Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: KnGimTc4rO6eeseJWYdNTGMGAwQo0axgNj+0yHJzXRo=
Subject key identifier: A9:52:F8:2A:3D:DE:82:05:92:CA:F3:A3:1B:D7:64:87:E0:F7:60:D3
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019A4DE1FD9A6171A0F64CE67A2307F98C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 16AE
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: f8txhF503b4fR3zzWnG8R/g5ZtciBkq4HjPj3U6A8FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fd:9a:61:71:a0:f6:4c:e6:7a:23:07:f9:8c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=a952f82a3dde820592caf3a31bd76487e0f760d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1c:d4:29:6a:7c:e0:83:2d:cb:e2:2a:ac:03:
32:3e:f3:a5:89:85:55:0d:9c:1d:fc:8d:66:84:c3:
dc:f8:47:b5:9a:ef:6a:f8:e2:e7:81:36:9b:b4:88:
48:1e:3a:3b:65:f4:a7:c3:d5:ae:8f:9c:6d:85:16:
8e:8b:55:b4:15:c7:a7:02:ea:94:ee:43:cf:48:e4:
4b:da:df:4a:8e:cd:73:99:28:49:7c:ac:d5:75:1c:
84:73:84:52:38:48:cd:25:f8:77:bc:43:f0:0a:10:
93:9d:df:97:92:f7:25:72:8e:05:65:6c:8d:8c:52:
c3:c8:3b:1e:48:64:72:a8:31:14:c0:86:63:d5:2b:
94:47:43:93:7c:33:93:ce:c5:0b:20:8d:88:b5:1c:
68:bc:d8:55:7a:45:52:66:17:2d:5e:bb:21:ba:fb:
50:80:16:fa:b2:53:dd:f6:3e:1d:6a:d3:f1:16:ec:
35:ba:4a:3a:2e:da:bb:23:35:90:0c:03:d5:71:80:
11:a1:14:36:c6:b7:a0:3e:50:15:0d:66:31:cd:92:
11:df:a2:f5:e3:28:1a:1f:92:71:98:be:2e:66:44:
10:5c:c7:df:95:e3:5b:b3:67:fa:d2:1e:ba:da:6f:
8d:87:ee:75:3a:3e:92:7e:73:de:5a:db:f4:62:a4:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:F8:2A:3D:DE:82:05:92:CA:F3:A3:1B:D7:64:87:E0:F7:60:D3
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a6:9a:25:4b:2e:90:66:48:68:44:ff:cd:0f:d8:54:88:bb:
0e:36:2b:2c:2d:f3:c9:c3:6a:bf:b8:49:b5:16:ff:09:d0:33:
d7:08:8d:c6:4e:b2:c9:71:7a:1d:e8:04:f4:9b:84:11:85:61:
9a:01:45:26:80:49:bc:b4:0d:78:44:ad:eb:f2:2e:d7:5f:56:
2c:54:05:16:2a:9a:05:e8:a5:38:74:cc:bb:3f:ca:89:e9:d9:
50:d4:57:fc:aa:7b:e5:b2:50:79:97:64:3e:ab:30:f2:04:0a:
29:37:6e:a6:f9:bc:aa:bf:a3:cb:e2:47:a8:98:ee:dd:72:3f:
75:f8:6d:7e:09:4b:b3:d6:bc:f8:d1:2d:23:1d:0b:94:04:c3:
24:d4:6c:fd:5d:8a:46:9f:65:8b:5d:f6:a0:ac:aa:8f:44:29:
fa:8b:94:48:35:59:3b:26:f5:f2:55:a7:9e:e4:b7:41:c1:e1:
ab:85:d4:fb:5e:d7:ed:ca:7a:6c:ec:2c:a4:c9:87:9c:55:ff:
eb:e5:6a:e4:a6:4d:f5:0b:f2:4b:f9:4a:9d:63:f1:64:7d:c1:
ec:36:71:9e:75:9a:23:2d:57:62:c5:cf:7a:bc:8c:e3:4f:28:
a8:c1:0c:cf:17:36:4b:b6:17:3b:46:89:29:17:28:15:4b:40:
0a:1e:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:52 2025 by rpki-client