Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: DwRUGvVZiyC5CQw2IMh3I3K/3Knn8YBVwxV6JBInBrw=
Subject key identifier: DB:D1:C5:A5:0F:F8:56:11:F3:94:F9:59:E7:A9:6F:CA:DD:91:BB:58
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 019A522C01CE9B7FA98F468508B3F5614339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 1216
Signing time: Wed 05 Nov 2025 04:00:06 +0000
Manifest this update: Wed 05 Nov 2025 04:00:06 +0000
Manifest next update: Thu 06 Nov 2025 04:00:06 +0000
Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=)
2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: XAo5qYQflodd3z7R3xD2W+bES52ponkW5zKIfiDopnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:01:ce:9b:7f:a9:8f:46:85:08:b3:f5:61:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Nov 5 04:00:06 2025 GMT
Not After : Nov 6 04:00:06 2025 GMT
Subject: CN=dbd1c5a50ff85611f394f959e7a96fcadd91bb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:a6:52:fe:02:80:20:de:c1:e3:94:69:4f:
6e:29:8d:b4:e8:65:ea:b0:c0:b3:e7:0d:dc:3d:59:
33:7a:48:94:33:cc:5d:30:45:ce:b9:f9:5e:ce:58:
e6:6f:0a:53:23:a6:c6:be:c9:be:8b:15:f4:10:8e:
68:fc:73:54:e1:48:08:f6:ce:4d:2d:51:95:c0:bb:
7a:06:90:3e:70:09:be:62:35:a3:7e:71:b6:85:2a:
7c:f7:d4:b4:58:28:f4:fe:9f:80:be:f8:eb:73:b7:
97:bd:32:1b:75:58:56:02:a2:a5:25:fc:c2:df:18:
a4:cb:fc:2c:70:a3:dd:ed:49:5f:d4:20:6e:67:e0:
db:85:38:25:47:d6:c2:ed:3d:98:f6:52:80:7e:b8:
83:6f:ae:8c:a8:11:e3:da:9a:79:d2:5f:92:2f:e9:
e6:b7:e9:f2:6f:7a:f3:ab:3f:cd:38:43:17:b7:23:
b8:2a:73:ec:4d:24:c3:b9:86:bd:2d:62:a5:ac:12:
7a:14:a3:3d:d7:5e:63:aa:68:98:78:b0:7c:b0:85:
9e:25:9e:69:3c:99:6c:3f:17:8e:18:a6:b1:0b:61:
bb:c1:04:cc:37:f9:85:33:8f:e1:0f:52:03:68:0d:
79:04:b7:22:82:9f:71:46:4a:fb:24:99:97:b0:7f:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D1:C5:A5:0F:F8:56:11:F3:94:F9:59:E7:A9:6F:CA:DD:91:BB:58
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:52:43:66:c7:b1:45:d0:e6:ad:85:a8:6e:e9:3f:6f:6d:90:
c8:ca:75:d2:77:1f:95:df:34:95:89:d2:bc:0a:93:b2:23:c7:
cc:8c:a1:73:21:20:25:2d:28:9e:8c:d3:ee:7d:3a:df:14:97:
99:25:b9:73:5b:52:bc:9f:c5:f0:72:c3:09:d4:dc:81:a8:8a:
91:25:94:db:61:93:71:82:e7:78:c5:57:86:54:0a:23:0a:1e:
2f:7d:4e:8c:4a:07:77:c4:5f:56:e6:59:22:9b:3b:42:0c:1d:
c6:9d:87:ec:c2:fc:70:66:dc:a7:be:04:2e:f3:79:75:c9:56:
5a:dc:a7:c8:75:4e:5f:7f:f8:a1:e0:a0:0e:93:ec:ed:ce:89:
03:70:f7:84:0b:c8:c7:56:a8:17:df:11:a8:6c:ef:90:c6:f6:
cb:f3:1d:d6:a0:6c:e5:7f:a6:ec:ef:b1:0d:74:1c:c3:61:e0:
ac:55:f2:4c:87:94:2d:ed:a0:0f:ac:6f:59:f3:e4:00:c1:cd:
d2:f6:12:d7:96:42:4d:94:14:d1:03:28:e4:ac:90:97:cb:a1:
f7:ce:ba:b4:cf:f1:a8:c3:e6:dc:54:62:67:e8:a9:19:de:1a:
2a:ee:fd:9a:5e:c0:16:8f:fd:30:ad:a9:00:14:55:a8:ac:48:
9c:6c:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:48 2025 by rpki-client