Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File: AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier: xxRrVM5XDpPPGu9RyK2LRqWsS8mAT7y+mb+iGp56ZRQ=
Subject key identifier: 25:F0:CC:07:96:46:94:00:5F:DA:25:EF:27:27:C5:AD:65:C5:50:9A
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 019A2477F01A7C9234A16A758DD2DD530F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number: 14B5
Signing time: Mon 27 Oct 2025 07:00:31 +0000
Manifest this update: Mon 27 Oct 2025 07:00:31 +0000
Manifest next update: Tue 28 Oct 2025 07:00:31 +0000
Files and hashes: 1: 05RxvRBbBF0K0L7oHhPtWLGcLm4.roa (hash: lHxh82AwcxG+P9d7k0EW3lrACdc9GnkC9jNymgDYTBo=)
2: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (hash: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=)
3: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: +wP1A7n/7o4WHobBFnJ/JfVHFWFZCrZ3RQ7c7pwY1QM=)
4: HWBncZpe-QUdI-UjKtD3KOuOa6Q.roa (hash: aEH99KCRztr3umg4l/8dfloLoZWlqbFbSYPxZ1bxlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:f0:1a:7c:92:34:a1:6a:75:8d:d2:dd:53:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Oct 27 07:00:31 2025 GMT
Not After : Oct 28 07:00:31 2025 GMT
Subject: CN=25f0cc07964694005fda25ef2727c5ad65c5509a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:eb:74:d7:45:9b:89:cf:be:70:47:7e:53:
68:55:bf:43:87:06:62:b1:26:6d:38:14:0d:79:00:
b9:cc:2f:9e:2f:9f:ba:d8:bb:eb:93:79:21:50:4b:
28:b1:6a:40:14:d9:1a:33:f3:8e:50:5a:4c:85:5e:
a5:39:ec:2e:41:e9:9b:c2:24:4d:fb:ab:87:a3:4a:
16:a2:11:cb:4c:58:36:a5:ee:bb:c9:17:fe:4c:2e:
7c:53:4d:55:cc:c0:3d:ec:22:2e:72:14:0c:82:c2:
60:36:20:fd:20:e6:0b:5f:34:36:6c:34:0a:31:9d:
74:69:a6:5b:76:90:28:dd:05:1a:79:76:24:01:3a:
87:cf:2e:d0:9d:e7:0c:f7:1a:e0:75:5a:30:d1:f1:
ba:ec:8f:53:ce:87:a3:a1:7e:23:98:22:84:a8:12:
ed:c2:f0:0f:5b:88:8a:f5:ad:bb:af:48:e5:dc:15:
48:75:ff:20:77:79:66:b4:2a:67:13:e2:ec:dd:09:
65:13:09:55:0d:e1:d9:b4:9e:06:9d:7c:ae:1e:ad:
71:ab:d1:95:9d:b8:43:d8:05:94:5b:3c:ab:41:58:
59:b2:89:e7:c5:b2:7f:57:65:c5:b6:ca:32:7a:5a:
35:f0:7e:5b:40:23:59:11:57:b2:3b:ae:4e:ee:86:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F0:CC:07:96:46:94:00:5F:DA:25:EF:27:27:C5:AD:65:C5:50:9A
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0c:9d:09:32:e5:47:86:72:00:76:83:4b:3b:31:21:9c:73:
03:a3:17:60:a2:76:7d:9a:0d:b4:89:c7:96:4d:4a:b5:b4:9b:
59:d3:e7:f3:f2:97:16:ce:10:fa:2e:fb:f1:40:77:18:84:97:
67:1a:50:60:4f:3b:c1:89:40:54:1c:eb:3d:60:55:a6:87:1d:
56:64:cf:b4:ad:b7:33:77:46:01:19:0f:00:aa:cd:81:1b:8c:
89:6b:d4:32:cd:6d:0f:2a:ea:c3:c4:88:7d:d2:60:fc:d1:c0:
08:97:64:45:d9:04:0d:06:7e:19:f4:83:ba:bf:e0:26:44:65:
97:83:ed:42:04:6a:12:da:ad:73:20:e5:6e:69:9b:3b:e9:f6:
d1:2c:55:e8:f4:62:ad:f4:b4:57:88:bd:97:50:e2:38:f4:4b:
3e:63:4e:a5:26:8a:63:ab:2c:94:59:69:4f:14:77:a4:95:2f:
4c:f0:68:cc:38:40:cd:db:fc:94:a8:83:6e:48:5c:b7:b9:3c:
42:d1:6b:9c:1e:bc:62:23:52:8c:90:c7:f7:1e:62:b2:52:0d:
bb:78:18:f4:1f:57:e9:57:6d:de:86:90:78:08:a5:fd:33:00:
04:08:b9:10:21:80:0a:8d:6f:ba:af:07:b7:4c:9d:f9:5b:b2:
e2:6f:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:23:23 2025 by rpki-client