Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier: PvMbBvWHSyk9aQcP5znPGgP/urzFaO83dahS1volJWs=
Subject key identifier: 9F:43:23:37:ED:F8:92:22:28:CC:1F:D2:60:95:33:6B:33:39:BE:6D
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial: 019A2AB0E90D53E35F8D28F73E66A1334F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 12:00:28 +0000
Manifest this update: Tue 28 Oct 2025 12:00:28 +0000
Manifest next update: Wed 29 Oct 2025 12:00:28 +0000
Files and hashes: 1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=)
2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: WV8hfHWbhYSh5PliwC86DD/1VVESQCSqthBK2IGVqCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:e9:0d:53:e3:5f:8d:28:f7:3e:66:a1:33:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Validity
Not Before: Oct 28 12:00:28 2025 GMT
Not After : Oct 29 12:00:28 2025 GMT
Subject: CN=9f432337edf8922228cc1fd26095336b3339be6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:b5:8d:22:fd:cb:cf:4e:b8:c4:a8:b4:9c:
ad:3c:13:ad:a6:91:9a:ca:6e:ef:3b:80:9f:5f:a6:
41:87:f9:26:aa:0c:1b:f5:cd:7d:4d:09:b6:cd:3f:
ab:60:79:50:2f:9a:39:90:ca:a4:4c:84:74:0e:9f:
f4:96:0d:02:94:b9:3b:81:ae:62:de:d7:c8:22:5b:
46:b5:92:9a:54:35:64:2e:b4:32:4f:c6:e8:47:79:
33:52:4b:f4:22:c1:ce:d2:dd:e5:5e:99:e9:c3:d4:
c3:b9:f1:03:93:26:bc:ac:b7:c2:21:bb:8c:3c:f4:
56:df:bc:55:29:f9:c5:52:6a:60:80:a7:2d:54:38:
6e:48:99:51:7c:9b:b1:08:c0:bf:a7:9c:0e:73:82:
f7:1c:3f:19:ac:0f:eb:c5:86:46:5f:10:db:d2:f7:
a6:6a:b2:78:62:23:3b:84:80:56:a3:af:53:1b:2c:
0b:c6:4c:9b:71:c3:9d:4a:16:e9:26:7b:33:65:1c:
83:e5:14:f3:74:0e:72:d1:e9:41:82:9d:88:b7:60:
02:22:c1:f7:f6:95:df:26:1b:82:cc:54:72:ae:96:
69:ba:08:51:c9:31:f6:ea:1c:0d:d9:30:b7:44:9a:
30:c7:6f:14:4d:7f:c3:3f:fc:f8:60:18:05:08:34:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:23:37:ED:F8:92:22:28:CC:1F:D2:60:95:33:6B:33:39:BE:6D
X509v3 Authority Key Identifier:
keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ce:8c:fa:6a:70:bc:b5:ec:b9:0d:85:8c:5e:50:75:f5:f7:
00:49:42:97:3a:dd:b0:ad:b2:28:3d:5f:15:ea:ec:85:d3:6d:
9f:f7:b2:b4:9c:ab:b5:6b:f6:b8:b9:db:7a:12:c6:96:e9:b8:
10:2a:e8:0c:70:d6:78:09:56:d3:b1:64:78:43:a8:cb:9c:84:
74:73:4a:ed:d4:0b:f5:88:3f:50:79:bc:e4:22:98:8a:e0:4a:
0b:36:0f:4b:c0:88:01:77:13:df:f5:89:1c:52:ae:ef:62:32:
0c:8c:f7:f7:32:5a:6c:80:33:3a:63:57:9b:7d:eb:0f:3f:f0:
dc:ed:25:04:62:fa:ae:83:e3:be:45:d5:ce:2d:de:a7:bd:7a:
65:19:56:ef:9c:90:69:32:54:b3:1e:3f:18:d5:c0:4b:63:9a:
84:ae:6a:2f:29:01:f9:2f:90:8b:8d:d5:70:9b:e5:82:59:67:
6c:be:ea:e6:64:e6:2a:27:13:89:1d:21:5e:b2:fa:8e:4a:57:
24:a1:c6:4a:71:99:71:d1:57:dd:f7:1d:aa:59:18:ce:e4:3a:
25:07:03:35:93:95:4a:14:b5:5d:65:26:e2:18:d8:22:2b:8f:
8b:7e:05:18:68:4d:80:0f:a2:a3:79:c4:22:00:8b:80:c9:c1:
73:a6:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:21:31 2025 by rpki-client