Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: 0SWiwmSzFE6IzeY/zMrnpHFYjR9OMeKy6cmDu4LoouA=
Subject key identifier: 6B:FB:EA:C2:BD:47:96:84:DA:0B:FD:46:65:C5:92:F2:E6:CA:D9:A5
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 019A239BFEB148CFD65769197D59CCAE29EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 0869
Signing time: Mon 27 Oct 2025 03:00:16 +0000
Manifest this update: Mon 27 Oct 2025 03:00:16 +0000
Manifest next update: Tue 28 Oct 2025 03:00:16 +0000
Files and hashes: 1: RgkGs56a3wBSH0Yhny04eNJEX3I.roa (hash: 1WUdRWIGnTtyys0okmGp0iV2hIZohfzABaDiV/G7uDo=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: PjLWsG64DqFJWDP75A5e83ChGvCpf7HJwo23fIrXI4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9b:fe:b1:48:cf:d6:57:69:19:7d:59:cc:ae:29:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Oct 27 03:00:16 2025 GMT
Not After : Oct 28 03:00:16 2025 GMT
Subject: CN=6bfbeac2bd479684da0bfd4665c592f2e6cad9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:b8:31:c4:f9:40:d5:3b:dd:84:b5:cf:52:
8d:59:35:00:b4:da:a5:70:c6:10:dc:0b:97:82:1a:
33:7b:63:37:aa:29:3b:c6:ce:61:36:79:13:6b:ed:
5c:41:39:95:4c:08:c0:28:56:06:a4:09:89:44:36:
64:44:7d:d2:0c:80:1c:75:62:84:45:e2:a9:f0:f1:
4e:9d:8e:5c:84:61:3d:58:c8:e5:fd:0e:b9:d8:c3:
de:0b:1c:a4:da:51:1b:32:d0:be:c3:20:12:78:b6:
c9:38:0b:bb:1e:05:90:f8:da:a5:8a:de:18:b1:0f:
49:e0:ec:ba:50:e9:fc:18:3d:d5:2c:06:02:86:a4:
e3:5d:e0:1b:42:43:d5:1a:57:18:88:0b:ba:4c:ad:
bb:7f:7d:8f:fc:49:69:6b:27:a6:91:00:77:a1:4b:
a4:dc:5e:de:f6:93:00:4c:6e:cb:21:53:14:54:70:
d4:fb:5f:84:98:3d:65:55:16:97:d4:ab:ca:5e:b5:
9c:61:fd:9a:14:7e:6a:27:b4:68:7e:95:49:23:b6:
99:c0:92:cc:96:5d:c7:f7:5b:e0:63:6d:90:3e:fb:
84:4b:1c:e0:3c:f2:58:08:bd:a6:94:d3:fb:c3:cf:
f8:8f:c0:18:1b:67:a0:58:f2:8c:6e:72:43:f5:4b:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FB:EA:C2:BD:47:96:84:DA:0B:FD:46:65:C5:92:F2:E6:CA:D9:A5
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b8:22:02:7a:f3:85:96:df:74:7a:a2:6f:e9:35:8d:be:8f:
d1:93:9b:ba:01:fb:d6:20:52:dd:66:8f:30:44:e1:51:03:72:
4d:c0:f3:e3:bb:40:d1:c7:70:b7:20:a3:25:d3:52:2e:87:2b:
02:f1:2d:e0:73:9b:74:5f:88:38:95:14:a4:cd:9c:36:83:bd:
75:8d:8a:49:be:3f:8b:b2:50:35:af:80:a1:ee:d3:84:c2:3e:
f1:7b:74:33:2b:e8:0d:1b:d8:86:24:a5:af:37:be:37:81:88:
32:d0:67:57:e2:91:bb:64:90:4c:f6:1a:f7:5f:b9:db:15:bc:
e3:74:28:14:55:30:2d:f2:82:3a:a4:57:6a:5b:c8:0c:70:bb:
2a:a8:eb:9c:9b:49:ae:b2:69:a5:59:a6:a4:30:6f:95:40:a3:
a4:90:ff:8b:cf:1f:91:0f:cb:aa:69:13:fe:ce:0b:cb:b0:b5:
48:22:07:81:c9:ec:10:56:1e:11:27:ec:01:ef:fb:d4:74:ac:
c9:0d:78:f8:8f:40:74:f8:12:e6:a7:41:28:dc:e9:f8:98:8d:
b6:a3:53:8f:73:92:ca:4e:26:cd:c1:64:2c:cf:b5:78:66:98:
4b:6a:9e:d7:13:61:b2:f3:7a:a1:a3:d4:89:58:1a:3e:6a:71:
92:f7:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:19:31 2025 by rpki-client