Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier: maOHYJPq522ALUNlJYgqvABm4I03IcNTB5A+0ZDCtQE=
Subject key identifier: 44:E5:B1:42:3B:71:95:D8:05:B3:8F:F0:96:20:43:88:6E:B0:F1:69
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 0199FCC63163C7518712785688685292F4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number: 03D3
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: FXp8fQ6gh8oelASFQ2BfVeHiv6Y.roa (hash: JfDcJIX809/8XwYFjwqEGsiF/3/D+Oif9zz1ms1Fn7c=)
2: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: Xeka9kAZ6RiSsiEu1ySx1OSK6GwW350c12eehUaeghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:31:63:c7:51:87:12:78:56:88:68:52:92:f4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=44e5b1423b7195d805b38ff0962043886eb0f169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:7b:a2:bf:c6:48:b0:2f:de:99:fc:11:fa:
9a:2f:bd:37:1b:22:4f:00:fe:0e:53:b7:96:a3:f1:
46:de:19:77:be:6a:5f:cd:43:8c:e4:67:5f:4c:9e:
9c:04:03:7e:77:a3:ee:47:b8:f6:df:d6:2b:95:38:
1d:21:29:b1:4b:83:ad:20:f2:d3:8f:de:5a:6e:7a:
2b:1b:9f:95:0a:7b:72:64:df:77:58:be:71:81:f7:
19:13:8c:a0:08:29:20:9d:81:e3:50:ac:d5:c3:3c:
1e:dc:de:9c:61:be:17:8e:74:10:46:f6:a3:7d:69:
2c:6f:97:85:32:5f:8f:50:e3:21:6b:a4:27:a3:37:
d3:28:a5:3a:64:8d:b2:82:34:dd:71:f5:4e:b6:07:
f5:ac:f0:ac:52:88:ea:e4:13:88:21:f1:39:d5:c1:
7e:59:7e:8a:57:e0:06:13:bb:85:50:f6:0b:6c:91:
e2:8b:37:54:e2:31:6f:a1:6c:6e:a9:5b:52:56:a6:
2b:89:b0:80:30:40:d3:8b:5e:9a:58:9d:9d:1f:71:
58:a0:b7:3c:40:29:a1:27:2d:ab:5b:ac:3b:ee:87:
c7:02:c3:13:60:ba:ad:87:8e:c0:15:eb:02:34:91:
dc:c3:09:7b:68:00:b6:4b:ed:e8:40:e4:58:92:98:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E5:B1:42:3B:71:95:D8:05:B3:8F:F0:96:20:43:88:6E:B0:F1:69
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:dd:8c:6d:2c:df:e0:8b:cc:2d:64:79:54:a2:77:cd:29:
4f:34:66:ec:bf:74:2c:c8:06:1d:91:88:93:41:40:d4:e5:87:
80:b5:2c:e1:f8:f1:b3:15:4c:c6:ef:c2:d0:43:93:b2:a0:ab:
0f:3a:43:c7:43:c3:77:d4:af:2e:74:65:e2:d1:48:72:e4:7f:
7b:a9:45:47:34:ce:2f:56:f2:00:71:3b:15:13:41:b7:66:6e:
55:67:a3:60:02:ae:57:b0:32:94:0e:e6:c5:60:7b:60:5e:d9:
cf:c2:ac:7b:bb:7f:5f:86:9d:c3:6e:eb:2f:51:31:6d:e8:c0:
5a:e8:96:01:93:e8:2b:93:ca:c7:cf:f7:ef:0e:e3:8c:8d:68:
a8:35:dd:92:9d:9a:4e:b6:cc:a8:ae:aa:3e:03:38:6f:7b:e3:
c6:ce:e6:4b:b2:9a:b0:b5:94:d1:34:ef:ad:3d:57:cb:d1:e7:
a6:22:ff:b9:d5:f7:d4:ab:f0:64:f8:ec:5f:9c:74:a7:49:f2:
09:a1:2f:a1:6b:4d:f0:06:23:93:b2:64:13:e8:a7:a9:32:db:
ee:77:b6:5a:72:13:6b:46:3f:1c:77:27:dd:59:8f:06:94:84:
39:6c:62:81:95:56:94:ac:dd:6d:3a:a8:0d:80:b3:e5:18:67:
eb:8d:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:56 2025 by rpki-client