Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: 5/S0Ce2wyEpsaGOlIABSabAW1YSxGpmiYj7pU9IqAWY=
Subject key identifier: 67:CA:DD:9D:B8:CC:08:34:2C:C7:3F:D9:74:03:88:61:A0:81:62:0E
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 019A5C7B25B166FEEE01080ABABB47743636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 1042
Signing time: Fri 07 Nov 2025 04:02:45 +0000
Manifest this update: Fri 07 Nov 2025 04:02:45 +0000
Manifest next update: Sat 08 Nov 2025 04:02:45 +0000
Files and hashes: 1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: GjGFy0pHUYeDWsD3HqLMqZXRcoSisUlTcpxghUoXWQk=)
2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 04:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:7b:25:b1:66:fe:ee:01:08:0a:ba:bb:47:74:36:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Nov 7 04:02:45 2025 GMT
Not After : Nov 8 04:02:45 2025 GMT
Subject: CN=67cadd9db8cc08342cc73fd974038861a081620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:5a:a3:7e:00:9a:ed:ee:0e:8d:ff:77:5e:
7e:a4:1c:8b:bd:3e:6b:6c:4a:49:24:b9:f4:bd:be:
75:a1:5a:ba:e1:52:fc:53:2b:8b:08:b9:d0:ef:8a:
07:58:ad:20:f1:b7:a7:14:7a:7e:3d:d1:87:84:0b:
3c:29:6e:1b:cf:d6:f7:12:15:9c:58:b5:82:69:db:
41:e5:4e:ed:e0:34:23:5d:ac:ed:97:e5:a1:6a:b0:
51:8f:4c:77:12:e7:7c:f8:70:9b:98:59:dc:37:b8:
09:fb:3c:72:41:82:22:ac:27:f7:77:2f:74:e8:62:
eb:47:21:a2:29:ea:bb:f9:fc:51:68:a9:68:85:0a:
d8:c0:3b:7f:1b:8d:77:34:e4:60:be:96:c7:34:24:
e0:2a:84:db:03:eb:2d:52:ae:e5:86:68:89:dd:61:
18:e0:46:be:32:b8:4f:0e:9a:f5:ac:dc:91:62:53:
98:a2:11:db:d5:9d:b9:87:f7:72:a5:03:58:6a:33:
43:d1:11:f1:32:92:b3:f5:4f:ed:0b:3b:e3:5e:ee:
02:30:76:24:91:2c:42:f0:5c:6e:39:50:81:f1:a5:
b3:c5:a3:fe:70:30:9f:95:65:d5:cd:ed:aa:67:50:
4a:50:8c:0e:50:3e:d8:4a:ef:ef:77:e9:b1:91:e1:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:DD:9D:B8:CC:08:34:2C:C7:3F:D9:74:03:88:61:A0:81:62:0E
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:db:cc:66:d8:a5:0b:fd:81:a7:c3:b2:58:14:00:bd:1b:3e:
0b:ad:76:76:6b:83:8a:1c:28:c6:61:05:93:56:99:3d:a9:68:
93:35:cd:30:1f:17:9e:02:8c:0a:d6:08:0a:a8:47:c4:e5:6d:
e1:45:a9:30:a0:7b:46:3a:85:07:25:a3:96:4b:14:98:2f:ec:
8f:35:73:03:4b:98:67:30:33:22:94:8d:0f:f0:12:3d:13:57:
e9:3f:90:4b:84:ed:d6:53:ec:20:70:dc:27:2e:da:0a:8a:ea:
00:82:ab:73:93:99:ee:07:7c:22:b8:08:0f:2d:36:f0:61:88:
41:75:98:92:9c:d3:2b:f2:2b:8f:1c:93:8d:4e:83:40:6f:10:
37:23:98:ae:6c:88:5a:22:a7:0b:5d:76:5a:6c:2f:a8:62:af:
e4:0b:c1:85:37:3c:38:38:97:67:9c:a7:4b:cb:31:cd:34:cb:
53:52:b8:dc:f7:e2:04:c6:bb:af:a7:92:49:6d:9f:dc:7d:ca:
aa:04:14:d8:81:6e:34:b5:b6:7c:1b:79:7e:1f:4a:05:6a:78:
64:f2:8c:4c:21:d0:6d:48:97:0e:be:fc:cf:ed:d9:96:f6:70:
dc:cd:2e:ca:eb:11:a6:30:16:af:71:34:c8:96:3c:ee:2d:34:
1d:33:ad:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:31:16 2025 by rpki-client