Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: HbvTg6lOLcIFDLVs7IGi9ITxe8qk/tsiAnXSSK8FTfc=
Subject key identifier: 0F:16:42:54:E3:12:70:CE:6F:B9:59:33:90:8B:E1:DA:A3:9D:6D:EE
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019A2A442091DCAE978FAD45CC82B22C9339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 10:01:39 +0000
Manifest this update: Tue 28 Oct 2025 10:01:39 +0000
Manifest next update: Wed 29 Oct 2025 10:01:39 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: Ni4W/6iXcbZpwdQfBtT09ttTX3YZ8JnNOL2vHLUZB3U=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:20:91:dc:ae:97:8f:ad:45:cc:82:b2:2c:93:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Oct 28 10:01:39 2025 GMT
Not After : Oct 29 10:01:39 2025 GMT
Subject: CN=0f164254e31270ce6fb95933908be1daa39d6dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:a1:d0:3e:3a:82:97:ef:90:d0:dd:23:d8:
f8:f7:d4:4f:6c:5d:6b:6d:45:a6:24:5c:24:d7:bd:
23:5e:53:e3:02:fd:69:cc:23:ed:50:64:88:2a:8f:
18:18:8e:58:49:6b:f0:0c:16:75:9e:ea:a3:e9:5f:
4e:81:05:a9:d1:7e:2e:e2:8d:93:e5:28:54:c8:d8:
72:b4:82:f2:e6:f3:b4:41:8d:62:9e:e2:5b:87:e7:
17:95:3f:fa:f1:b4:02:5a:12:d7:f2:ea:ad:69:f8:
40:6c:35:ca:d5:c7:13:54:fa:a6:d6:95:32:71:c8:
9c:39:0e:6c:77:03:95:6c:63:44:60:3b:b9:5d:c3:
cc:ef:a3:45:18:41:41:b6:43:e4:51:ef:09:a2:cc:
fc:94:a6:7e:ba:dc:3d:23:23:87:28:21:9d:f8:3a:
30:67:48:75:1a:80:02:17:18:59:7d:64:fe:9c:70:
76:6f:1e:6b:f9:8e:13:5c:01:1a:45:1a:2f:c8:54:
fc:28:04:b2:b9:bb:8f:95:f1:b0:31:f4:4d:d8:92:
cf:c3:d4:51:c3:cc:b2:48:b6:f9:94:91:42:42:b0:
c1:6f:4b:33:d3:45:2f:8b:8a:e5:39:c7:e5:2d:51:
9c:8b:00:6c:76:64:fb:7d:d5:a1:3f:3f:65:25:75:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:42:54:E3:12:70:CE:6F:B9:59:33:90:8B:E1:DA:A3:9D:6D:EE
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c5:d1:07:2e:2f:3a:2d:2f:f6:a4:a9:f5:71:d5:9a:be:33:
cf:98:10:ef:5b:bd:4b:e3:0b:ae:f9:ea:df:da:57:a2:74:9b:
8d:f4:bb:02:31:d0:16:7b:74:fa:7e:5e:5f:e5:65:d7:dd:60:
21:f7:b0:a8:aa:dc:3f:e7:52:3c:4d:0f:00:9f:3c:b1:f0:5d:
e4:91:0d:59:49:c6:2d:23:17:fd:a7:e1:db:17:b8:3f:20:c4:
46:a9:9b:1e:af:10:7a:c8:7d:95:7c:d8:15:7b:7f:22:83:2a:
a7:e8:33:24:f1:ef:25:ca:3e:93:f6:18:61:33:eb:00:e8:1b:
36:95:68:7a:47:76:89:a6:d4:5c:32:0e:af:2c:79:6e:3b:09:
8e:1a:20:2a:46:04:cf:3d:9d:10:21:cb:9d:21:78:26:82:7d:
ae:2d:04:da:fc:77:9d:48:bb:e5:b3:8b:1e:3f:c8:3a:53:75:
07:f8:7b:fd:60:23:fc:0e:d8:45:2b:6f:83:52:86:0c:bf:02:
63:6b:62:f6:45:51:8b:e5:3e:2b:61:16:e6:cc:80:a7:09:bd:
b8:a7:96:ca:7e:93:d4:12:40:0b:8a:c7:de:55:3a:f2:8d:42:
28:af:13:65:5c:cb:3c:01:ce:44:d9:09:8c:9b:2c:e3:ec:a4:
e8:06:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:39:43 2025 by rpki-client