Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: 8P/UUrLGW/RohgeMBIwGdqieyB3CittTYl4sXx9159A=
Subject key identifier: BD:09:F4:DD:70:BA:29:24:D6:0C:20:1E:57:12:C7:41:A4:C1:B6:6F
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019A0FDECB26890641E125094D128FCA254C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1704
Signing time: Thu 23 Oct 2025 07:00:50 +0000
Manifest this update: Thu 23 Oct 2025 07:00:50 +0000
Manifest next update: Fri 24 Oct 2025 07:00:50 +0000
Files and hashes: 1: OMJBBrbct5lJ3NPYQmwZDQfwPtI.roa (hash: P3SI0RFFQoE5StxjZVsTtoH382rKU+KGYXsOJugHreU=)
2: cJdu0V5pMBHO2m87So-B01Jh_Jc.roa (hash: 6fxmkYyCblDli/sa68IlSqPDlhmdfGTFCuG9dCmK83s=)
3: iXq0qrpCPo99PfUTjErWp7OhuBI.roa (hash: X22zlHUhN0LvDPli4rURv75ZdIFsXhRBny1jLbjYx7g=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: b658qF8Hx8NJkBJgn8jq6ev/9/3/5ZOeVAqi7yqBoTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:de:cb:26:89:06:41:e1:25:09:4d:12:8f:ca:25:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Oct 23 07:00:50 2025 GMT
Not After : Oct 24 07:00:50 2025 GMT
Subject: CN=bd09f4dd70ba2924d60c201e5712c741a4c1b66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:10:43:6d:9e:7b:33:76:99:cd:45:9c:cb:
35:13:41:44:6c:e3:39:e0:fe:84:27:76:6d:54:7c:
ae:dd:de:a0:4c:e9:07:55:a4:89:df:ab:3d:e1:41:
1e:ef:51:08:8e:18:d4:72:87:b7:ae:07:a9:96:38:
b4:83:bd:ef:89:d0:59:ae:37:43:3c:6e:2a:e2:ba:
a7:53:ff:64:12:7e:44:06:8c:2f:20:19:09:8d:84:
32:6f:a6:51:24:ea:25:6e:86:a6:15:90:76:99:4b:
c7:68:33:fd:0c:df:4b:de:c9:8e:4e:f5:d1:79:68:
6f:01:29:a8:19:f7:a3:1f:05:49:aa:46:10:13:1c:
6b:da:44:5b:b8:66:fd:97:81:d8:c7:18:5d:10:ff:
9e:26:32:ae:b6:6e:d4:71:e8:6e:30:ef:30:41:ac:
eb:6b:af:97:d2:ce:30:76:c4:56:60:c5:07:2b:b9:
d4:3f:b5:0a:84:78:8b:00:ab:fa:36:21:56:e1:7f:
c1:ec:af:1c:af:ec:87:aa:7b:84:73:05:18:14:7c:
47:0a:71:bc:88:44:e1:d4:01:49:b9:0e:cb:c4:7f:
6f:46:13:24:e1:54:b2:89:0c:77:e0:d8:83:72:94:
a6:c7:69:f0:ca:23:d8:20:b7:04:4b:35:f9:af:8f:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:F4:DD:70:BA:29:24:D6:0C:20:1E:57:12:C7:41:A4:C1:B6:6F
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6b:4c:9a:a5:63:e9:7c:56:73:10:40:9c:26:d8:99:3d:3a:
90:49:c6:63:2c:80:d2:cc:ac:62:33:2b:09:32:df:a9:11:13:
3a:64:73:b1:b6:2c:70:da:2e:3b:db:b2:ae:2e:b3:1c:2b:6a:
fd:f2:5d:57:a5:10:c3:ff:72:2a:0c:3f:1c:51:ff:fd:83:bc:
6c:53:17:91:59:b4:10:b9:97:a7:73:fd:c4:df:4a:04:f5:2f:
20:53:c6:29:20:55:39:d3:28:99:9e:76:2d:5f:53:0b:91:d9:
3d:d9:ed:b4:25:1e:13:dc:21:1d:49:87:fe:1e:14:7d:cb:90:
d3:e0:b1:bd:2c:dc:1d:cf:4e:c3:88:5c:fd:2c:3e:5f:83:05:
7a:7c:a2:15:ea:f1:c3:d1:be:dd:8a:1e:35:c2:06:2f:7c:36:
4a:29:c4:14:df:dc:72:52:82:6e:c0:37:9c:d4:d2:12:8a:69:
90:6e:9a:98:42:03:1a:4d:cb:4e:86:a4:66:c0:ec:15:ed:49:
74:73:43:3f:3b:f7:73:3c:a4:18:52:03:db:d1:65:c7:4d:d5:
87:12:1e:a8:3a:fd:da:82:f0:33:58:97:63:0d:d5:a7:44:d1:
25:b2:04:41:f7:0d:7a:ba:d7:98:2e:50:7d:fe:b7:3a:00:8c:
a2:fe:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:38:26 2025 by rpki-client