Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: Op0Vxcoll15JY8IgIJoirraEHyWklf3iQAVQlxQfYdk=
Subject key identifier: F5:78:2A:64:E6:06:06:2A:9C:E0:9F:2B:94:EC:02:AF:3E:51:34:77
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019A232E0AAAF9C004B345425D894D729B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 143F
Signing time: Mon 27 Oct 2025 01:00:11 +0000
Manifest this update: Mon 27 Oct 2025 01:00:11 +0000
Manifest next update: Tue 28 Oct 2025 01:00:11 +0000
Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: RmYOsZLHTbnra3BibbB6O/kKbh1Qm5KvCbrPkW4nJHs=)
3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:0a:aa:f9:c0:04:b3:45:42:5d:89:4d:72:9b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Oct 27 01:00:11 2025 GMT
Not After : Oct 28 01:00:11 2025 GMT
Subject: CN=f5782a64e606062a9ce09f2b94ec02af3e513477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:e2:58:71:bd:18:f4:7a:59:4d:73:b9:65:
cc:eb:20:d8:c8:b0:1b:dd:8d:90:a4:02:b3:10:a4:
38:55:30:40:f0:aa:91:5b:07:b3:22:9f:4e:68:5d:
6f:49:d0:df:17:7c:9b:bb:60:80:d7:05:1f:47:08:
a3:89:06:12:a2:d6:ee:f6:67:28:dd:b1:61:bb:0d:
64:dd:66:1c:25:8e:9c:c4:5c:85:46:ef:f1:70:a3:
da:53:4c:4f:de:8d:a2:18:f4:98:45:a2:d1:5a:96:
44:b4:d2:f2:68:a7:36:bf:19:5d:5c:e7:a1:34:9d:
e7:74:02:9b:69:5c:de:2f:5c:1a:e9:56:49:a8:24:
37:2c:bb:0f:20:ed:24:1e:49:4a:fd:35:d0:75:48:
ca:49:d9:4c:45:ff:62:21:22:f5:bf:64:8c:07:2c:
53:2b:c7:7e:7b:16:ac:dd:e8:2e:b4:ce:06:6f:05:
91:5a:04:a5:90:c5:e9:be:80:1a:8e:9f:2b:db:fd:
f9:c3:e6:15:7b:0d:b4:79:b2:b6:63:d7:4e:b5:a8:
3f:f5:0f:2d:74:e9:92:89:bf:e9:17:98:a5:d8:39:
f6:dd:8b:9d:6d:2f:14:8f:37:80:c3:ff:9a:21:9f:
75:50:52:b4:46:07:40:66:55:b0:56:2e:bb:ba:04:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:78:2A:64:E6:06:06:2A:9C:E0:9F:2B:94:EC:02:AF:3E:51:34:77
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0c:86:11:35:63:82:69:3d:79:4f:42:5f:66:3c:3d:1a:53:
f5:d2:1b:13:51:10:7b:a5:3f:33:8b:97:3b:88:d8:4c:75:09:
d3:94:3e:3c:f6:4c:b1:a4:fa:98:85:de:bb:a2:35:cf:8a:0c:
93:70:f7:48:c1:49:a7:09:89:6d:92:c2:b3:b5:d1:70:6c:74:
f3:46:60:c7:13:fc:e1:4c:00:8d:eb:d5:df:89:1c:53:2e:00:
42:80:58:1e:c4:7d:a8:75:1e:a7:18:9b:fe:59:bc:58:71:35:
b3:be:0e:9a:e1:50:f3:d1:5f:db:b1:12:90:f8:fb:b6:61:32:
86:de:71:c1:00:fb:2f:ed:7d:50:62:b9:c9:96:33:15:b6:1b:
ee:99:31:b2:09:0e:dc:71:07:c0:9d:24:3a:e0:fd:ce:82:22:
a8:30:4e:2b:a0:ae:20:87:6f:fc:5a:f6:e1:83:5c:64:df:c1:
91:f3:7b:48:07:c1:63:cd:2c:2f:f8:8c:4e:13:6f:ed:5e:77:
ea:5f:ea:b8:63:bb:6a:92:c4:2e:b4:ef:00:91:45:05:0f:df:
f6:c8:19:99:7b:4d:2d:a7:c3:9d:b7:d2:03:cc:c5:fd:16:0e:
74:37:b0:e6:67:08:77:4d:80:6d:95:00:6d:49:20:ad:73:5b:
87:b9:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:25 2025 by rpki-client