Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: jqJxYyK9/XsR7fitKnNcnFIukGf9OxgOcFpHXqLbHUQ=
Subject key identifier: DD:1B:18:A2:6E:8F:DE:65:5B:27:B0:1C:DA:31:C7:54:A9:26:6E:4B
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 0199FCC69CDE0EE51C0B8BE90D3BEE5A8869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 118B
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: FMG36HBqRtUqt7COIUG1QrrrsQw.roa (hash: +rIibyVY3fY3kT8o9SPGAfNUmFMRWDiLA0uoH2crZuE=)
2: Lvq4EYAEnD7iSP_yLHhiYfgSFsI.roa (hash: OuBem9w/c6wr2MmfA4/euItVJTNd4ynaKBvDB6V5Dg0=)
3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: uuWn6trNFPln9tG7h3hpsC6d7P2VKhiOvS1z/MIXCG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9c:de:0e:e5:1c:0b:8b:e9:0d:3b:ee:5a:88:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=dd1b18a26e8fde655b27b01cda31c754a9266e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:a4:99:07:0e:a9:dd:f8:c2:9c:13:26:09:
2b:98:ac:0e:43:84:58:2d:22:80:27:f1:49:e7:d6:
54:38:f5:8f:eb:8b:2f:da:c5:3a:47:e6:bc:eb:25:
ac:bd:99:37:eb:5e:b7:da:e7:47:7e:42:a7:32:9e:
d6:11:0e:65:12:13:26:05:61:c3:38:73:df:f7:c1:
bc:6c:c9:3e:bf:37:3c:5b:2f:16:e7:65:ea:78:66:
b0:4e:3d:36:aa:a0:c2:29:86:8d:1b:ae:41:24:9a:
63:ce:5a:ae:64:94:f2:99:56:dd:e5:9b:5c:85:09:
8b:bd:c8:4f:7b:0d:cc:07:16:f8:cf:13:d5:f8:0e:
d9:00:61:75:a8:15:dc:a3:f2:50:80:cd:94:be:bb:
45:3e:eb:63:9b:9c:e9:ad:57:f6:af:0c:04:59:4d:
5a:52:65:4f:77:5a:12:de:b9:73:25:4c:d8:5c:fb:
2a:1b:b6:8f:1e:c5:06:9e:45:84:23:8e:42:74:b5:
08:7d:de:ff:f3:61:41:e7:00:ba:19:0b:63:b1:5a:
c6:f7:b3:59:a2:2a:52:92:ce:45:d7:b8:9c:3f:c7:
fe:e7:1e:25:15:a2:32:9c:7d:42:40:08:79:e7:65:
16:8b:9b:7d:b3:bb:7a:05:8a:7d:a1:66:12:9b:cf:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1B:18:A2:6E:8F:DE:65:5B:27:B0:1C:DA:31:C7:54:A9:26:6E:4B
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:1a:17:af:aa:98:7e:7e:cd:84:be:25:8b:65:fe:d2:03:
ae:eb:b2:64:e5:56:f4:03:75:32:dd:87:80:6f:55:35:02:e1:
23:73:f4:8b:14:40:fd:76:57:e6:9b:bb:82:84:a9:cf:65:3d:
fd:c9:54:3a:49:b2:15:12:ba:5e:58:22:5c:db:14:ac:47:3e:
26:a5:b9:af:ae:30:5b:43:99:53:53:5d:98:db:8a:73:62:56:
e9:46:a3:9b:58:a5:bd:81:43:1a:b6:3b:96:fb:4c:56:57:7d:
0e:4a:6d:20:76:4d:c4:45:fc:9d:73:ba:af:7f:f3:73:0e:50:
2e:8a:62:c6:53:8f:c2:61:41:d1:29:f2:c8:d5:10:c8:cb:68:
59:3c:4f:5f:ae:71:71:80:5b:61:1d:a0:c3:4e:72:95:3f:43:
9c:5b:1b:8b:e7:10:fe:cb:bf:b4:37:81:9e:94:76:3c:58:f2:
2d:5a:ec:af:b1:4b:8b:54:ca:eb:ca:0c:0f:cd:7e:3e:91:56:
ee:15:7a:96:51:b0:9c:4c:2a:e1:84:c5:9e:db:7c:88:39:e3:
f4:5b:d8:35:fe:31:db:ee:32:01:ac:d1:b3:af:c8:63:4f:ff:
f6:65:04:8e:5c:de:03:c1:d8:50:cf:af:6b:41:fe:48:a4:48:
aa:34:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:46 2025 by rpki-client