Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: 029NnROPcX4lNdVi056S24OKKVo2fyQloUB0b8+CVkU=
Subject key identifier: 90:D9:0B:73:62:7A:CF:EE:BA:39:22:B5:3D:78:94:D9:E8:80:21:F0
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 0199FE101B48DDF191BB612AF3E8F9610C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0C10
Signing time: Sun 19 Oct 2025 20:01:32 +0000
Manifest this update: Sun 19 Oct 2025 20:01:32 +0000
Manifest next update: Mon 20 Oct 2025 20:01:32 +0000
Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: iIZcn5yhsMt78NmWiMATZdlUMXxh8CjSVL/pnc47tHE=)
2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:1b:48:dd:f1:91:bb:61:2a:f3:e8:f9:61:0c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Oct 19 20:01:32 2025 GMT
Not After : Oct 20 20:01:32 2025 GMT
Subject: CN=90d90b73627acfeeba3922b53d7894d9e88021f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:5c:99:e7:19:bf:f4:ab:f8:22:88:f8:71:
cc:be:c3:eb:b2:71:fb:43:f3:79:80:50:b5:1f:dd:
aa:ab:1e:3c:ca:b8:69:b0:5e:5e:5b:cc:aa:a9:fb:
7a:20:41:5f:4c:2a:a1:27:16:76:97:0a:fc:d5:06:
60:cb:4f:fb:9a:78:7c:2c:8d:b8:27:7a:ac:63:6e:
fd:69:9c:f1:1c:62:73:1d:3e:29:14:8c:e0:46:87:
49:e6:d8:57:38:3d:de:c8:7c:5b:a0:ed:ef:eb:aa:
b0:7f:f3:f4:51:e0:1a:2a:08:17:9e:ba:8e:a5:16:
39:b0:8f:d6:e0:e2:52:a4:e2:cd:c6:1e:0e:09:4d:
4c:a1:f2:55:78:ce:a3:cb:c8:af:8d:bc:9c:39:b9:
c6:4b:35:2c:b2:b7:72:24:a1:80:8f:af:4c:78:38:
aa:84:ac:72:36:5e:59:c3:a7:ca:91:39:88:b0:ba:
8d:f3:b1:c2:3d:21:67:04:a9:de:bd:f0:b6:c9:b7:
51:c7:a2:21:30:e4:a3:c1:28:88:30:60:6d:87:a7:
ac:7c:9f:7f:42:7c:e6:5c:2f:ca:0e:be:bb:d7:2e:
f4:09:bd:93:04:18:80:ea:05:d6:bc:6d:c3:02:82:
b2:e4:5f:7c:3c:a4:f4:57:2d:f4:48:74:15:93:61:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:0B:73:62:7A:CF:EE:BA:39:22:B5:3D:78:94:D9:E8:80:21:F0
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:21:21:db:a1:90:65:52:0e:aa:ba:6b:1b:d7:ea:0f:17:40:
86:7b:38:8f:74:e0:93:08:7a:b1:c5:79:c6:e2:d6:df:0f:2b:
10:98:72:7a:53:74:83:f3:77:66:2d:f1:36:c1:d2:f4:b5:96:
00:f3:40:d1:7d:63:4f:da:4b:f9:d8:cf:3d:a0:89:1d:d7:d2:
85:92:ee:79:98:d6:5b:c2:40:46:8a:14:2b:81:c1:68:20:4c:
cb:f7:fb:86:be:62:f5:95:87:51:7e:37:2a:d3:3e:bc:c4:3a:
b1:4b:77:eb:3e:6a:9d:52:e7:49:77:c3:37:d6:ff:5c:f8:76:
b6:b6:10:c0:b2:11:e6:ce:5b:ff:7b:da:84:83:27:a4:86:df:
a4:83:46:7e:9a:6d:95:77:5d:8a:fb:77:b5:18:e8:6a:77:21:
ce:66:6f:1c:91:73:97:57:9c:02:3f:48:a3:dc:62:94:d9:c1:
39:40:c3:7d:ee:13:1c:6a:53:89:58:60:54:9b:f8:0c:13:04:
c0:9f:4f:7d:bf:c2:db:61:26:d5:8f:6d:75:8e:41:17:e2:04:
80:c0:99:83:7d:4b:d8:72:38:b7:20:25:34:1e:f6:b8:9a:24:
09:3c:6b:63:94:52:9d:71:9b:15:27:20:5f:0e:3f:33:9e:d3:
96:23:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:29 2025 by rpki-client