Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: zP94CAtrpru8/iqaR19rw+GdQrKuOI0Icc/2CuvRAl0=
Subject key identifier: 43:68:EA:9E:E0:F8:CE:10:AA:38:5E:4E:E2:7F:DC:BF:17:75:EC:88
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 0199FC587D859F3D07EA4AC505B3FE8FE7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: HwLcn2tbXfaewoRLUqvEJHtXkUs.roa (hash: W1uC8oFLMGagyUd1+ow2TTRqqrP/F081zqAOESqRLNw=)
2: Mx-fCqDASlNjjbccZ-B5nKyFs1w.roa (hash: 1mo/7uKD2fUUwhxoh/B2HIiYyRaaQnMnmEkbBF+A3yk=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: /WVcBv8BTA102Zx0Up+4kw8mgDT9J5sz0gNXCUCyOLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7d:85:9f:3d:07:ea:4a:c5:05:b3:fe:8f:e7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=4368ea9ee0f8ce10aa385e4ee27fdcbf1775ec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:09:65:9d:5c:89:e7:62:b8:26:83:0a:ae:
35:65:d4:b5:fd:83:94:f9:f5:b7:10:4c:ab:b2:ab:
7d:a9:4e:0d:99:f0:af:f2:88:d2:c6:5e:b0:64:08:
7d:62:2d:46:84:d2:f3:74:e0:86:ff:70:a9:63:26:
30:eb:de:2a:6f:02:8c:ce:8e:95:34:af:bb:98:07:
33:3d:58:fb:0f:93:6c:70:62:60:8c:c0:c9:1e:05:
da:5e:22:75:35:d4:aa:a6:ec:72:93:72:57:e2:d9:
9e:b6:7e:78:63:56:82:31:b0:2c:ad:62:b2:0e:1b:
5f:65:08:48:ad:0a:04:e5:f7:55:cd:71:59:bc:e0:
70:6e:d0:79:9f:6a:e6:f9:29:dc:5f:e0:2e:6e:65:
b2:49:a7:8c:04:05:33:90:fa:06:1b:6c:35:05:98:
be:a1:07:68:c9:31:cc:ef:3f:ab:26:9c:cc:5a:cb:
f8:1a:da:ef:e6:1b:02:ef:4e:06:18:1e:a7:7f:42:
78:e1:e7:2e:f6:b6:87:bd:df:42:f4:79:bd:77:c6:
45:87:09:00:64:be:82:3c:7f:e5:cc:8a:5e:81:2b:
9a:36:66:51:2e:ae:18:a9:d8:be:af:e2:41:94:0e:
99:1c:8c:48:66:80:74:32:a3:c2:b2:e1:af:db:1e:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:68:EA:9E:E0:F8:CE:10:AA:38:5E:4E:E2:7F:DC:BF:17:75:EC:88
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1d:39:2a:cf:a7:ff:8c:dc:3f:28:9b:c0:4c:6e:f5:f3:bd:
5a:cc:cf:fd:99:cf:ce:c9:64:50:dc:70:c6:e5:a7:d1:d2:32:
f1:10:a9:b9:82:35:b4:da:8e:8b:36:ca:3f:0c:a6:f5:aa:48:
b6:6d:3d:03:eb:50:b7:3c:38:7d:23:46:89:81:7e:a4:be:0c:
79:f0:34:8d:ac:5a:c7:a8:d4:10:ac:ba:ed:50:41:2a:d8:14:
aa:84:6a:b7:da:56:45:9e:58:53:97:10:5a:94:fa:6e:f1:b2:
34:ff:1c:14:02:1c:a9:90:30:93:e3:c2:8b:da:9a:81:b8:35:
ae:a1:ea:cf:cb:3f:b3:5c:66:c1:00:67:89:56:0c:97:03:8a:
4e:9e:d0:0d:15:5b:5d:b3:61:03:0c:86:55:1e:7d:d1:3d:30:
3d:a8:30:be:c0:96:4b:49:6e:dc:15:c8:3d:2f:f0:c2:c6:40:
54:71:78:a1:6c:80:ca:fa:48:01:1e:22:6b:b3:27:3c:89:f8:
ff:cb:64:c2:d9:c5:43:95:7c:b6:87:ed:4a:9a:a7:07:fd:4e:
b4:ae:32:dd:a2:2c:0c:78:72:20:f7:a5:26:0c:95:bf:d9:40:
df:d9:31:2b:55:02:07:d3:52:c4:59:29:01:d0:7a:ee:ac:14:
19:48:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:52 2025 by rpki-client