Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: lPXK8XpniBYXRG4WYItvvfO9PCQp9fCrbcUlj5dLcCM=
Subject key identifier: C8:C5:D8:D0:39:25:F5:EF:91:6E:8E:D1:6A:D4:EC:C4:78:A3:C8:B6
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019A2B1F2ACFBE3B144F1F3680579B1120DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 14:00:54 +0000
Manifest this update: Tue 28 Oct 2025 14:00:54 +0000
Manifest next update: Wed 29 Oct 2025 14:00:54 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: gFYeMpM5kfKNGlwUOxQ4866q/x8RbUvQf4bWyVDG8E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:2a:cf:be:3b:14:4f:1f:36:80:57:9b:11:20:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Oct 28 14:00:54 2025 GMT
Not After : Oct 29 14:00:54 2025 GMT
Subject: CN=c8c5d8d03925f5ef916e8ed16ad4ecc478a3c8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:45:4a:15:7f:0b:8a:05:52:33:32:29:9b:
81:6c:35:35:55:7d:80:46:5f:09:59:f4:e2:b8:f2:
5b:ad:e7:b7:a4:39:03:ed:01:af:d0:76:4c:6c:af:
5e:47:c5:8d:46:9b:15:9e:9b:19:44:b0:32:f8:c7:
0c:a9:31:7f:b7:b6:37:cd:fb:06:92:cd:5b:fe:94:
d9:3d:88:b4:1e:c1:31:c2:80:8e:d2:e4:d2:6a:5d:
5b:6b:fc:3e:ce:f6:d3:40:6c:d7:9a:26:0c:5f:b8:
3a:c4:0a:f3:4b:bf:f1:a2:3d:ee:6d:cd:fc:19:7b:
3b:c7:d3:fe:75:e3:75:4c:b3:b3:31:2e:b9:78:3d:
1a:52:7c:03:95:09:c7:1b:b9:fa:c2:1c:fb:e4:80:
5f:31:51:f0:71:0e:7f:9e:79:ef:b8:57:2e:79:44:
50:88:49:b9:77:9e:8e:08:b2:0e:9b:33:c0:d7:10:
fd:54:23:6e:36:0e:93:ea:fc:29:6b:36:2b:2c:ec:
80:11:e3:b7:8e:49:0f:f8:9a:e0:85:66:e7:6b:fa:
87:bf:90:b7:b5:ac:5f:fe:1b:f5:b1:68:42:ab:bb:
b2:fa:15:4a:ee:aa:c5:b8:e7:07:f2:56:25:75:c8:
a6:08:ea:01:c8:40:8b:ba:aa:75:32:67:ac:64:f6:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C5:D8:D0:39:25:F5:EF:91:6E:8E:D1:6A:D4:EC:C4:78:A3:C8:B6
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e8:41:03:40:8d:03:de:08:d6:37:5d:03:2b:04:3c:f0:07:
cf:bc:90:c4:cb:04:fd:d7:3e:45:1c:2d:6c:3c:ab:21:ed:ed:
43:07:7f:fe:04:fe:47:69:4d:88:34:37:db:fe:4c:bf:49:c5:
01:db:df:c2:16:58:4e:54:e3:92:24:ec:dd:fa:72:7d:f8:e1:
19:d8:83:d5:9d:1c:0f:bf:39:f9:d5:08:b4:6d:d3:72:c9:c3:
db:11:3b:0d:c9:ab:eb:34:dc:1d:54:69:41:c7:72:f7:9f:9a:
af:3c:0a:e3:b4:00:40:13:58:43:51:aa:73:72:36:75:03:64:
ab:da:0e:c5:6e:ff:32:fa:6d:3e:06:8f:81:7c:b5:d9:9a:cb:
6d:40:00:86:ba:ce:2a:9f:da:15:a8:4c:f9:aa:58:a3:d7:9d:
00:eb:09:ca:a0:46:77:29:84:6b:a3:3a:d4:89:2f:43:c0:20:
c0:93:6a:a1:c5:ff:9d:05:39:f0:d0:f0:96:d9:ab:5e:16:c8:
99:e2:b9:aa:b0:49:b4:80:e6:8b:43:0e:27:07:fa:bd:10:7f:
2e:8c:08:f5:5b:41:9d:3b:f6:cc:6e:fc:3a:d6:fe:cc:6a:32:
2d:7e:6d:d4:ce:96:bc:46:86:6f:aa:9b:7f:ca:5a:47:9e:c2:
d2:fb:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:11:47 2025 by rpki-client