Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: ojRBwSts1jXwmLsE37zV7Zd7IxnuZRnZ0TOcjOK7ZzA=
Subject key identifier: 68:B7:BD:70:6A:82:E6:C3:CD:6E:B0:00:73:AF:53:9C:86:08:D3:A5
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 0199FCC659494E9BF6C7D30DF15F8EA804BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: MkskzmnF17e+BePoUNEUEcx+/SVRufiEoPiLgXXdrlA=)
2: HsfAzbYNmjHgKTyTKE1e6DTdYBY.roa (hash: ThTbeLEhcdYcKNF2Qx27UbTWjSeMoDCUTIRvHXWnfiI=)
3: MamPa9eWXXv16Pq_PQPhm2jANdQ.roa (hash: /Xj0uh4hP5hzI09A/uvBTgwPodoBTxb8R7Jv7s78qJA=)
4: b2D7vVU4AWvUD_Ad1lqkP8q1DJY.roa (hash: nc5y91A1zU+LW1Tb8aDxs1rxMTCVcHcXyy5NeNxfhCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:59:49:4e:9b:f6:c7:d3:0d:f1:5f:8e:a8:04:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=68b7bd706a82e6c3cd6eb00073af539c8608d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:87:94:ab:1b:f7:2c:d1:f0:bb:41:af:4c:
80:b4:97:da:0d:26:ba:a2:80:7f:f3:5a:f0:64:47:
d2:90:1c:5a:a3:26:32:41:7c:e9:03:df:17:7b:4f:
06:e5:15:02:95:8f:0a:96:61:8e:e7:0f:57:2b:f0:
10:6b:ce:75:57:97:cd:74:17:e0:c3:69:56:17:9c:
33:35:8f:c0:20:f3:77:06:01:18:5e:1d:00:70:fd:
fc:c3:93:99:3e:ad:f3:05:39:5e:10:03:90:00:0f:
12:6b:83:77:03:a9:66:3c:09:47:62:24:b1:8b:56:
b4:51:9c:4c:c0:6c:90:55:02:20:63:38:4c:00:dc:
43:29:cb:58:b0:75:55:eb:5b:f4:0e:d3:f2:39:c3:
af:d8:cb:de:d0:63:8f:30:1a:c7:01:bf:03:ea:46:
19:6d:3d:c7:d5:9e:b0:56:f6:cb:cb:db:3e:24:f5:
26:ae:ce:48:71:57:65:26:9a:37:fb:37:f1:9c:90:
64:01:3d:4d:a4:44:f5:bf:05:00:80:90:7b:53:39:
4b:07:f4:57:32:16:71:ef:fb:88:ba:6a:97:64:e8:
84:51:18:d6:ff:60:5b:87:34:e4:cb:9a:50:d1:37:
06:e7:eb:09:ad:a4:13:be:1b:f6:bc:19:f1:56:db:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:BD:70:6A:82:E6:C3:CD:6E:B0:00:73:AF:53:9C:86:08:D3:A5
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b3:3d:94:10:c6:a2:64:9b:6b:23:a8:eb:bb:94:79:1e:1e:
cc:e5:74:64:29:b2:05:3e:ab:48:dc:73:2d:35:a8:34:02:9c:
a9:36:3d:30:65:38:b5:6a:15:99:31:fb:dd:30:4f:b3:f4:6b:
4f:04:ce:44:36:f1:02:f1:4f:ef:5a:99:98:19:07:db:0f:df:
18:c8:ee:91:9a:ef:86:0d:f2:7d:b3:28:25:71:ef:bf:72:17:
be:a9:89:f9:df:e5:b7:cf:d7:b9:07:3f:5a:5b:7e:78:82:37:
ec:81:65:ec:21:b8:4d:7d:f2:6e:1c:9d:9f:36:e4:b9:0d:00:
83:92:97:7d:6d:50:8f:ea:72:e2:25:15:15:06:49:31:76:a7:
dc:0e:e3:f7:14:de:c5:76:b9:10:68:f7:63:a5:97:ae:ee:1d:
f7:98:18:b6:01:76:26:2c:db:89:de:61:c3:05:6e:6c:ff:a8:
ea:26:54:01:b5:03:5a:a7:4f:85:76:fd:55:93:2f:c3:b3:0f:
6b:07:c9:89:71:44:50:1e:54:2f:f5:0e:2b:63:b6:9d:5d:2f:
37:2b:c8:b8:25:cd:1a:bc:74:f9:09:b0:8f:c8:c4:bb:0e:28:
0e:8b:f5:72:5d:2d:6b:a1:d3:93:df:fd:6d:14:63:d2:6b:f8:
58:c0:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:47 2025 by rpki-client