Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: RWqDqs/SpH1aVpAmSRYfcUbqzkNTo3dNaPETGsMNG8o=
Subject key identifier: 96:80:35:0A:FC:33:5C:E6:52:17:E1:69:AD:30:D2:2D:28:FF:85:AA
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019A00A30BAAF93E7679777669F4B1521673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 08:01:16 +0000
Manifest this update: Mon 20 Oct 2025 08:01:16 +0000
Manifest next update: Tue 21 Oct 2025 08:01:16 +0000
Files and hashes: 1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=)
2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: UpJqKEni0rsK4ZcyElXub6GkeLwn+OovzgXMjTYSJBU=)
3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:0b:aa:f9:3e:76:79:77:76:69:f4:b1:52:16:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Oct 20 08:01:16 2025 GMT
Not After : Oct 21 08:01:16 2025 GMT
Subject: CN=9680350afc335ce65217e169ad30d22d28ff85aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:d3:20:6c:aa:c0:35:82:82:85:33:76:da:
7b:37:9a:9f:5a:ad:40:15:41:84:1e:7b:3d:c8:b8:
1f:76:b9:c4:91:0b:b7:b9:71:7c:9c:34:6f:fd:97:
79:12:16:0a:dd:49:9d:a1:84:a6:ae:d9:60:bf:27:
08:76:a6:b8:30:76:33:be:06:73:da:d0:b8:33:2b:
8d:c1:fb:b3:a6:c5:1e:ae:90:99:ca:25:65:b9:7a:
7b:7c:92:ad:53:a2:66:4a:4a:f9:2e:75:9c:cf:5f:
9d:2e:0b:7c:46:cf:f2:eb:70:9d:97:c8:f6:0e:50:
be:8e:95:e2:23:8c:14:e3:8b:34:b5:21:f9:57:50:
bf:8f:af:9f:fb:51:8e:76:01:aa:66:46:13:9e:4f:
1a:c7:ec:87:0f:c8:70:ab:a2:35:69:fd:64:57:a0:
97:f1:2e:18:08:3b:a6:33:6c:10:60:2c:e9:17:1c:
c5:c3:a3:99:14:b2:be:49:14:c9:6f:41:31:25:2a:
ac:b1:a5:8e:98:4e:56:98:03:0c:f2:1d:e7:ee:56:
77:3a:77:26:d7:54:22:00:04:69:ce:0f:bb:48:18:
3b:c3:19:b9:99:6f:fb:ad:7c:84:fa:b8:74:07:c8:
88:76:d2:d9:ae:cf:de:d3:3e:9e:21:fd:1e:d3:75:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:35:0A:FC:33:5C:E6:52:17:E1:69:AD:30:D2:2D:28:FF:85:AA
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:81:f3:b9:e7:a5:72:f6:c2:9b:54:7e:c6:1b:53:ea:74:8b:
2c:7b:79:9e:3f:10:07:55:90:9b:0a:81:fa:31:e1:ad:5b:e1:
fd:0a:0c:b5:52:b5:13:3b:94:e8:77:98:87:84:81:04:95:e2:
7d:a5:e8:37:de:b5:9e:95:46:70:16:5f:d1:c7:27:3c:a5:dd:
a2:cf:49:ca:b4:be:96:4a:ac:8a:c9:73:e9:1d:1a:17:8f:65:
2c:2c:4d:bd:76:f8:06:03:86:3a:03:3c:04:a7:b5:ad:aa:65:
29:7c:fd:38:31:fc:49:d7:40:26:46:22:8c:56:c4:4e:eb:af:
a8:0b:4b:14:53:9a:27:b1:65:34:e2:5e:66:23:cd:2f:e8:08:
67:44:7a:27:53:6d:02:7b:60:33:d4:6c:6c:79:57:68:02:92:
cd:8c:a3:c1:0b:d2:3f:e6:5f:c7:ff:4b:cf:f2:d6:40:91:2e:
1f:25:f6:10:2d:6f:c4:0e:b4:bd:02:ab:d0:32:95:e8:31:1d:
6d:0a:1b:e6:7b:26:97:07:75:e7:34:be:f4:f4:0d:e2:db:9c:
d6:9d:5f:33:86:aa:5c:18:aa:b9:00:fb:0b:b6:8a:04:1d:63:
c7:66:9d:9f:d5:a7:0f:87:ae:49:70:a5:38:4d:e8:d0:7b:4c:
65:e3:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:50 2025 by rpki-client