2025 by rpki-client