Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File: u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier: RXp/yLn1v94UakIRVrEqivk63msgvt9a1G/JeIecIkE=
Subject key identifier: 16:E6:BA:12:DF:E8:F0:61:4D:F4:5F:E6:46:A5:EB:46:63:FF:4B:84
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial: 019A221BA512186F8553C18786DD281C5E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number: 035C
Signing time: Sun 26 Oct 2025 20:00:28 +0000
Manifest this update: Sun 26 Oct 2025 20:00:28 +0000
Manifest next update: Mon 27 Oct 2025 20:00:28 +0000
Files and hashes: 1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=)
2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=)
3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=)
4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: GHrTrZgrOcpnbaHJuUzlSNdHBV/DVzXirCANcqfKyZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:a5:12:18:6f:85:53:c1:87:86:dd:28:1c:5e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
Validity
Not Before: Oct 26 20:00:28 2025 GMT
Not After : Oct 27 20:00:28 2025 GMT
Subject: CN=16e6ba12dfe8f0614df45fe646a5eb4663ff4b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:fc:da:3e:47:63:db:a5:c2:bc:ab:41:27:
ba:53:dd:5d:d7:52:77:a1:c6:05:98:4b:ab:d0:a6:
80:2f:6c:a3:06:ed:ae:13:66:4d:6b:e4:40:e9:8f:
3d:51:ac:c8:26:59:f8:11:2a:70:c4:e0:04:e1:64:
a2:28:0c:f0:3d:aa:32:9e:18:46:ff:b5:4d:8e:be:
6d:12:d2:b4:1a:cb:e7:c0:bf:70:75:34:73:52:d4:
22:73:58:3e:9c:53:ff:7a:17:1b:2e:a8:9d:ae:c7:
54:cf:15:a8:0c:cd:a2:d4:bc:1b:38:86:5a:fb:f5:
65:3e:3b:83:e8:70:6f:a8:ab:a5:9f:26:ca:3b:61:
ab:2a:c9:42:24:51:6b:a6:01:75:92:78:19:96:94:
b2:3d:3d:8b:f1:7c:4c:77:cd:f1:f4:64:42:41:ae:
2d:86:84:81:dc:c5:21:91:fe:9b:fe:00:a1:34:4a:
b6:3e:02:6c:d2:51:ed:2d:f2:fb:50:9c:b5:68:d2:
3f:d3:da:f0:84:a3:3c:30:ea:cd:4f:7e:5f:be:84:
4c:aa:58:18:e9:ba:4b:30:8f:54:db:f1:d9:c5:1b:
0e:0f:4d:68:5b:d3:6f:10:a0:56:4f:74:1a:41:3f:
a0:22:79:44:c7:c4:d4:35:88:5a:23:dc:93:20:de:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:BA:12:DF:E8:F0:61:4D:F4:5F:E6:46:A5:EB:46:63:FF:4B:84
X509v3 Authority Key Identifier:
keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e5:58:11:d1:26:9b:3d:07:a6:d5:db:e8:96:ea:8d:dc:a6:
ed:66:b5:25:ef:3f:f1:08:9b:40:71:5f:c9:6e:5d:a9:fe:7a:
a6:69:ef:2e:14:ce:24:ef:0b:09:0a:25:9a:ed:5c:e7:4a:e6:
4e:8e:d2:9c:5b:f1:55:0c:ad:c1:2b:bd:8a:00:94:79:76:da:
c0:75:3c:16:8c:e4:b5:5d:33:18:dd:86:79:bd:c3:79:59:94:
37:cd:6a:18:83:09:97:4e:17:8c:75:9f:45:10:a4:9c:b1:4b:
d5:8b:ec:9f:f6:11:05:e6:c9:05:d8:0d:f4:19:62:9e:d0:62:
9d:6e:73:8a:66:b7:b4:0b:01:be:3e:08:50:4a:08:26:54:3a:
88:92:80:eb:00:11:d5:73:ff:f8:08:6c:3f:28:ab:d0:da:71:
7a:32:19:14:17:4b:e1:01:35:59:75:e3:ae:fa:82:bc:29:01:
49:36:f0:ee:d0:b4:48:7f:2b:dc:b1:3f:cf:3a:84:be:d1:3b:
8a:c8:22:ea:21:41:78:2a:9c:d4:86:d3:87:3b:2d:75:56:7c:
f8:21:ff:73:5a:2c:ff:03:35:75:ff:9d:e6:64:f0:e2:67:d5:
88:8c:96:7d:52:1e:9d:25:e2:a5:ae:34:34:75:39:82:e4:87:
96:cc:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:59 2025 by rpki-client