Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: KmYgJAuGI1UtL0YghtuMyOKYQVAARkgXGavrKbVXOj4=
Subject key identifier: CF:ED:BF:C3:55:31:FF:3D:9D:CB:6D:B5:60:0A:A9:7F:A1:CB:8C:A6
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 0199C45712CA9DBC984A85A5F930CEB0449F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 16CC
Signing time: Wed 08 Oct 2025 15:01:04 +0000
Manifest this update: Wed 08 Oct 2025 15:01:04 +0000
Manifest next update: Thu 09 Oct 2025 15:01:04 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: IAfIyEF7blYv6jvy1yuRHh1jOi3w26/vEcTqhFVbiSs=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:12:ca:9d:bc:98:4a:85:a5:f9:30:ce:b0:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Oct 8 15:01:04 2025 GMT
Not After : Oct 9 15:01:04 2025 GMT
Subject: CN=cfedbfc35531ff3d9dcb6db5600aa97fa1cb8ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:b5:02:db:6e:7c:ba:3f:04:0a:00:5c:99:
df:f7:71:07:4e:42:be:cd:ca:ec:f9:e7:c9:b9:90:
21:8b:34:ad:72:58:f5:90:26:55:ad:fb:43:07:5d:
a5:34:87:83:69:6a:0d:9e:13:4f:7d:b7:32:04:d3:
85:ae:26:25:40:ac:f5:18:00:8e:57:96:a2:3b:47:
27:0b:e4:7a:d1:1a:0f:22:2e:d9:5f:6d:2a:32:7d:
84:44:45:b0:9d:3e:00:c5:3d:93:56:b6:c6:03:6f:
ad:42:cd:c3:e3:66:79:42:55:8c:31:17:b4:2f:a0:
02:b3:20:88:61:30:9a:cf:b9:b2:43:d2:66:a5:80:
8c:c2:54:10:69:66:5a:28:d0:06:ac:5f:d5:6b:9d:
95:29:6a:4a:d7:b5:6e:35:2c:05:7a:92:b9:eb:6e:
d7:53:6b:32:79:c2:02:57:60:f3:fe:4c:78:2c:f4:
a1:8f:7f:81:aa:77:7a:92:2b:88:5b:5f:21:f3:a3:
dd:1b:a3:ea:3a:f0:f9:10:1a:77:c6:f7:d4:f9:e2:
a2:60:7e:09:76:b8:cb:12:5f:09:a3:4a:c6:de:f8:
04:1e:92:b7:03:90:a2:11:f9:11:ff:3a:6a:73:3e:
05:ff:f5:4e:31:ee:cb:b1:71:e3:ad:1f:04:69:ce:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:BF:C3:55:31:FF:3D:9D:CB:6D:B5:60:0A:A9:7F:A1:CB:8C:A6
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c0:95:ab:42:fe:f3:7d:66:9e:24:53:bc:fd:ca:00:2d:7d:
26:b8:a8:9a:58:59:c1:03:81:cd:6d:8a:bc:2d:df:0d:ef:bb:
c1:cc:d1:df:de:22:56:cd:71:d5:ed:56:8a:ca:e0:05:40:d1:
a1:c1:e7:51:86:47:92:65:c7:d6:d5:d0:96:db:ac:f7:df:08:
d5:38:e6:3b:32:34:3c:2f:10:6e:de:1e:b6:8d:b4:79:2b:2c:
9f:f5:69:29:18:62:a0:3c:dd:f4:f0:1a:05:4b:f1:c7:e6:42:
0b:cf:67:c8:03:17:a6:c7:16:80:6f:e5:94:c6:2b:e4:85:6c:
de:f1:82:45:5b:bd:4a:5f:d0:a1:a6:a9:a7:98:37:9b:6d:22:
25:e0:94:53:de:81:8a:1e:f0:c8:46:69:b6:98:34:d2:aa:7d:
87:1f:13:e9:de:88:97:4c:b3:31:90:ad:88:33:24:3d:a1:17:
43:38:11:5a:86:08:8f:5a:e8:1f:89:ce:1b:51:14:a9:45:66:
44:af:92:8c:bd:5d:1e:fc:7c:1c:c6:c4:40:3e:75:9a:94:b3:
46:d4:8a:b5:23:88:c8:eb:16:c8:2c:32:5b:39:b2:47:f2:07:
48:9a:63:d4:8e:1c:5c:a7:bd:40:27:8f:dc:19:e9:be:f0:d2:
3f:7f:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:11:53 2025 by rpki-client