Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: Hqhm/36oV/bE3xvujjaWZZK98okLBAFNVohGD6mzTzU=
Subject key identifier: B6:F2:17:8A:32:98:B8:5F:0B:A2:A9:05:4D:0F:27:CF:C9:59:40:BD
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019A1EADFC3C2EF196E5FBE293998317A4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 04:01:50 +0000
Manifest this update: Sun 26 Oct 2025 04:01:50 +0000
Manifest next update: Mon 27 Oct 2025 04:01:50 +0000
Files and hashes: 1: 3jF5JkqZzpwDg2CUyKrMHDx4QqM.roa (hash: Ct22y3Kn4dpY61h6fsUyGmJkOxPrtpccRirSLUmpVtY=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: J7yZN26KHesJw5+Epj7a+KwIG26AYtp4Jz1kr/Y2ybQ=)
3: caUBuUxU945I82DD831l9nsD-jo.roa (hash: fcv+cYVXy7t+Ay1RhyoB8XEGTuHAujkCAZt9GTjK/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:fc:3c:2e:f1:96:e5:fb:e2:93:99:83:17:a4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Oct 26 04:01:50 2025 GMT
Not After : Oct 27 04:01:50 2025 GMT
Subject: CN=b6f2178a3298b85f0ba2a9054d0f27cfc95940bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:18:d2:16:25:2e:c6:23:c5:5e:91:02:37:
a6:5d:3b:8b:b2:b1:4d:f3:e8:65:9a:c5:5a:b1:2f:
d6:00:09:f9:d2:41:60:a0:da:94:65:d4:84:fc:d3:
62:7e:fb:7a:70:dd:9f:73:8a:61:ec:92:27:93:f6:
12:48:de:26:79:49:1a:35:10:de:e8:31:35:7a:3e:
1d:7e:fe:69:b2:ff:25:a6:d9:30:a5:fc:3d:e6:c3:
81:4f:b4:bb:3a:11:9b:66:9e:34:ec:e3:00:59:28:
2a:1c:b4:94:31:3e:6d:18:32:06:32:eb:b3:0d:aa:
92:86:7d:38:99:6f:6a:cc:50:2f:cc:4e:71:e0:7f:
4c:4c:29:90:d4:0f:87:68:7a:60:f9:84:29:d1:0c:
6c:33:73:b3:ab:c3:4a:7b:92:d5:74:b3:5d:ef:8b:
a5:9e:ed:a8:62:34:02:4c:54:02:6d:1f:85:91:a5:
60:28:ce:de:8d:ef:a7:dd:34:a0:90:a1:30:6c:78:
fc:4d:39:d0:3c:e9:7f:57:15:7e:40:56:80:53:47:
df:39:d2:5a:6f:93:20:61:a5:30:79:f2:ee:a2:96:
a3:1b:b5:3c:66:5f:96:2d:bd:20:0d:a4:a4:81:0c:
d2:16:51:ee:b9:a9:9b:e6:ee:f0:b7:29:00:2f:4c:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F2:17:8A:32:98:B8:5F:0B:A2:A9:05:4D:0F:27:CF:C9:59:40:BD
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:99:dc:e6:9f:3c:97:f0:4c:01:4e:87:90:d9:21:89:87:0d:
b1:b3:4f:94:5e:59:37:bc:0a:15:48:06:5c:9c:3e:f7:df:22:
7a:b5:49:5b:56:c0:ca:94:5d:2c:fd:a1:30:5f:b2:9e:d7:b4:
d0:64:d5:5e:da:49:e5:54:8e:c5:b3:b4:7d:d6:94:77:c3:0d:
1c:52:f3:72:e0:3f:7d:18:e7:82:76:72:6b:2f:f1:25:87:35:
10:ba:0a:b5:32:62:a8:b9:bd:fa:bf:e5:7f:ee:d8:52:66:1c:
a4:ef:81:a7:4d:f9:85:4e:3f:9a:65:38:e6:a3:03:fc:01:ab:
15:30:06:61:57:d0:00:a2:51:c0:fa:05:0a:c9:9b:81:fb:77:
ab:41:15:47:23:59:cc:cb:7a:dc:80:3f:79:fe:1a:88:2e:92:
63:8c:10:f4:97:4f:3e:0b:42:4a:58:fe:34:64:a4:8e:91:31:
c1:dc:c2:58:70:d3:33:fb:7f:23:6d:9f:99:60:de:78:68:b8:
ce:87:26:3f:5a:4a:1b:ac:a3:b3:cf:10:46:73:27:d1:48:d8:
37:d8:ec:5e:b5:14:86:c8:5a:a7:21:34:81:04:9c:a2:45:92:
fc:80:8f:0c:c5:0a:4e:a2:e8:ee:6a:f8:da:d3:60:4f:86:85:
c1:96:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:33 2025 by rpki-client