Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: rYFMzibAnN251ngQ/ttcsXW2WCQv0owXUy2jI43Ceew=
Subject key identifier: D0:A6:4F:3F:76:7F:EA:68:4E:45:63:5A:81:C6:F9:AF:1B:B9:3D:13
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 019A2AB10C7027B8C4D8FF0450B53E69A20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 12:00:37 +0000
Manifest this update: Tue 28 Oct 2025 12:00:37 +0000
Manifest next update: Wed 29 Oct 2025 12:00:37 +0000
Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: T5cdUCmJ+mYTwcgdre89CbALJlge3eQV3T3DvfID81A=)
4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:0c:70:27:b8:c4:d8:ff:04:50:b5:3e:69:a2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Oct 28 12:00:37 2025 GMT
Not After : Oct 29 12:00:37 2025 GMT
Subject: CN=d0a64f3f767fea684e45635a81c6f9af1bb93d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:93:f4:28:5b:52:70:01:8c:7d:27:6e:8f:
05:a7:33:0c:3c:33:f1:50:e5:a2:dc:07:6b:7d:ba:
ee:56:95:52:b0:0a:dc:85:1d:8c:c3:78:10:7a:36:
90:e8:e3:33:56:57:66:e4:da:46:56:52:ca:9d:9e:
d6:01:21:32:71:47:17:c8:5b:f0:d6:3f:12:b2:ff:
23:b0:b6:c8:5f:c8:5d:90:51:c5:dc:5e:ff:ab:c4:
74:f9:16:8b:2a:f9:92:0e:bb:c6:94:29:90:e8:bb:
b8:0f:d7:58:e8:62:bd:4e:01:09:b6:ff:52:61:1a:
84:09:3d:67:52:ec:be:33:48:97:46:fd:d9:20:80:
7c:ac:4c:ac:4c:d8:9f:31:e7:17:33:85:a4:05:42:
67:aa:40:5d:2f:ee:71:21:a5:58:73:a3:16:9c:ec:
0a:b9:97:8d:88:21:30:92:4f:09:95:1a:ef:d1:55:
a6:5a:87:09:95:91:a1:e0:41:f4:c7:e6:16:40:53:
9f:49:33:80:ad:be:09:11:59:02:b0:e7:a9:ed:ea:
90:dd:a2:41:e5:7b:c6:78:05:62:73:9a:57:62:ff:
47:15:28:af:fb:6a:e1:0a:ee:71:2c:5b:f1:b8:e3:
6a:9f:48:13:17:a0:a7:32:61:5e:eb:32:0d:d9:f4:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A6:4F:3F:76:7F:EA:68:4E:45:63:5A:81:C6:F9:AF:1B:B9:3D:13
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fe:b9:0a:de:14:fe:f0:9b:dc:90:28:6b:1c:6b:f8:4b:55:
21:24:86:cf:3f:d7:a7:ee:bc:7b:12:8f:78:ba:3d:75:38:12:
72:ce:16:2c:ea:f7:72:72:b3:14:7d:bf:73:bc:24:4f:a1:7b:
91:fd:39:02:3b:88:13:11:1b:ba:35:90:d0:83:15:b0:e5:52:
f8:0a:2d:db:bc:fa:e2:0d:79:83:0b:e7:50:c4:9a:bd:06:e6:
1c:f2:6e:cb:dc:ae:eb:ea:5c:9b:08:35:a0:a2:c6:3f:37:5e:
5d:ef:f0:02:e9:72:2e:4c:45:60:f6:7e:e5:1c:a8:d1:38:b8:
99:51:2a:84:54:00:c5:be:b6:99:25:48:e4:eb:ac:f5:2d:b1:
72:23:7d:a9:b0:64:e8:00:0f:89:d5:f3:51:90:97:50:cb:4c:
d7:98:a4:d0:42:7e:d5:ff:04:34:0d:5b:ea:4b:65:9a:b5:9a:
8c:d8:b4:a2:c7:5a:95:e6:7b:37:28:82:47:b4:a9:9f:f1:ee:
45:17:ac:a9:7e:fb:42:e0:47:8b:00:ac:76:55:15:17:b3:f0:
45:62:68:4d:e6:bd:6a:14:ba:81:1d:6d:dd:08:b2:c1:20:be:
8a:9c:98:88:6f:7a:9d:da:c3:ca:3c:93:66:c7:cf:a1:8b:ad:
51:d5:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:18:38 2025 by rpki-client