Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: rYxZD5IV7+DspgbWbpxEGAj+DbBDubyWzFdTMYUcRYM=
Subject key identifier: 93:B9:BF:48:FA:98:31:3D:04:22:4B:B7:9F:FF:68:6E:3F:F6:0D:92
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019A258A65E1E2285AFA5C921F7864E0145F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 01D0
Signing time: Mon 27 Oct 2025 12:00:18 +0000
Manifest this update: Mon 27 Oct 2025 12:00:18 +0000
Manifest next update: Tue 28 Oct 2025 12:00:18 +0000
Files and hashes: 1: WcOI3xTree4feiB1aUEElS0psWg.roa (hash: aiHJErdFTntBFa2VGlw5qxOEBnPaXQitP2e0+IPbQn4=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: MII+LgnhrCggz9YMXOGwsE/Y1JVsgajCANOY9706hvk=)
3: rJhQc64vZyQK9s6luNANsgKcie4.roa (hash: Wbhd0vQIHlwhZqfDUEHqh+EPALpqB/xJq31v2DZm/Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:65:e1:e2:28:5a:fa:5c:92:1f:78:64:e0:14:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Oct 27 12:00:18 2025 GMT
Not After : Oct 28 12:00:18 2025 GMT
Subject: CN=93b9bf48fa98313d04224bb79fff686e3ff60d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:27:02:20:28:f5:6f:68:f5:ca:9d:1e:21:
62:3e:ef:24:29:5b:2b:8d:8d:25:94:30:0f:fe:aa:
34:42:e9:7d:a1:6c:d3:b9:f8:e4:9d:08:b6:2e:f3:
d3:89:ae:ae:e1:d6:41:19:a3:5d:4c:46:33:4c:66:
d9:72:0b:a4:77:7f:1e:75:96:fb:4d:76:77:78:f7:
7e:15:7c:24:f3:09:fa:70:6f:13:ff:bc:76:68:2c:
f9:43:61:9d:bd:c3:35:c9:7c:ef:21:53:f6:e2:88:
e1:bd:d2:d3:20:81:14:62:c5:6c:b7:ee:ca:48:c4:
e2:6f:04:df:49:56:b2:ee:43:b0:ed:56:2f:59:da:
5b:85:00:c2:5f:f9:49:c3:34:38:86:b0:74:2b:02:
8e:c1:9f:14:29:95:bb:ac:de:09:b9:3d:ec:d4:83:
03:20:fa:38:a9:08:d0:a1:75:2d:c6:06:5b:ba:7b:
4e:d0:b9:2a:f5:d3:8f:53:ae:32:5d:4d:2f:e8:8b:
db:36:3b:a0:91:2b:45:b6:89:99:0f:62:a2:22:79:
d5:84:b1:12:9c:30:da:6a:34:ab:11:80:5a:ee:75:
fa:84:ca:e8:e1:26:ee:c3:38:c4:59:d5:af:0f:71:
8d:4e:29:36:a6:d3:0c:ea:d3:cc:26:19:e1:b3:3b:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B9:BF:48:FA:98:31:3D:04:22:4B:B7:9F:FF:68:6E:3F:F6:0D:92
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:4c:aa:08:48:21:9f:ec:be:3d:ac:10:7e:e8:2d:db:ea:
92:a6:59:6a:64:8d:6b:1c:2d:25:10:84:eb:76:d8:86:5b:a2:
6c:4f:77:e7:b9:cc:4e:f3:af:00:30:c0:75:05:58:5d:af:74:
44:fc:67:1a:67:90:f6:0a:eb:74:db:4b:ce:65:87:b0:f1:76:
6c:63:f4:ba:68:9b:cd:2b:c3:69:52:d1:3e:b9:d7:4f:7d:03:
03:de:e5:93:7e:04:df:9e:48:2a:1a:ea:c4:7b:cf:01:6b:38:
16:75:27:8b:6a:f9:26:f7:1e:c0:d2:e2:7c:9f:85:f5:3c:5a:
49:33:83:52:75:74:90:2c:27:1e:20:68:90:4b:0a:6b:47:38:
02:ac:c8:bd:c0:d7:06:48:c0:3c:0e:6a:91:a7:58:83:e5:ee:
af:20:dc:6b:74:01:75:5f:4d:b9:7b:54:96:3e:d0:b5:38:e3:
98:b8:1f:2c:e5:de:ca:2a:66:ff:b4:ee:0c:1c:be:9b:2c:2a:
5a:9a:2e:af:e8:d9:1c:b9:cf:f3:ee:2b:cc:88:75:7e:34:d7:
bb:90:f9:11:db:4d:f3:b2:46:2d:f1:db:ac:72:1b:f8:97:f6:
da:44:0b:f3:32:02:fb:4e:88:ad:9b:4b:a1:f2:bb:8c:d6:9e:
43:27:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:49:48 2025 by rpki-client