Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: iMmd1J80jl1qGoDQt/P2PhOiENmPalE/A8NnCNfyccQ=
Subject key identifier: C4:A3:47:6C:B2:67:AB:BA:E2:AB:12:99:9F:4E:CE:2D:1D:DC:53:05
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 0199FDDA71CEF072FD99C43C2D1CD88E3A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:02:55 +0000
Manifest this update: Sun 19 Oct 2025 19:02:55 +0000
Manifest next update: Mon 20 Oct 2025 19:02:55 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: pH+LmsKoOxTTqKIrDowmDgSMOPdmn6nNfgwHA3HHXGk=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:71:ce:f0:72:fd:99:c4:3c:2d:1c:d8:8e:3a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Oct 19 19:02:55 2025 GMT
Not After : Oct 20 19:02:55 2025 GMT
Subject: CN=c4a3476cb267abbae2ab12999f4ece2d1ddc5305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:d2:e6:dc:0a:8b:5b:8b:1f:bc:d8:c5:d9:
aa:19:99:44:e1:dd:55:42:3e:76:d8:85:2a:4b:78:
85:9d:a7:c6:31:5f:4c:64:56:c9:4d:af:14:2e:25:
da:50:83:48:20:e0:30:48:95:7c:31:5c:0f:3f:71:
c5:5b:18:91:46:77:81:db:76:fa:a6:c1:9e:53:dc:
6f:00:7a:63:34:cd:4d:c7:91:ab:64:73:13:3e:6b:
8f:4a:66:8e:4a:18:0c:87:c3:07:1b:54:3d:b0:f0:
c7:5f:aa:38:b7:5e:8e:e9:74:46:3e:3a:1f:90:be:
fb:fa:74:b7:e5:c7:12:35:63:60:05:1a:48:85:07:
3b:cb:3e:69:40:7c:8b:60:30:bc:e0:69:ab:84:20:
d8:93:ee:a0:b6:46:89:ab:0e:55:b5:e2:06:73:c2:
ef:0c:ed:02:01:0a:ad:e0:8d:05:f8:c6:0d:e1:26:
59:22:88:2e:0d:7c:87:70:de:97:87:32:f9:5f:8a:
ab:3e:59:b6:76:95:15:33:76:40:2e:1c:9d:9a:d7:
94:70:97:b7:ae:81:82:1c:34:02:a8:37:59:3c:56:
86:57:3e:ac:7e:88:83:bb:5d:46:3a:70:88:3b:4c:
58:92:35:88:e0:6b:5d:3e:18:d2:90:ec:e1:0c:42:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A3:47:6C:B2:67:AB:BA:E2:AB:12:99:9F:4E:CE:2D:1D:DC:53:05
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:15:d9:f1:f8:c1:1c:05:a5:c4:bd:88:73:e0:cf:e3:82:52:
5b:cb:fa:6d:04:83:6b:31:5c:d2:e8:90:78:3d:9d:d4:f4:02:
44:32:79:c5:69:ee:09:12:b5:de:c0:4e:9f:5c:11:16:6d:41:
3d:14:e9:63:e5:21:05:71:59:d9:30:1a:3b:a9:cc:b0:72:5e:
4c:12:e8:72:6e:71:95:71:18:bb:ca:61:71:3d:bf:de:da:77:
dd:a6:fb:22:59:71:d0:93:a7:8a:9c:ff:cb:54:92:67:28:e5:
29:f9:9b:69:3d:27:59:b9:ff:83:ed:07:c2:cf:a8:30:45:c0:
67:77:b3:fe:d1:e1:37:e1:cd:1d:e7:c6:29:8e:95:1e:6e:15:
07:99:b5:34:01:d2:3d:c0:b4:dc:8d:16:47:f1:fb:0f:27:79:
9a:51:50:a6:20:89:85:4c:8a:da:32:da:ca:ba:40:8a:b6:8a:
25:20:d9:02:6b:b5:1a:eb:0d:0c:89:58:89:1c:96:76:4b:19:
4d:b9:9a:43:2a:a4:79:1b:ed:75:64:28:42:4a:f6:2d:eb:52:
cf:e2:5d:a6:8c:15:6c:b7:e5:46:bd:14:a6:be:51:35:e8:67:
03:55:11:be:c5:34:bd:b9:8b:c3:92:fe:cf:ea:6c:3d:69:cb:
17:ff:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:27 2025 by rpki-client