Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
File: OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json)
Hash identifier: s1oZ6WdPQbR2ZPgoItI4RS3i7I4hb66i4wLm5gcdgPU=
Subject key identifier: F8:62:EB:48:A0:2A:FD:EA:D2:EA:7C:40:40:4D:93:5D:5B:1F:A4:18
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial: 019A1F1A456055DBD476592A8A9C3055D2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 06:00:06 +0000
Manifest this update: Sun 26 Oct 2025 06:00:06 +0000
Manifest next update: Mon 27 Oct 2025 06:00:06 +0000
Files and hashes: 1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: 3rawNl+XUmx9UJQDLn+1wjiU8ZkcpQ30f7aWjyoKsXA=)
2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:45:60:55:db:d4:76:59:2a:8a:9c:30:55:d2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39469af33611b79084f575e95b13e66550edb383
Validity
Not Before: Oct 26 06:00:06 2025 GMT
Not After : Oct 27 06:00:06 2025 GMT
Subject: CN=f862eb48a02afdead2ea7c40404d935d5b1fa418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:c7:ac:62:14:89:6f:f3:c7:73:ea:18:fd:
18:65:b1:86:66:84:26:58:a8:0b:40:49:2a:07:da:
f7:df:24:58:c9:c9:e7:3a:76:4d:5b:b7:5e:75:96:
02:e0:1e:80:5c:c9:1c:57:7e:93:f2:c5:96:3f:82:
d9:61:87:09:20:84:93:52:44:d5:d8:82:73:f0:e7:
56:4f:a1:c4:9e:4e:ed:9a:a1:1d:d6:0e:25:53:1f:
45:fa:92:e7:39:30:d2:ea:39:de:38:a7:f6:81:d0:
84:f1:17:5a:09:6b:c1:d3:02:6e:61:16:f5:76:3f:
41:db:06:e3:03:b0:25:23:6c:9c:fd:5e:26:4b:c7:
1f:ab:9c:d6:e4:35:8c:82:d7:61:87:dd:a6:3d:1d:
ef:7c:7d:95:e0:65:ab:bc:33:41:97:f3:40:1a:89:
d2:7a:d2:0f:b0:3e:d1:41:bc:13:99:c8:d0:ff:8f:
d3:7f:4f:e6:0c:f2:9a:ef:dd:c6:a2:1c:2e:3c:68:
a4:d7:65:64:30:0b:18:6b:b6:90:73:19:25:b9:a7:
62:58:80:a3:4a:3c:e2:48:11:3f:e3:76:c6:73:6c:
fc:e1:3d:7e:ab:99:54:09:f0:a8:50:74:73:d4:ed:
36:7c:3f:3d:94:78:e2:80:6e:5f:34:c4:be:75:d8:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:EB:48:A0:2A:FD:EA:D2:EA:7C:40:40:4D:93:5D:5B:1F:A4:18
X509v3 Authority Key Identifier:
keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:50:d0:dc:f8:49:dd:f2:3f:9e:68:20:ce:a3:83:9e:47:e2:
69:8f:00:49:3d:9c:70:ed:09:b2:85:72:6f:e3:de:80:5c:16:
74:a8:f8:6c:97:c5:5b:04:07:f8:a8:c0:96:6a:d8:c4:30:90:
1b:c8:76:89:d2:b1:0e:eb:dd:0e:a8:0f:00:88:7a:20:79:8d:
c6:f1:ab:ed:d9:82:e1:ef:9d:0c:ec:39:34:5c:18:01:57:d3:
7e:6f:23:67:68:4a:ab:8d:b7:e4:a6:dd:98:72:20:b0:f5:f0:
71:a8:9c:a1:01:39:46:ff:3e:65:a7:81:32:db:d2:a7:40:8a:
e9:e3:9e:a4:6f:fa:6e:2f:37:13:02:21:65:4c:3c:05:0d:c5:
4a:86:95:1f:fc:5b:67:66:d1:45:ff:d0:d3:55:e8:94:77:5a:
06:c4:42:92:d3:ee:88:5d:e8:40:c6:d8:59:16:1f:37:68:58:
b5:13:7c:e7:6e:7d:9c:cb:a6:2b:e7:1b:77:53:a4:18:ea:32:
c7:43:f9:81:20:4e:4f:76:80:a7:5f:b4:90:b5:a5:a3:19:68:
a3:a0:09:5d:25:09:98:d9:97:29:0d:48:62:b4:8e:89:ce:04:
ab:07:5a:13:5d:5f:6e:cd:89:b1:e9:a9:31:39:bc:a8:22:98:
cd:71:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:37:10 2025 by rpki-client