Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: P9vMU3UyFav5oFtJ8+SOfPPG2poPiiFVXnKVVr2oVrA=
Subject key identifier: EC:5F:F2:8D:FF:B3:67:AF:2B:C2:4D:26:66:F2:80:C6:6A:CA:2C:02
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 0199FCFD20ADA1AE9AF05658246B4F5FFFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 1061
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: DDWPQK2ODmGtDGFsx5R6qdu6DJH98qZAqck4JHd3tBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:20:ad:a1:ae:9a:f0:56:58:24:6b:4f:5f:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=ec5ff28dffb367af2bc24d2666f280c66aca2c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:dc:a2:0e:3a:c7:68:b0:3f:b5:87:b2:fa:
da:47:79:c6:81:38:3a:a8:85:c4:5e:ee:ba:92:9b:
d8:2f:f2:b6:ac:33:be:de:cd:66:0e:19:61:a2:4c:
0d:c0:b3:a0:a0:46:51:88:a2:5a:c9:ad:b8:40:a5:
38:e3:11:63:e2:2f:87:1e:fa:77:39:aa:d7:8c:87:
b5:83:e0:81:95:a0:b1:6b:3f:b8:8c:0b:de:4e:9e:
fd:7e:b1:ce:8e:99:0f:73:7f:a8:b5:0d:22:04:53:
fc:70:ca:1d:bd:cc:b0:8f:f1:dd:38:7b:78:87:32:
a1:ce:4a:a6:3f:92:73:0a:e1:dc:c8:7c:61:6d:f5:
94:a1:9d:d0:23:00:e7:34:0a:10:45:92:90:7c:c0:
36:1e:28:b6:4d:ec:2b:e9:59:b1:bb:51:3d:c6:dc:
de:3d:df:5e:fa:ce:23:7d:6c:1e:a2:ee:9d:28:30:
40:e9:7c:f0:24:cd:23:76:f8:76:02:11:15:f8:a1:
88:b8:b9:4d:25:cd:f8:fb:1b:94:3e:c3:68:4c:fe:
3b:37:e7:6c:9e:7c:a9:75:4f:f0:be:4d:46:98:bc:
a5:34:3a:62:3e:ad:03:aa:b8:02:b6:3f:e8:f5:5f:
af:df:59:b4:a5:65:b3:8c:d4:cd:04:0e:81:de:14:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5F:F2:8D:FF:B3:67:AF:2B:C2:4D:26:66:F2:80:C6:6A:CA:2C:02
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:76:4a:ad:76:56:79:e9:b8:45:ca:ba:94:98:2b:2a:58:e1:
ce:14:fd:98:9d:a1:f0:ee:e6:05:97:75:fd:ff:73:be:0e:d6:
ac:e4:12:8e:3e:cf:fa:b1:63:2e:06:9a:1c:0e:9b:8e:5f:b3:
e3:43:cb:aa:69:17:c7:5d:e3:20:be:f3:11:a0:3b:a8:16:ed:
3d:20:52:09:25:b8:1e:b4:35:1b:47:7d:ba:5a:0f:a7:e5:11:
84:44:cc:e6:8f:d0:c4:b9:f4:08:b0:ac:ff:f9:4d:8b:62:6e:
a3:16:f0:95:90:e8:bf:f5:8c:79:63:58:a8:d5:c9:fe:8b:e7:
33:d2:2d:67:5d:2a:8f:7e:58:8c:72:3b:ec:ab:f9:ab:ab:c0:
b2:87:6d:5d:12:2d:6b:c5:a1:14:26:81:d2:9a:7f:fb:7b:1d:
bc:5d:9d:4d:9f:d1:cc:b8:08:87:11:77:c4:f8:75:cd:a5:f8:
35:f8:44:36:dd:67:d2:b6:6f:5d:82:b6:a6:24:8a:78:23:fa:
50:3e:7f:94:e8:dc:ce:a5:b2:fb:3d:e8:86:0a:07:bb:69:c3:
f9:67:b0:cb:59:fd:1f:fd:ee:b4:ab:44:8f:97:99:48:55:48:
e0:ed:92:03:43:30:77:23:c9:cf:55:fc:ea:a7:c7:77:39:4d:
b4:64:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:45 2025 by rpki-client