Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: V+K/LbWNlKf3sVyHBjceOcPHHgvVa1hbwLFNEF9kzSw=
Subject key identifier: 1F:25:E8:DF:78:D8:72:89:72:FC:48:AB:39:F4:66:D1:3F:13:FE:B7
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 019A2F69E75F75B2B1F05AB0937F1829F5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 1204
Signing time: Wed 29 Oct 2025 10:01:00 +0000
Manifest this update: Wed 29 Oct 2025 10:01:00 +0000
Manifest next update: Thu 30 Oct 2025 10:01:00 +0000
Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=)
2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: de7NybImoXExQ+nVVomQCtW9zeXOu68DmCUAdABOKAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:69:e7:5f:75:b2:b1:f0:5a:b0:93:7f:18:29:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Oct 29 10:01:00 2025 GMT
Not After : Oct 30 10:01:00 2025 GMT
Subject: CN=1f25e8df78d8728972fc48ab39f466d13f13feb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:17:56:46:12:11:fb:96:e5:a2:4a:39:81:
ee:ee:97:e9:05:cc:23:49:10:2d:78:ae:b1:b4:f8:
10:80:4a:1a:85:41:33:c2:9c:8d:eb:af:e1:18:4f:
0b:ae:1b:de:d5:2d:99:a6:2d:46:81:46:b7:50:97:
b7:21:82:5f:97:9c:61:3d:c1:ba:c3:44:71:f5:b4:
08:53:ec:ae:77:49:43:e5:84:1f:d2:00:eb:d5:2c:
00:48:e2:1f:54:a7:b2:6d:b2:1a:c1:67:76:8c:f3:
26:79:ad:6a:35:e8:3a:6a:1a:a5:ce:5e:d9:be:af:
a6:20:e1:3a:ca:0b:89:f6:91:ab:0c:70:77:e0:2f:
02:0b:be:6c:31:b1:9a:bd:0a:70:30:58:3b:80:ca:
2d:94:70:cf:e1:5f:67:60:01:ca:f6:30:0a:3a:87:
26:dd:2e:59:3a:98:29:77:59:8c:81:61:d0:89:ac:
d0:4e:e2:f4:f9:2e:1b:c2:56:c3:9b:96:32:9b:7a:
ff:81:4e:4e:ac:a0:01:bf:87:32:8d:07:d5:33:94:
d1:0f:86:92:2f:4c:c5:12:bf:e3:0e:ea:c4:a8:13:
81:e0:bf:94:bb:20:40:f5:4b:fb:9f:37:24:ec:4e:
0d:22:e1:2f:39:c3:7e:89:66:96:ab:7f:23:62:20:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:E8:DF:78:D8:72:89:72:FC:48:AB:39:F4:66:D1:3F:13:FE:B7
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3c:2c:2a:fa:4f:cf:ca:04:8f:26:fb:b2:9f:66:ac:2a:24:
40:bb:47:ae:94:8d:c8:af:57:4a:70:3d:e7:5f:d0:e8:8c:f5:
4f:d1:21:31:be:c2:e1:6c:50:dd:b0:c5:00:72:59:ca:dd:c0:
d6:aa:4a:06:24:2b:53:02:3b:ac:e1:75:66:4b:c6:15:98:d8:
c9:2d:25:c5:86:46:5b:1b:40:e1:90:31:9e:5f:cc:da:d8:ab:
b6:8d:9f:f5:3d:b1:d8:42:3b:a0:af:70:02:12:9d:c8:53:94:
e6:79:9e:84:ac:bd:10:98:56:ef:8d:e3:63:93:5d:4f:c0:79:
21:83:89:60:56:52:0b:55:ce:5a:0a:79:c5:b4:c6:59:47:65:
a7:da:b2:b6:a5:23:d4:50:10:2b:b4:e7:b5:de:ce:68:f5:7e:
b7:29:1d:74:06:3d:87:ef:35:fa:d7:84:9b:86:f4:18:6e:63:
e7:b5:4d:79:5d:70:88:f9:d2:a8:f9:64:39:3a:f5:79:1a:13:
e3:85:aa:87:88:d1:ae:d2:d6:f0:81:8d:01:1f:03:43:df:ab:
25:64:8d:bc:cd:78:45:9e:fc:23:dc:28:21:b9:1a:16:e4:60:
8a:7c:22:1a:f9:28:e8:70:8f:33:6b:1d:e9:9d:c0:79:d3:80:
ce:0f:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:31:15 2025 by rpki-client