Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json)
Hash identifier: mmbpderA8G5/AJAZoIDgquTwb9YcRakLSiQaQX6xHk4=
Subject key identifier: 7B:57:D3:DA:41:66:8C:72:5F:15:13:4B:64:B9:C2:9A:34:D6:60:59
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 019A2EC4E1C8EE6CC653A939043CA774E449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
Manifest number: 16FB
Signing time: Wed 29 Oct 2025 07:00:46 +0000
Manifest this update: Wed 29 Oct 2025 07:00:46 +0000
Manifest next update: Thu 30 Oct 2025 07:00:46 +0000
Files and hashes: 1: 9xc32CvuOjNWHQB-PWYWWQOY_yA.roa (hash: PjbNQ/Rs2a2yPfO42XDBv2ntO3mtq/Wj2Yqgz9eO9jA=)
2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: ODT2SGAND+R+A2LiQWn9rQ6kavVFvY4WSWPNISKOSSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:c4:e1:c8:ee:6c:c6:53:a9:39:04:3c:a7:74:e4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Oct 29 07:00:46 2025 GMT
Not After : Oct 30 07:00:46 2025 GMT
Subject: CN=7b57d3da41668c725f15134b64b9c29a34d66059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:bc:8e:6a:e9:6a:c2:b4:fd:70:b2:6f:83:
92:8a:85:b2:1d:db:34:e0:98:20:cd:18:bd:ed:68:
8f:7d:06:a8:3e:d2:a4:7a:dd:7d:fd:5b:8f:08:5a:
13:bc:e8:86:0f:99:e1:87:c3:08:39:a9:a2:ec:31:
6c:37:62:73:ba:09:69:1d:9a:c4:ef:41:16:3f:a8:
6b:3c:cf:89:42:21:b3:cf:46:9c:d1:3f:ae:c0:a1:
b9:fe:0b:0b:c6:7b:fc:79:58:5a:a5:a6:bb:75:b5:
50:be:ca:e4:fb:a5:21:1a:6a:07:44:68:ab:f3:f5:
d6:41:e7:17:8f:4e:7f:1d:e7:68:e1:8b:87:f7:7d:
9f:0a:1e:97:df:80:84:84:38:55:dc:bd:2a:b2:8f:
e9:37:3f:df:09:d8:53:f7:27:93:2b:f5:28:bf:c0:
19:30:4d:36:d0:e2:37:eb:a3:f8:b0:0a:58:2e:17:
74:63:c0:c0:76:2d:f5:45:48:72:1d:d5:29:a0:b2:
3b:2b:4d:c3:4b:56:5d:0a:a1:47:d1:32:d2:ac:0a:
90:0d:6a:7b:cd:94:1f:13:09:bf:69:29:a5:cc:49:
51:b9:6f:03:4a:72:79:11:41:f8:d1:d2:45:03:c4:
53:b9:d9:24:f3:8f:09:e7:b7:6f:df:2a:2c:50:cb:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:D3:DA:41:66:8C:72:5F:15:13:4B:64:B9:C2:9A:34:D6:60:59
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2d:7d:b5:d0:aa:4a:b1:bb:69:7b:de:fc:a3:b7:0c:cd:fd:
35:89:bf:8b:d2:e9:a9:d2:44:6a:80:34:a8:37:f9:a8:4b:36:
c2:61:81:20:b6:9e:cf:28:7b:04:1b:74:8b:4e:80:7b:17:57:
22:86:03:6d:11:59:99:90:9e:43:64:68:64:2f:de:03:c7:62:
07:63:a5:82:75:e5:5b:1e:32:a8:28:0e:a3:37:ac:87:f0:0b:
22:64:bc:b2:40:9f:ab:70:62:d0:c1:01:79:3b:a0:c8:6b:89:
73:e5:18:c3:e7:6e:33:05:7a:ec:26:c5:12:96:88:b7:83:13:
ba:bb:1a:48:84:f1:32:28:59:00:ed:a0:e7:ad:c3:af:9d:81:
cc:77:40:d9:e7:b7:cd:9a:9a:1c:53:e4:4a:db:75:96:14:d2:
c8:41:ab:ed:33:51:1f:1a:b2:58:db:68:f2:e0:31:c3:67:25:
81:45:f4:7c:6f:2f:ef:85:88:9d:7c:24:a7:70:93:a1:08:c8:
d4:de:46:d7:fe:b4:6b:c1:93:01:94:f4:cc:46:51:0d:30:71:
a5:a4:1b:89:b8:88:0a:bc:07:61:6f:2b:18:31:79:de:ed:1c:
cb:1f:6a:71:a6:c1:d0:97:12:12:cb:1e:0d:34:e1:29:6e:fc:
ce:31:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:41:21 2025 by rpki-client