Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: Wkfsgzt/qbg3vKkO+PQseDSgcsNV6JpnIyat8eBO5Ks=
Subject key identifier: E0:AD:C0:F6:59:7C:12:88:61:26:D6:F7:6A:A5:B7:72:E7:50:34:AC
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019A2553EAAC38A94C467B5D16BDEB6CCBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 11:00:47 +0000
Manifest this update: Mon 27 Oct 2025 11:00:47 +0000
Manifest next update: Tue 28 Oct 2025 11:00:47 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: CoKXkxRH0NXfln4x7UuAp4pBeQCGQyYw0GxrJBQhnJ4=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:ea:ac:38:a9:4c:46:7b:5d:16:bd:eb:6c:cb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Oct 27 11:00:47 2025 GMT
Not After : Oct 28 11:00:47 2025 GMT
Subject: CN=e0adc0f6597c12886126d6f76aa5b772e75034ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:6c:df:9f:91:60:76:5a:ba:b1:ac:39:5e:
89:7c:2b:5e:f6:eb:3c:2c:4a:2a:ab:be:48:cd:70:
db:a0:b1:34:89:77:f9:53:c1:3d:26:f6:8a:b2:54:
93:38:e3:7f:5f:83:42:cc:08:71:a5:e7:42:36:da:
47:92:3d:81:30:4e:66:91:ac:4b:b4:d1:d3:c2:99:
76:2d:cc:ec:89:77:b6:55:62:3b:be:b4:12:e0:6b:
88:57:b3:aa:2f:9c:bc:a2:d9:2c:aa:58:0e:09:98:
4c:53:50:34:0b:0b:0e:40:a8:4b:d0:96:77:f9:46:
7b:82:5a:5d:30:b1:1b:5e:48:bb:d5:d1:36:a1:cc:
5d:a0:92:31:6e:03:9a:a3:a5:ad:4e:33:6f:68:bf:
cc:58:a2:f5:13:48:b1:19:f1:f6:71:d6:15:b5:0f:
3e:a6:91:27:50:9a:22:3e:89:6c:ca:22:a0:e9:14:
c1:ef:a0:7b:87:17:9e:87:e6:07:24:a0:9e:24:9b:
c1:fd:00:ef:08:43:03:ea:ed:87:bc:38:91:d1:6a:
97:6c:3b:b7:dd:49:1f:3b:b1:c4:dc:16:08:f0:c7:
f9:83:0a:8a:cf:92:19:3b:22:b3:69:b3:62:8c:2f:
d5:c2:77:61:79:cc:b7:fd:88:91:54:c8:24:75:82:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AD:C0:F6:59:7C:12:88:61:26:D6:F7:6A:A5:B7:72:E7:50:34:AC
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:89:bc:79:90:5e:15:7f:fa:40:7d:6b:c9:72:cb:f6:15:78:
80:f4:35:38:f2:c0:fc:0b:af:18:eb:ce:27:2c:97:9b:8b:87:
bc:22:1d:99:64:05:a1:a0:eb:ca:08:eb:ae:28:96:72:88:2a:
28:87:db:6f:fa:1e:3d:61:90:47:c7:12:84:8a:79:36:df:88:
77:5c:ae:65:d7:33:db:5d:96:65:01:d1:4d:93:35:f7:6b:9b:
fe:fa:99:4d:f8:6a:74:f9:f7:c2:03:2b:03:fd:33:53:8c:37:
f9:35:21:55:7e:dd:db:60:55:57:0d:4b:ea:6d:2c:8b:67:b2:
ac:57:13:fe:9d:f9:2b:6c:47:41:e0:03:32:f2:48:b5:86:6d:
7b:23:e9:92:23:06:62:f1:2b:eb:c4:18:56:33:ad:40:a3:fa:
5f:69:03:4d:ba:69:67:47:63:dc:f2:c0:8f:b6:12:41:8b:0a:
02:dc:1f:59:16:f9:62:65:05:6c:2a:37:13:e8:d9:32:48:31:
35:90:2e:d4:ba:f2:34:1b:bc:d3:f7:18:b5:35:5e:b1:16:71:
47:bc:07:de:39:18:79:4b:9d:e5:15:be:df:b3:a2:e8:2a:c0:
59:3d:49:99:5e:43:2b:34:c3:6a:b1:5b:21:46:c0:3c:f3:ff:
e0:d4:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:14:49 2025 by rpki-client