Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: w3aJnythIG3SIksdtOOj2WnxdMKf2tZ2gQ41zrdO7ek=
Subject key identifier: 17:3F:37:5B:17:24:B8:A9:29:16:91:2B:39:F6:26:A2:C8:08:A2:59
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 019A1986A3E8F6227E504218EB944F77B665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 04:00:45 +0000
Manifest this update: Sat 25 Oct 2025 04:00:45 +0000
Manifest next update: Sun 26 Oct 2025 04:00:45 +0000
Files and hashes: 1: IXwdyS86SbDEc5r6DTqF-yyMhKo.roa (hash: MHPw/G9JdYVbN864pG/b/kFkrvcqi5VhnKr+4T0l/48=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: wtYNGX+nfOpkIiqtY8NO3VI/5PM/eyisTLEMYsPS8lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:a3:e8:f6:22:7e:50:42:18:eb:94:4f:77:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Oct 25 04:00:45 2025 GMT
Not After : Oct 26 04:00:45 2025 GMT
Subject: CN=173f375b1724b8a92916912b39f626a2c808a259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:3f:b8:37:86:03:a7:f3:ea:c6:1e:e5:91:
59:6d:9f:c5:c8:5c:3a:af:a2:80:de:f1:d5:fe:bc:
bc:42:15:6f:bb:e4:fa:8e:56:42:b6:62:1b:2d:f6:
5e:fc:1a:ac:d4:42:fe:3a:06:f1:a8:23:87:5d:4c:
30:82:33:4c:67:3d:96:13:93:e4:10:1a:60:f2:ad:
d2:05:e7:ca:d3:b1:3c:51:9f:01:69:75:10:c2:06:
d7:cd:25:8c:e8:72:70:ad:a1:89:f0:85:4f:47:82:
96:a1:b9:74:bd:9c:de:42:70:e2:96:89:0b:53:4e:
62:86:aa:35:d0:d3:10:fc:de:6e:ec:22:a1:f3:c4:
46:e3:0f:10:21:df:bf:10:ea:73:29:50:9e:1f:68:
4f:26:72:80:12:1b:3c:99:ef:70:2a:f4:0e:2d:a9:
ab:b3:91:74:4d:25:ab:08:22:91:4a:db:5f:cb:bd:
9b:02:12:55:b2:df:67:f3:45:eb:ce:03:0b:37:4b:
4c:b6:af:52:3f:0b:e2:b0:8f:c2:c0:47:28:6b:0a:
47:ed:2f:b5:5c:de:e3:2c:3e:b2:d8:4a:32:3c:10:
59:24:6a:51:bf:e6:bf:d2:c2:d8:30:7e:b1:00:91:
be:f9:5f:b2:45:15:a5:4e:38:d3:11:68:a8:5c:df:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:37:5B:17:24:B8:A9:29:16:91:2B:39:F6:26:A2:C8:08:A2:59
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:30:4a:bf:4c:5b:16:72:97:c0:6c:75:86:8a:99:34:65:87:
22:86:59:5c:e4:bc:13:f1:58:27:19:a0:39:37:43:bd:30:a4:
6c:66:8e:81:15:28:50:c7:b5:81:e8:64:90:74:d5:00:7c:c1:
1f:58:c4:a5:bc:57:bd:11:27:0a:f1:87:04:60:a1:b1:c3:73:
c5:73:8d:81:ed:a2:8c:e4:eb:91:d8:51:d7:12:37:4c:47:20:
f5:18:d4:98:3f:01:cf:54:20:94:c2:16:84:33:0d:25:e2:21:
a5:9e:85:56:0f:b8:69:cb:0d:b9:7b:2a:e0:a8:6b:54:c0:e6:
0c:fc:55:ad:f7:b5:db:b8:2c:a0:a2:3b:83:74:fa:0d:58:d6:
23:08:37:e4:c8:53:46:dd:5c:00:1e:69:9b:09:b2:9c:09:f6:
3d:7f:88:4e:f2:73:c7:df:14:58:a8:2c:cb:0f:69:86:4d:d5:
0f:4d:7c:40:35:36:e1:00:32:9a:c7:3f:9e:99:61:2c:59:ec:
e6:20:95:ec:a9:30:c4:71:14:66:6f:fa:14:07:d9:17:83:e1:
ee:d4:1c:64:f7:01:5c:5f:89:ad:de:f1:47:84:eb:bd:6f:2d:
9c:9d:44:ea:76:f4:6a:cf:e3:78:97:74:d3:2c:bb:b4:a6:f8:
11:cd:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:42:06 2025 by rpki-client