Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: wXWprzQ6GTMB1F4RbNKiIGl4MOFW5sIuwVpfMwmY5+4=
Subject key identifier: 28:88:E6:80:C8:64:2C:C4:F9:86:9C:4C:C9:1C:0A:59:8D:BB:2F:96
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 019A288B7930589E7F75EE9BB18FE22BFA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 02:00:20 +0000
Manifest this update: Tue 28 Oct 2025 02:00:20 +0000
Manifest next update: Wed 29 Oct 2025 02:00:20 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: AOXmy2koLGq4SXYNyNPSL3gbkjPoayIRdMw4uxPaQXc=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:79:30:58:9e:7f:75:ee:9b:b1:8f:e2:2b:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Oct 28 02:00:20 2025 GMT
Not After : Oct 29 02:00:20 2025 GMT
Subject: CN=2888e680c8642cc4f9869c4cc91c0a598dbb2f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:15:8b:0f:26:fc:2c:01:60:32:4c:d7:fa:
d3:ce:e7:12:e3:1c:82:11:e7:30:cd:b2:b9:8c:97:
43:18:02:e0:da:f4:46:98:1a:c0:c5:93:d1:f3:c7:
82:48:45:36:9f:91:c9:5f:bd:92:c5:76:d1:e6:1b:
fc:bf:27:2a:9b:a1:da:7c:a9:d5:d4:51:13:e4:ec:
7f:36:e8:43:56:4e:14:80:13:fd:ae:85:ea:63:e4:
7e:67:77:2d:89:62:7a:c8:6f:19:af:36:df:32:2f:
87:4e:de:9c:80:58:ed:fc:81:a5:10:db:95:10:de:
03:1e:9c:02:69:d0:4b:6a:3e:eb:e2:d3:b7:25:fc:
c0:87:d6:9a:9f:b5:99:d1:43:35:27:ce:7f:aa:6b:
74:b9:b6:c9:85:56:bd:98:c7:7a:8a:f1:7e:ed:50:
c8:2f:a4:82:b9:4b:2b:62:6e:e2:2a:a7:1a:c8:d7:
f2:c1:fd:a1:b0:a0:86:7e:28:e8:79:2a:03:b4:74:
62:d6:4d:1d:4d:65:5c:3e:00:94:f0:fc:c5:9f:b9:
84:6c:51:68:aa:20:b6:2e:dd:26:6a:51:8f:eb:ce:
0a:d7:f2:ef:de:3d:c7:63:0c:72:bc:6f:89:3c:24:
7c:d2:a0:6d:b2:e6:92:9d:30:ef:54:85:30:86:9d:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:88:E6:80:C8:64:2C:C4:F9:86:9C:4C:C9:1C:0A:59:8D:BB:2F:96
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:36:4b:e1:e0:b3:66:bd:a0:71:c7:63:5a:93:01:32:18:22:
a4:2c:8e:71:ae:16:09:e7:d7:ae:33:7e:b0:06:86:1f:c7:c8:
45:bf:8f:f8:26:19:80:9e:14:9b:c2:41:53:d7:24:98:6c:82:
a6:2d:09:65:6e:d9:a3:d3:61:9f:71:59:d4:a6:9d:9f:70:e7:
41:b2:e7:46:06:d7:4f:ef:bb:6d:f3:2f:f4:6c:5e:11:b0:1a:
88:9b:c9:82:67:92:40:e6:92:bc:f7:79:a0:93:1d:c6:9e:95:
92:8b:19:27:d1:db:88:82:5b:aa:70:c0:51:48:b2:44:14:0b:
0f:0f:f8:57:2c:da:a0:27:2a:f5:7e:91:a4:ce:c5:48:d6:45:
ee:04:0a:a5:9d:e3:33:5c:88:c5:8a:cb:35:14:ae:e3:ba:39:
89:da:94:02:11:a9:7f:17:d1:d0:04:34:08:70:8b:05:31:d9:
03:2a:42:48:f6:b9:08:a3:8a:3f:c5:af:87:bd:6d:1d:75:57:
e3:76:95:62:1d:18:3a:78:d6:ca:35:8a:8a:93:19:e8:0e:3e:
c8:ed:16:56:a0:f9:fb:d3:b0:4f:34:0c:2e:0d:08:a2:95:50:
d2:c6:e2:1e:dc:38:87:b1:9c:f6:17:4a:79:a0:bc:7f:66:33:
b9:47:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:58:23 2025 by rpki-client