Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: Hg3ozShQi6Yhs9lPQCjK9rvY66n0DifuYLwNSvM2eMM=
Subject key identifier: 68:D1:63:AC:CD:A9:AD:59:1C:66:56:E9:6A:01:03:AD:37:FB:DA:33
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 019A1C50B882D72FC30CBD37232189F003EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 02E1
Signing time: Sat 25 Oct 2025 17:00:43 +0000
Manifest this update: Sat 25 Oct 2025 17:00:43 +0000
Manifest next update: Sun 26 Oct 2025 17:00:43 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: hO1mjCLRPwP35jEdWeDaC4qNM/McXEx6XEktDXcfR/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:b8:82:d7:2f:c3:0c:bd:37:23:21:89:f0:03:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Oct 25 17:00:43 2025 GMT
Not After : Oct 26 17:00:43 2025 GMT
Subject: CN=68d163accda9ad591c6656e96a0103ad37fbda33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:5a:f5:2b:65:97:7a:b5:28:cf:2b:6a:43:
9e:e8:d6:67:dc:b7:dc:92:06:2d:c6:dc:16:d5:c0:
cf:58:37:42:59:6f:c4:98:b0:74:37:1d:89:44:a5:
39:6f:12:e0:0f:31:05:48:6e:68:70:eb:f2:3b:5b:
dc:0b:8b:90:63:27:d1:fb:57:44:3c:13:38:31:85:
f3:9d:10:29:df:bf:2e:24:60:24:59:e5:a9:46:bf:
b6:3c:32:6e:ef:56:8f:08:c7:87:bb:8a:59:66:0e:
86:cd:ee:7f:77:a4:4a:fd:18:5f:d2:33:89:a4:17:
d4:b3:16:73:25:ba:ea:a0:7f:c2:ff:7d:03:7f:c3:
52:18:de:7b:0e:3c:90:06:e9:1e:db:f7:68:81:2e:
66:34:65:4e:9d:8d:8d:08:d3:67:51:7d:a2:9a:5d:
d1:4c:e4:53:e5:be:ac:75:b9:0c:2a:06:09:6a:dd:
e2:98:0c:8e:cc:36:5d:47:77:29:37:df:53:2c:ed:
66:be:53:40:05:d7:13:27:57:0e:12:a3:51:0d:dd:
92:ca:65:b8:9c:ae:91:c9:76:f6:71:09:b4:d9:7c:
f8:e9:6c:de:eb:49:f5:15:4b:92:77:28:16:ed:82:
8a:ae:60:0f:6a:ef:47:63:d9:fb:22:11:68:fb:0a:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:63:AC:CD:A9:AD:59:1C:66:56:E9:6A:01:03:AD:37:FB:DA:33
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e3:e7:29:b9:5c:87:df:70:ef:98:12:91:ff:b8:5d:9e:d6:
69:f9:2e:03:97:84:72:50:3c:0b:e0:c8:91:93:6f:23:da:82:
1e:32:95:ed:6a:0c:a3:88:95:e4:54:b7:0f:d1:59:90:d4:58:
9a:9d:9e:ec:c0:5b:82:ce:51:99:7c:60:d7:97:89:46:fd:87:
7e:8f:91:8c:c9:7f:98:28:f9:82:54:7f:b2:fc:f6:6d:e2:25:
2d:87:cd:6b:06:3c:8e:41:1c:6c:ff:68:c8:9b:09:d4:d1:83:
21:b7:b2:ae:73:37:3d:da:80:53:92:cd:27:29:7d:45:09:49:
90:5e:bd:20:06:8c:17:c2:6b:02:c0:19:b2:b6:02:bd:49:e8:
3d:b0:a5:a5:4d:7d:46:bf:4b:86:62:0d:3e:41:ad:67:78:6d:
2c:c9:15:65:fb:fc:8c:f0:92:a8:66:b0:8a:ff:09:aa:83:b3:
af:c9:2e:96:e3:db:82:ad:f5:dd:6f:3f:ef:69:b6:67:73:a0:
d0:e8:8b:51:9e:69:84:c8:1c:f6:33:39:33:cb:b6:e6:a9:ca:
d0:0d:55:23:7b:2f:b4:ee:0b:09:cf:50:ad:f2:a9:5c:3e:fa:
e9:9f:46:b8:cc:4e:12:8c:f8:5f:53:8b:a3:f7:31:ab:61:20:
b3:79:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:47:50 2025 by rpki-client