Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier: c6d2syAqB92uCNoSHcxV1k7pxpr7GTTLwYgv41gwg6M=
Subject key identifier: AD:87:AE:46:4B:D3:D0:43:B1:18:98:42:D8:76:1C:A9:D1:DE:80:7E
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 019A51BEC9F7C07BA27FF6F9925BC86E683F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number: 03FF
Signing time: Wed 05 Nov 2025 02:00:49 +0000
Manifest this update: Wed 05 Nov 2025 02:00:49 +0000
Manifest next update: Thu 06 Nov 2025 02:00:49 +0000
Files and hashes: 1: FXp8fQ6gh8oelASFQ2BfVeHiv6Y.roa (hash: JfDcJIX809/8XwYFjwqEGsiF/3/D+Oif9zz1ms1Fn7c=)
2: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: at+N8X+g7yzaCZYd2nlbjg/uIb5nRa1SmxBP5AjrZbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:c9:f7:c0:7b:a2:7f:f6:f9:92:5b:c8:6e:68:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Nov 5 02:00:49 2025 GMT
Not After : Nov 6 02:00:49 2025 GMT
Subject: CN=ad87ae464bd3d043b1189842d8761ca9d1de807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:e7:75:96:e7:45:c1:03:fe:ba:23:18:fc:
03:56:0e:a4:ae:ae:72:1a:da:99:6c:72:ae:84:a9:
bc:a2:d4:fe:9e:7f:31:80:30:cc:a2:c4:8b:21:02:
a8:87:12:06:28:f4:3b:f4:10:1a:06:7f:46:a7:a9:
9e:48:08:15:ff:b3:b6:1c:24:60:92:45:65:c0:c1:
7a:12:64:c7:d6:01:85:b9:95:a8:5d:94:f3:b1:56:
34:ee:1a:98:8b:73:8d:fa:f2:80:3c:61:fc:5c:44:
48:26:e3:14:7a:d6:9e:7c:d9:fb:75:aa:78:d6:ef:
f8:1e:e2:66:16:53:30:fa:8c:ad:dd:93:3b:f4:52:
d0:2a:6e:05:93:b7:fa:89:e7:38:dc:78:bf:a6:98:
b0:ef:c2:61:98:8b:ec:97:59:10:de:9c:83:04:9f:
de:81:9d:fb:08:f8:2d:b7:d2:08:33:78:f7:b6:ba:
92:35:1e:ac:73:39:b4:be:5d:37:47:18:93:23:a5:
3c:36:7d:9c:f4:18:32:77:4a:48:c6:1f:3d:c1:13:
7d:f4:87:d5:6b:0f:18:79:db:c0:d0:44:65:95:a3:
14:b1:5b:f0:66:99:84:78:2e:8b:8f:d7:8e:a0:27:
b2:4f:ed:2d:ec:2d:f1:b5:a6:b9:bf:47:df:ff:d9:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:AE:46:4B:D3:D0:43:B1:18:98:42:D8:76:1C:A9:D1:DE:80:7E
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a4:e6:72:8f:ce:4a:c1:a8:aa:69:18:ac:3d:38:dc:c9:f9:
bc:64:ae:9b:33:c0:64:7f:25:48:ca:7d:53:6d:a3:29:a7:cb:
99:a2:c9:c7:39:1f:79:40:8a:32:49:99:ff:01:a7:59:7d:e4:
b2:f1:84:95:9a:5d:9b:60:66:6d:e5:ce:23:a7:fb:80:6d:e6:
16:70:82:c4:55:5a:27:07:78:6f:0f:2d:87:88:45:4a:c7:27:
8e:ff:8c:7c:e5:6a:f8:f3:2b:79:e6:ce:f8:54:88:69:28:83:
50:16:e2:60:d6:08:ff:1b:23:ad:e7:6e:ff:e2:2c:a1:73:6e:
04:c2:f7:c2:1a:27:aa:9b:3f:f8:7c:9a:aa:64:9d:82:7e:4b:
0a:d4:79:e6:65:fd:71:86:91:d0:e8:a9:41:00:5c:dc:3e:4b:
b2:dd:d7:ec:88:37:64:c5:ca:14:4f:5c:fa:c2:12:a7:31:ca:
45:e1:d5:09:12:db:fc:c7:a4:44:d1:d3:d4:1c:83:87:97:d8:
6b:93:6b:6d:ff:51:d2:85:94:c1:ab:d1:c4:92:c0:e4:21:a1:
27:5e:4a:b6:aa:c3:9d:36:fe:31:bf:50:e0:d7:a3:1c:08:fa:
ef:d9:f4:0e:2f:11:76:ea:7e:ec:a5:74:18:de:cf:5d:0b:13:
98:5f:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:37 2025 by rpki-client