Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: Y5cYKfnbpwqTv0z8QxOTsia499XOgt388ICm7OF8ppc=
Subject key identifier: E3:88:1D:85:55:B8:9A:5A:B5:C1:E9:DB:89:E8:45:2D:DB:B1:04:7D
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 0199FE7E273CEF21F2722B11896B35494DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 0FA5
Signing time: Sun 19 Oct 2025 22:01:44 +0000
Manifest this update: Sun 19 Oct 2025 22:01:44 +0000
Manifest next update: Mon 20 Oct 2025 22:01:44 +0000
Files and hashes: 1: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (hash: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=)
2: alnV74vFSam3rQx6Dmd1DNDuigc.roa (hash: MKKETCkbJ8gLUuVxMB/kJlGwLoMwUcWOoOci82/CtNA=)
3: dMb0PjxW_FKRnnqCOxhUGiKYQfU.roa (hash: SEn9C8PYQsCWBmkbIckjpQRAnohpBTNoR7109sqhxa8=)
4: l5fucFsRI8YqdsxQQ1gM3icDFgY.roa (hash: F8cwyE/KovnNrO6uesrwG6iPrTntm+Jn5JO1juTZFLQ=)
5: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: b5k8sLws5LDEjZTsXMsom+O52yQN2lSjAkACCtO5zog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:27:3c:ef:21:f2:72:2b:11:89:6b:35:49:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Oct 19 22:01:44 2025 GMT
Not After : Oct 20 22:01:44 2025 GMT
Subject: CN=e3881d8555b89a5ab5c1e9db89e8452ddbb1047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:b2:33:a7:dc:36:80:01:13:b1:95:e1:30:
c4:d9:99:3a:2a:a1:3e:25:6e:2b:6b:09:9a:a7:54:
b0:ad:da:56:cf:1d:e9:b9:f0:fd:7c:d2:c5:97:02:
ed:4d:84:b0:77:b1:8e:59:5e:ba:93:30:41:43:c9:
7d:06:41:1a:61:92:f1:e3:7a:41:aa:b0:3f:fa:75:
8a:d9:9c:84:70:a6:79:80:22:ea:f3:24:d9:9f:98:
8f:8f:6d:70:ee:53:a3:db:5a:17:41:cf:96:f3:6c:
0a:af:24:16:44:d3:d3:e8:52:6d:1f:fa:f8:8b:07:
d5:03:1c:c7:47:53:6b:9d:53:e7:0a:d2:a5:87:3f:
9b:9c:53:9e:83:6c:bd:98:9a:65:bb:3c:82:d2:19:
29:7c:02:30:89:6f:21:9d:c8:b5:76:07:53:e5:60:
df:70:41:d1:09:19:a5:5b:c3:c2:af:7d:b7:a6:d9:
d1:67:8a:30:41:40:58:7e:47:cc:da:97:83:44:40:
8f:5f:45:53:5f:0c:4d:8c:82:f7:db:02:04:c0:5d:
0c:c8:39:7b:24:11:32:80:89:df:4a:95:52:eb:34:
22:82:76:c9:67:b5:aa:b8:bf:78:a4:ef:ff:e6:7a:
e0:25:24:99:05:2f:71:7a:e7:65:ff:a9:f5:df:fc:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:1D:85:55:B8:9A:5A:B5:C1:E9:DB:89:E8:45:2D:DB:B1:04:7D
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2d:9a:cb:ff:fe:b6:a0:df:22:26:ba:5c:18:6f:13:0d:7d:
a1:b5:04:07:9c:47:96:1c:37:51:64:55:3e:77:25:77:69:ae:
81:c9:e1:97:e8:4a:83:34:39:92:75:73:bf:a7:79:dd:c9:d8:
b5:3c:ba:a8:7b:86:e1:78:49:04:a7:5e:ff:d0:8e:e4:b5:1f:
8a:2f:4a:b3:4b:01:1a:93:80:05:7f:79:af:f1:d9:d7:9b:cc:
53:61:b8:0d:34:63:f2:9a:36:2a:4f:50:c4:5f:ac:06:eb:e5:
c7:ec:e7:12:34:3c:1f:02:00:bb:8b:07:be:2d:26:eb:e3:73:
ca:6f:f1:04:16:58:5f:04:53:0f:96:87:56:76:92:45:68:ad:
51:66:c3:c9:d4:08:ad:13:85:c7:e6:f1:c5:2c:fe:4f:23:a8:
00:73:b7:9f:77:10:83:4e:8c:61:f2:ad:0d:e0:46:3f:23:25:
2f:69:57:87:64:90:34:68:91:74:b3:3c:60:29:c4:3a:75:9b:
93:80:29:30:c4:ea:16:7b:1c:74:72:c8:d6:36:2d:fc:2c:6b:
4c:f7:5c:47:c1:ef:de:3b:f0:ae:e6:7b:bb:14:39:d2:7e:84:
c0:7d:0f:ce:3e:fe:8a:3a:ea:f6:b4:46:0c:3b:80:d6:ba:99:
4c:17:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:22 2025 by rpki-client