Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: DJk1Hat7Ee21Jj+Yc0fSrdAsOXf1N1OQ4utrAtiIIHA=
Subject key identifier: 18:72:46:3F:72:D9:AB:BB:B0:72:6C:FB:0C:67:7F:88:EE:A1:8A:7F
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019A25F808BE46EAE22D5146BE94E1D64A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 1650
Signing time: Mon 27 Oct 2025 14:00:03 +0000
Manifest this update: Mon 27 Oct 2025 14:00:03 +0000
Manifest next update: Tue 28 Oct 2025 14:00:03 +0000
Files and hashes: 1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: sWwh5koT2yFekkSCShqmtLUKP8HPK+ApmbuspldRjDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:08:be:46:ea:e2:2d:51:46:be:94:e1:d6:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Oct 27 14:00:03 2025 GMT
Not After : Oct 28 14:00:03 2025 GMT
Subject: CN=1872463f72d9abbbb0726cfb0c677f88eea18a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:a4:5f:fc:f6:d4:90:46:32:cf:f8:ba:e6:
ae:6b:73:05:1e:2e:1e:6a:48:a1:c5:96:b8:63:c5:
94:f3:86:12:e3:80:7f:7c:f6:3d:15:55:81:95:4f:
e8:fe:e0:e2:d6:b5:92:55:e6:75:23:00:53:31:a7:
2c:85:7a:de:cf:38:e5:92:a6:59:2a:ec:33:53:69:
0a:b3:24:03:b3:f6:d2:ee:6d:93:65:bc:9b:61:e6:
60:82:49:59:57:a3:71:27:d1:fe:0a:36:a2:05:c5:
58:2a:15:30:50:2d:a4:dd:5e:76:92:b9:57:14:8b:
b6:5d:2c:64:e5:62:4f:27:db:c7:a6:02:7e:e5:60:
58:80:2a:b9:1c:56:9f:70:59:cd:76:ff:aa:bf:6c:
d7:89:55:7d:b7:33:af:47:86:38:10:33:c2:0f:ef:
3f:5d:6b:f1:84:a9:16:6a:a0:0a:df:59:84:8c:02:
b1:f9:3a:74:8c:47:b4:d5:9a:ec:27:01:f9:7f:e9:
1e:d6:00:3f:ba:eb:57:31:4d:e1:20:42:78:d1:dd:
a5:a7:6a:28:8b:ee:cc:a6:1d:45:6a:f3:bb:3d:48:
c1:3e:5c:f4:1a:51:74:3f:c5:3f:29:4e:96:ab:0d:
88:e1:30:c5:3b:69:1b:22:07:7b:b9:08:f2:9c:b8:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:72:46:3F:72:D9:AB:BB:B0:72:6C:FB:0C:67:7F:88:EE:A1:8A:7F
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:47:d9:fc:12:ac:c9:d6:b0:1a:1d:2f:a9:f8:7f:5d:d1:91:
57:ec:6a:8b:37:ea:ca:1b:ef:e2:40:3f:ff:02:81:a0:48:d5:
37:31:66:8b:82:6d:89:7f:2d:12:a4:ab:3d:a1:93:40:9b:23:
63:d4:fe:e4:a8:8d:58:6f:d1:bf:88:96:61:f6:ad:4b:eb:a6:
4f:44:e0:d7:b7:3a:4a:53:35:b3:3d:ce:f5:c7:00:2b:14:6e:
82:75:e0:d3:3e:f5:b8:d8:26:49:fb:0f:40:cc:6a:42:47:ca:
41:f6:03:ab:5a:b0:55:53:d4:72:7c:8f:b7:4d:f1:c2:c5:97:
fa:9e:08:69:1c:ab:6a:1b:22:7e:09:f4:8f:f6:09:42:02:ff:
a7:20:5c:92:ce:db:ad:f8:52:aa:d2:86:37:75:8a:2a:ca:9e:
d9:5c:5e:80:ea:03:76:20:1f:55:03:c4:d0:9b:36:83:90:9b:
f6:1f:c1:4f:04:e6:c8:5d:0b:59:03:3a:7b:3f:65:e0:5b:ed:
57:1f:7c:bb:6f:06:22:f4:1a:bc:52:f9:84:95:25:f9:38:34:
a2:d0:6d:90:23:2f:06:da:b4:98:04:38:15:77:f6:02:47:05:
61:c2:8a:4f:2f:86:df:43:c4:2e:b4:49:f8:47:2c:69:81:1a:
5b:a9:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:34:35 2025 by rpki-client