Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: MxC/Nycfre0UqTekX39M80/TM7cDUQAWo9ieELMG7mc=
Subject key identifier: 99:72:93:0E:BD:B1:4C:74:CD:58:65:F3:D7:33:14:26:64:47:16:58
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019A041168B6B7712C1DCCE961B94ED667CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 00:00:41 +0000
Manifest this update: Tue 21 Oct 2025 00:00:41 +0000
Manifest next update: Wed 22 Oct 2025 00:00:41 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: ZrCKIq6IT6+jzy3bs/u5GD3cUU6RG3Y1Cw5u+02FcA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:68:b6:b7:71:2c:1d:cc:e9:61:b9:4e:d6:67:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Oct 21 00:00:41 2025 GMT
Not After : Oct 22 00:00:41 2025 GMT
Subject: CN=9972930ebdb14c74cd5865f3d733142664471658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:51:d9:7f:42:e6:df:8f:f9:0c:91:fc:c4:
be:a3:31:d2:9f:2a:ca:c8:9b:26:5b:1d:0b:4e:d4:
23:fb:9b:14:ef:c5:eb:2b:43:66:2a:b3:e0:ca:14:
0c:35:1a:c3:3f:3e:c8:f4:6c:07:06:5b:8d:df:c0:
41:67:a6:f3:e9:ca:cf:0e:52:de:31:ae:98:40:de:
1c:b0:21:fd:0f:6a:ca:44:15:11:4c:86:be:81:1c:
dc:8c:ce:cc:d3:3d:b8:1d:cf:48:e6:cb:9e:30:53:
72:dc:a5:64:bb:45:8e:eb:38:b4:68:b8:b1:07:83:
3f:3d:20:e4:ff:4e:d9:ca:a3:75:be:72:e7:92:cd:
07:e4:08:29:60:51:46:9c:65:ad:9b:fa:1e:13:da:
39:00:22:d4:2b:17:9c:6e:89:47:2c:49:81:4c:4d:
05:d7:13:35:28:8e:dd:05:7d:92:0c:e5:8f:39:ec:
3d:5c:8b:43:69:cd:ef:0c:f2:e6:21:3d:45:2a:49:
31:ba:9e:77:76:cf:89:a0:7d:7f:90:59:fc:ff:40:
6d:c4:b5:33:e3:96:1a:6a:ec:fd:e2:e6:9a:9e:93:
4a:68:2d:45:7a:e1:94:4d:52:28:9c:1c:ee:d1:81:
4f:db:79:77:1d:e8:6d:ec:11:aa:eb:df:14:52:fd:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:72:93:0E:BD:B1:4C:74:CD:58:65:F3:D7:33:14:26:64:47:16:58
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:27:41:30:fd:46:82:9d:89:70:9c:ca:7d:72:64:92:57:c4:
c5:c7:ab:24:8f:dd:de:55:b8:f4:93:96:8f:17:a4:c1:03:d9:
81:05:06:3d:8c:1f:58:60:40:3f:ac:8a:2b:a1:8a:49:d6:0a:
f0:bb:f6:30:65:bf:70:67:36:e3:da:14:09:78:a2:b8:4f:2b:
f7:cc:56:72:b1:66:af:8c:87:70:f5:e0:ba:cb:7e:c0:0f:27:
57:6a:36:c0:63:00:52:ef:77:db:ed:83:0a:70:09:3b:10:a0:
f4:e5:b0:be:4c:82:81:fd:09:f5:7c:af:e8:ca:b9:28:8c:2e:
61:82:a7:ab:3a:98:f6:0f:4a:3a:3f:74:f9:04:81:77:a4:6b:
33:0d:0b:4f:67:17:a7:bb:34:86:af:89:e9:2b:19:f1:f1:9a:
d0:22:4a:a8:23:34:9b:64:ca:39:f6:a6:cb:b7:d8:dc:a4:87:
eb:1f:0f:34:f5:23:b9:26:99:bf:77:e3:7b:27:11:76:6b:ab:
0f:36:49:94:0c:78:74:56:78:d0:99:6f:cf:39:70:0d:5f:80:
1b:36:97:c1:ea:14:fd:7f:df:a0:51:5e:90:09:ab:ac:a0:e7:
05:0d:bb:1e:7c:fc:1b:23:81:c1:26:b9:88:25:36:27:79:b8:
f9:de:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:19:21 2025 by rpki-client