Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: EUvkR0lUuteTIHifQbRbEVdP9X682VklpxmtK5MxDz8=
Subject key identifier: 9E:70:C9:E1:72:AB:25:79:19:D0:50:E3:18:25:55:08:D9:E8:3C:81
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019A15E0B3FCBCBD18186BB05B74D61B065C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1691
Signing time: Fri 24 Oct 2025 11:00:38 +0000
Manifest this update: Fri 24 Oct 2025 11:00:38 +0000
Manifest next update: Sat 25 Oct 2025 11:00:38 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: 7eZYf705UkvgJMr8Zy2YcdGXrFuhSvOPWN7nsGt9SKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:b3:fc:bc:bd:18:18:6b:b0:5b:74:d6:1b:06:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Oct 24 11:00:38 2025 GMT
Not After : Oct 25 11:00:38 2025 GMT
Subject: CN=9e70c9e172ab257919d050e318255508d9e83c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:81:16:0a:35:0a:4c:30:62:fd:2e:35:7f:
70:67:21:25:67:f5:7a:bf:dd:7a:47:a8:0c:6b:00:
22:4e:61:ec:78:57:42:e1:99:f0:be:08:d6:6d:a4:
3c:3b:2d:96:07:79:39:c1:8d:02:3e:e8:02:b5:9c:
8f:a9:b1:0a:2b:3e:07:eb:2f:f2:ce:a1:0e:12:0b:
14:4e:bd:49:ea:17:d6:44:cb:84:be:47:d9:56:63:
24:fc:61:67:68:4c:00:e1:1d:78:e5:ae:19:51:80:
7a:1e:97:bf:c8:8a:ae:90:fe:1a:ad:e9:11:d8:e3:
8e:3e:23:a2:a2:d5:55:5f:2d:6b:02:5e:46:a9:2f:
5a:f1:40:cf:3e:98:96:c2:f2:a3:17:1b:65:a3:ae:
40:c3:af:3f:b2:30:d9:30:1c:a3:5b:41:e5:1d:c4:
b7:f5:a8:9a:e5:fa:74:99:62:d9:8e:17:cb:8b:c1:
82:9f:75:b0:ae:39:a5:da:b4:bf:2c:73:fb:26:40:
00:04:62:39:22:b2:04:41:e8:aa:af:dd:8e:42:54:
f0:97:88:ca:88:73:e2:0d:29:af:f5:13:a2:64:ad:
e2:c7:cb:69:6e:0b:13:ee:3d:97:ec:34:be:cf:25:
08:bf:b8:bd:c6:6c:a1:3d:c1:c3:74:83:e2:de:0b:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:C9:E1:72:AB:25:79:19:D0:50:E3:18:25:55:08:D9:E8:3C:81
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:60:07:c0:b1:83:c4:79:12:f3:bf:6c:0c:b2:40:4f:66:00:
14:60:95:48:d7:7d:ad:4f:c5:ce:97:a4:bf:a3:e2:39:7b:9d:
5b:17:95:5e:38:36:0d:09:9e:94:65:1f:cf:ed:f7:8a:28:1a:
21:5c:8c:27:12:f9:2c:49:89:d9:1e:11:1e:f7:9c:d0:e0:f3:
78:f5:21:c0:0e:f6:71:89:4d:1b:11:19:55:6a:37:29:54:b1:
65:7b:5a:68:e2:8d:c4:21:80:eb:a8:9d:ce:da:94:95:43:46:
4f:a3:09:65:7b:32:a1:76:67:54:f9:f2:36:13:f8:a3:06:78:
68:f3:55:81:db:1f:62:92:47:ac:69:db:39:18:3d:fe:03:ee:
f9:af:63:6c:c1:0d:0f:24:a5:bd:10:a3:e7:a8:3e:dc:c9:41:
da:59:1b:f0:b9:f4:1d:ec:e6:61:f4:63:21:bb:ec:3a:35:63:
42:6a:89:14:e3:a7:68:80:79:dc:52:3d:f3:8d:49:33:ef:22:
8b:bf:a9:7d:bd:05:4d:7d:32:ee:7f:b6:fb:63:a4:8d:5c:48:
a0:3e:ea:04:be:02:21:9e:3e:8e:4e:72:39:2a:70:1f:30:d3:
9c:51:97:d0:7a:c2:22:e6:e6:3b:20:2e:a8:83:91:b3:de:9c:
d4:52:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 17:52:23 2025 by rpki-client