Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier: sGB1XjSkzv2FQEgFk4eOXfdXa7idAKhD7lChrdRJBss=
Subject key identifier: 2D:28:86:58:A0:CC:1D:F4:83:35:32:FE:68:90:ED:37:76:D1:D9:95
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 019A38A3B5403C793B0C49497872A8D6E5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number: 1507
Signing time: Fri 31 Oct 2025 05:00:43 +0000
Manifest this update: Fri 31 Oct 2025 05:00:43 +0000
Manifest next update: Sat 01 Nov 2025 05:00:43 +0000
Files and hashes: 1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=)
2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=)
3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=)
4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: uqSgTbQSVqvXvGn6Lkicu9+FfANXGebF+RM3kzx1YrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:38:a3:b5:40:3c:79:3b:0c:49:49:78:72:a8:d6:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Oct 31 05:00:43 2025 GMT
Not After : Nov 1 05:00:43 2025 GMT
Subject: CN=2d288658a0cc1df4833532fe6890ed3776d1d995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:8d:e2:f6:e8:48:0f:bc:25:56:75:d7:19:
8a:b5:7c:6b:92:bc:96:06:2c:b4:cc:8b:26:92:0f:
68:0c:72:e5:7f:35:af:8f:13:5e:f8:9a:d4:23:ab:
39:5f:b9:07:11:19:41:10:93:46:dd:fa:93:46:ab:
57:61:71:92:9d:09:55:32:14:05:4a:8e:0b:2f:52:
d1:62:84:d6:8c:a8:2f:5f:d4:e8:0f:9a:41:1a:7e:
aa:96:6b:5d:22:d3:54:16:87:5d:a5:db:b5:0f:b1:
fa:f4:71:23:9b:36:17:be:10:28:28:15:04:e0:33:
84:dd:f5:fc:9e:eb:06:f4:15:8c:00:88:87:fc:2f:
3a:83:1e:ac:c3:01:a3:ce:ec:3f:d7:17:02:fd:be:
55:fb:1f:1e:b3:45:dd:77:0f:16:8b:ee:f0:5b:a8:
40:f8:ae:f9:1a:6d:2a:0c:8c:75:07:6f:5c:ff:61:
6a:b1:9b:83:35:23:64:5d:82:43:ac:af:8b:e3:11:
da:35:7c:f2:7a:20:03:b3:d9:b4:89:24:0e:14:10:
c1:eb:6d:14:31:15:cf:5d:45:59:a4:e7:4d:03:51:
e2:7a:4d:25:58:98:86:81:e5:25:32:e0:89:b8:4a:
bb:ea:fe:44:be:24:e3:95:2b:fa:38:27:06:97:88:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:86:58:A0:CC:1D:F4:83:35:32:FE:68:90:ED:37:76:D1:D9:95
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e8:fd:01:8d:96:42:00:e0:5e:8d:a7:ff:1f:37:96:5d:91:
82:7a:fd:83:8e:61:ae:1e:7e:cb:98:81:71:6a:d1:d2:cc:95:
f8:d2:be:90:c2:ff:d3:a8:f4:5d:80:14:5e:cb:93:df:af:46:
e5:ed:e4:30:0a:d0:c2:d4:ad:6e:f8:24:d7:23:0c:d8:49:fc:
f6:50:a6:1c:39:d8:aa:f9:9c:c7:07:76:dc:02:19:96:81:05:
74:c8:97:3a:e7:f2:c6:7e:b2:b1:c8:18:74:a4:a6:80:49:56:
24:f3:09:09:b8:50:11:b1:aa:86:ed:68:9c:7c:27:45:3b:68:
8e:ba:7b:9b:74:59:f4:8c:77:1d:2b:9c:c4:73:11:a0:c2:38:
cd:9d:70:2a:48:68:91:ca:72:16:44:c6:40:7e:1f:b6:6e:d6:
3c:e4:91:f0:f0:73:92:0e:e3:6b:a9:4e:07:2d:19:09:0a:a1:
22:73:9b:af:76:0b:10:58:09:b1:b2:b5:30:77:b6:94:00:7c:
dd:d2:1b:8e:95:74:fd:fc:84:00:75:5b:48:f0:4d:4d:0d:a3:
9d:60:8b:92:87:0a:1a:a3:7c:79:dc:88:90:cb:e5:fc:97:62:
b6:cc:51:04:48:f4:f0:19:be:75:24:c9:94:8f:b8:8c:86:b0:
e0:a0:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 08:15:25 2025 by rpki-client