
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: XuQc6/FLoTPswDDwCh6XPfY5f45Z9LGrd6q8Ouv4WmM=
Subject key identifier: 1A:57:CA:32:A7:A3:67:6E:C0:DB:B7:31:15:57:77:49:FC:34:A0:40
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 0199FC588D77EE39736E77C17EF658011674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: 9Osl3cBdi+vLuMJLMmf1zHNXkZrg55Yq2oLb5X4zFKE=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8d:77:ee:39:73:6e:77:c1:7e:f6:58:01:16:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=1a57ca32a7a3676ec0dbb73115577749fc34a040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:c9:0f:65:f3:91:ef:cf:da:40:42:83:5b:
b6:34:55:c0:7f:c2:71:a2:51:65:30:09:b8:7d:3b:
8e:f8:19:0e:4f:83:5b:1a:b5:3b:9c:67:c4:0f:ac:
1f:32:b0:8d:ad:99:3a:6f:89:6e:76:22:0a:60:58:
30:32:c2:27:d1:54:7a:62:77:f3:03:ce:8d:2b:27:
21:d3:8b:53:0b:3a:2a:b1:b6:26:e0:93:f9:ca:df:
7d:74:a1:18:0e:68:3b:c3:d8:4a:06:42:e1:36:39:
27:65:e6:a1:62:c7:98:c2:6b:e8:18:b9:a9:16:68:
a4:a0:ce:fc:3d:57:27:c4:6d:99:9f:32:c7:03:60:
6d:95:de:6b:3f:e7:2d:56:a7:48:e1:73:ef:fc:2e:
5c:35:58:20:84:e1:a3:54:57:67:97:b8:21:c2:e3:
bd:4c:c5:62:0f:f1:b0:31:07:df:d7:6e:bf:7f:2c:
74:b9:94:51:68:14:5b:ff:ab:5c:cb:9d:dc:29:9b:
be:d7:2d:ed:8e:93:e6:24:59:f1:66:ce:b5:09:8a:
23:44:08:23:2e:1c:bc:e0:3c:9e:dd:88:8e:f5:b5:
f2:7f:c5:e6:fe:7a:0d:aa:05:08:f4:3c:77:2f:80:
ae:3e:dd:29:fa:2b:66:33:82:ef:cb:ff:95:d0:c0:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:CA:32:A7:A3:67:6E:C0:DB:B7:31:15:57:77:49:FC:34:A0:40
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2a:de:6b:fd:22:96:3e:74:71:d4:39:46:fd:ab:03:d3:bf:
60:9c:f7:c1:17:18:e1:cc:ca:ec:60:66:ea:e2:df:83:9b:b3:
64:27:a9:2f:17:61:c9:a9:6b:85:22:9f:30:92:6a:6e:57:12:
2d:3d:c0:96:52:34:63:13:59:30:b4:90:c6:74:fd:c1:ae:dd:
de:f5:f2:d1:87:54:f9:aa:ab:ca:b3:e1:52:67:62:29:36:e6:
cc:8d:57:e9:f9:cf:0b:b3:36:db:86:d3:ef:e0:d1:f7:28:82:
18:94:c7:e6:48:21:12:8b:14:83:3b:b0:51:bc:de:da:49:a9:
8b:fb:6a:2a:63:96:20:f4:4d:4a:c1:ed:50:be:ea:30:d7:3f:
b1:a9:e5:9f:01:d9:1a:7f:90:e1:07:25:74:65:2e:32:4f:55:
ed:07:fd:47:60:e5:b3:e4:6f:0f:52:4f:31:9c:6d:f4:ac:46:
f4:8b:d5:f3:cd:c5:e7:ea:c4:49:06:64:2a:dc:2d:30:3f:9a:
e2:18:fa:6a:88:03:8e:e2:0b:87:b4:43:1b:e3:49:b5:31:7c:
22:41:f0:81:c4:e4:df:77:cd:f3:32:5c:be:01:e8:f8:38:68:
fd:cb:bf:d8:ea:bb:47:73:68:18:6b:85:4a:5b:0b:ed:00:3c:
bd:ee:bf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:58 2025 by rpki-client