Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: 55Dqj/vXUna6IJWalqtHCbFAWilYetfxyrTuGw06EDg=
Subject key identifier: AE:C5:43:65:C4:D7:14:E9:98:33:3F:C6:C2:7C:08:31:32:7D:6B:07
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 0199FC219869F598D9BC894C82EE30B67EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: L3pIDgMx+l819hjYcdWnfVmRjwNP6QAwUUaETjbgCIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:98:69:f5:98:d9:bc:89:4c:82:ee:30:b6:7e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=aec54365c4d714e998333fc6c27c0831327d6b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d8:d2:7a:a1:dc:99:5a:57:84:02:fd:19:c6:
16:55:4e:05:9a:80:f1:8f:32:a6:35:c1:82:05:d7:
52:84:c7:78:e1:1e:d1:d8:93:a7:e4:af:cf:5c:ae:
a2:de:f4:b6:16:ce:7b:e0:ce:75:26:8a:43:dd:e2:
fe:cd:15:10:63:70:90:31:0f:c3:31:65:8a:01:e5:
86:31:fc:a2:b3:75:8b:75:af:f3:f8:a7:34:3b:ca:
0c:ef:b0:1b:d1:db:4d:d2:bc:2b:25:00:0d:19:59:
f8:25:ad:53:bc:a4:13:ad:00:f2:51:2a:5b:dc:65:
12:ee:d6:16:13:bb:16:42:f9:ff:2e:42:9c:68:82:
e6:59:8b:a8:0c:55:a3:f7:ed:af:96:d3:11:85:80:
95:ce:f2:3e:df:c6:95:0e:a7:9b:a4:ed:6d:47:39:
77:79:c3:5b:81:99:db:37:f9:81:33:88:72:44:32:
db:94:76:fe:5a:bd:93:8d:c6:92:09:f4:50:c4:cb:
92:d3:f0:b9:83:fd:5b:08:56:97:85:39:94:12:32:
8a:a5:de:b8:1f:3c:fd:54:29:85:68:2b:9a:fd:b9:
9b:92:2e:15:33:40:22:a2:8b:40:a7:74:a9:71:98:
0b:1a:52:33:ae:17:33:d3:92:9b:4a:b1:6b:d8:14:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C5:43:65:C4:D7:14:E9:98:33:3F:C6:C2:7C:08:31:32:7D:6B:07
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3f:f3:89:5f:05:25:69:34:31:0b:5b:96:5c:37:9a:11:45:
8a:73:59:64:d5:cc:29:0c:42:8a:b2:18:65:57:f6:87:c9:a3:
b4:15:d5:40:2c:26:36:a7:0f:27:e2:6b:96:95:85:45:c1:46:
32:c2:65:b4:b4:f2:47:7a:42:53:fa:10:5b:ae:30:cf:21:8c:
60:ab:50:f0:ba:91:40:0c:15:38:dc:89:f4:3d:1e:fa:11:53:
d3:60:b1:6c:4e:fa:4a:60:97:c6:fb:02:68:db:13:13:bb:34:
bc:75:32:34:fe:c8:48:2b:e2:86:d7:22:ce:f9:fe:a7:32:ec:
3f:51:1d:45:c4:2e:87:7b:85:23:ac:d4:83:29:fd:9c:19:6a:
63:27:9e:92:65:26:6a:f3:f9:36:07:c5:29:93:1b:3e:de:96:
1e:42:34:3d:d2:ff:db:8b:aa:d4:01:27:9c:d6:26:30:27:f6:
3f:db:8c:79:6c:96:e4:fb:53:27:69:08:b3:09:2c:06:a3:29:
9c:22:e9:5b:c1:2d:99:b6:36:53:81:7e:27:e7:69:5d:6e:78:
21:28:f4:05:70:c0:0e:79:78:34:9d:84:0d:18:39:70:e6:53:
e3:82:91:f5:8d:1b:34:d3:c7:9c:8a:57:87:9a:1c:84:16:32:
ef:62:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:54 2025 by rpki-client