Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json)
Hash identifier: KN/B3or/9/2htE2aJDBbGU2wbfAof4369fjAijRYRkg=
Subject key identifier: D7:78:C5:B7:E0:CC:12:3F:E1:11:53:CC:F3:76:93:C9:44:86:B8:F4
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial: 019A202CF2FDB3C9D34777919A864898D3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
Manifest number: 06B8
Signing time: Sun 26 Oct 2025 11:00:07 +0000
Manifest this update: Sun 26 Oct 2025 11:00:07 +0000
Manifest next update: Mon 27 Oct 2025 11:00:07 +0000
Files and hashes: 1: GgU4V3exF_KMsbXxFhlxd1M5pl8.roa (hash: l8v1ZDd4kP5GR80G/4+UL0QS/Pev1eqpTKkPGhrjSW4=)
2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: MJvJED9uFixgHjC7E/DQCuw/M2wO357npOy4x0Z5bLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2c:f2:fd:b3:c9:d3:47:77:91:9a:86:48:98:d3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Validity
Not Before: Oct 26 11:00:07 2025 GMT
Not After : Oct 27 11:00:07 2025 GMT
Subject: CN=d778c5b7e0cc123fe11153ccf37693c94486b8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:ea:20:fe:eb:e1:69:77:3e:5c:cb:52:af:
3d:fd:8d:c8:22:80:1a:7d:dd:91:b5:bb:32:97:6a:
2f:21:7b:ff:6e:2e:f1:b1:92:cc:34:82:59:eb:ba:
90:65:cd:45:72:7e:1f:e6:97:93:a9:15:07:c6:27:
3c:d4:73:b3:80:de:85:9c:af:78:6a:ba:e0:10:4e:
21:07:aa:ff:a5:f6:cb:c9:df:0c:14:56:00:5e:17:
7e:e2:ce:06:7c:e9:17:b5:10:9e:69:7c:ce:2d:d5:
c1:67:b0:8a:31:1d:0b:51:f0:60:db:fd:16:05:84:
28:0e:8d:ec:2f:85:c2:1e:3c:d2:a0:75:af:43:dd:
a8:05:76:6b:ae:62:6e:41:b1:d9:ec:6f:2d:2f:d6:
55:29:0c:fe:e5:06:d5:a7:85:31:30:8f:9a:d2:4a:
d3:e5:d0:64:ec:f9:8e:91:12:d4:e9:32:e2:e8:77:
2a:0a:3d:8d:d2:ef:c0:f9:ae:9f:df:88:f5:5c:fd:
37:53:fe:10:af:52:a6:86:64:be:06:f2:ca:4f:5d:
4f:09:b6:55:5d:1d:07:b4:15:a6:2a:8f:3e:14:22:
e9:ea:0e:3a:7c:c2:8a:59:01:30:ce:4b:af:64:df:
1a:1b:ad:6d:df:53:54:7a:4b:6e:80:12:10:fb:16:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:C5:B7:E0:CC:12:3F:E1:11:53:CC:F3:76:93:C9:44:86:B8:F4
X509v3 Authority Key Identifier:
keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0c:9d:b7:d0:f9:6e:3c:a4:83:1a:79:3a:bd:89:6c:25:77:
aa:04:83:1b:f3:f1:3e:3d:ca:5f:b8:cc:c2:39:d5:42:30:51:
87:ff:dc:07:83:9e:b4:c2:4f:bb:2d:5e:57:2d:18:75:3c:8d:
b1:53:f0:4b:d3:5f:07:4b:f6:d9:aa:41:b1:b7:79:2a:f9:48:
13:91:b1:d3:3a:d6:27:f0:fb:9f:81:47:ca:8b:2a:cf:71:93:
91:5c:46:c5:2a:db:8b:97:67:36:7a:d4:b9:60:1f:24:51:a6:
7e:e5:95:aa:16:04:4f:75:5b:f9:b2:c4:74:18:fa:0a:4a:db:
df:ec:79:e5:87:1d:b5:ca:e7:1a:76:ca:08:07:17:c7:8f:fc:
ab:d0:dc:2c:81:d7:a4:a0:77:0b:5b:13:5f:9c:67:01:19:b2:
b7:35:5b:1c:a9:c4:3a:f1:8f:0e:ea:24:ef:b5:dd:a0:67:e0:
e9:1c:84:69:53:eb:04:bb:46:a5:72:f3:93:18:a0:d3:44:38:
2e:e1:99:9d:0f:c7:4a:53:18:36:d0:63:6d:95:c3:5c:28:87:
d8:0d:d0:6f:da:c8:01:7a:28:65:64:d6:98:eb:e3:a3:16:a5:
f0:c2:7a:61:f2:09:9d:f4:0b:79:a5:ee:a5:1a:04:9f:a4:f6:
5b:f8:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:41:14 2025 by rpki-client