Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: nws/ff2c0JaeXuZ5wAS09atreflutG0qvHQ3Q8mEzkI=
Subject key identifier: 5B:E7:A3:7C:6E:0C:C6:27:31:CA:3D:54:B9:CD:27:6A:EC:51:A2:21
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 0199FEB5305940F04E88B6A664A4A7EA4A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 145C
Signing time: Sun 19 Oct 2025 23:01:51 +0000
Manifest this update: Sun 19 Oct 2025 23:01:51 +0000
Manifest next update: Mon 20 Oct 2025 23:01:51 +0000
Files and hashes: 1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: gVxtxXsXmovzQCoXOJcWyI7oLH2ZvwmHIsWFu0dh/jM=)
2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:30:59:40:f0:4e:88:b6:a6:64:a4:a7:ea:4a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Oct 19 23:01:51 2025 GMT
Not After : Oct 20 23:01:51 2025 GMT
Subject: CN=5be7a37c6e0cc62731ca3d54b9cd276aec51a221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:cd:a0:42:12:15:4a:5b:4f:a6:10:64:4a:
98:d3:ce:19:49:80:02:cf:4a:63:58:9b:10:ff:fd:
15:b4:e7:5e:23:0c:0d:e5:5e:54:77:bd:84:0e:68:
0b:10:de:47:09:d1:3a:1e:3d:c5:91:db:b5:6f:79:
13:6a:86:73:8c:d7:f4:2b:ae:2d:4b:cd:7f:e7:2a:
83:1f:dd:1d:80:54:48:61:c3:41:b0:27:e4:6d:7c:
e4:d6:54:9e:d8:6e:fb:49:e5:d1:9f:cc:d4:c8:6e:
17:9d:c0:1c:d6:2d:eb:d9:e8:53:4a:8e:1f:79:49:
66:74:0c:42:2a:c4:a7:78:3a:c3:53:9f:cc:f2:23:
1e:8c:12:2b:f2:15:dc:c6:f3:0f:b6:a4:63:64:33:
6f:8a:d9:b7:94:20:24:2d:aa:f4:1c:43:ee:41:84:
35:a9:77:89:44:04:a5:d1:f5:4b:a7:10:a6:5f:42:
bf:9f:2b:ee:42:90:4f:3f:61:69:08:a8:8f:af:1c:
8f:98:7e:0f:50:5d:cd:64:24:ec:33:a8:7b:83:59:
92:5f:5f:f6:40:32:74:33:98:9b:2d:0e:54:c5:bc:
9c:cc:bd:3f:fa:be:45:3c:45:9c:63:4d:cc:a6:e7:
a5:07:4e:89:b3:ee:21:01:12:1f:b5:82:e4:e5:42:
db:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E7:A3:7C:6E:0C:C6:27:31:CA:3D:54:B9:CD:27:6A:EC:51:A2:21
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d7:db:fd:a7:52:ad:36:48:8e:d3:1b:b7:c3:a2:8a:09:dd:
66:9d:ef:bd:ee:8f:d3:33:44:8e:40:db:ec:12:ab:84:fc:69:
8f:0f:e7:c0:c6:09:61:65:78:99:9e:c1:83:7f:2e:06:2a:1c:
c7:5b:ce:5d:0e:5b:40:98:4e:90:57:f1:9c:f1:c2:bd:7b:cc:
37:66:e2:da:94:92:1e:3b:9e:78:d9:22:f8:88:c9:0f:b9:4d:
d2:ba:74:2b:11:a6:ae:08:a3:81:88:41:99:27:87:84:70:6c:
d3:7b:79:59:9d:d4:7b:a3:b7:9c:e9:59:a4:1a:bb:22:0e:86:
56:96:de:ee:95:68:9e:bf:43:50:ff:d4:02:ca:ad:c2:04:0a:
66:2d:30:e3:e6:8d:72:d0:fa:0b:bf:91:fd:b9:98:18:73:88:
6b:6b:2b:80:1a:e4:1a:14:2a:46:91:4d:9e:c2:02:6b:8b:06:
bb:f0:65:b2:8b:0a:ed:cd:bd:b7:7f:47:2e:08:f6:c2:e2:7a:
08:52:3b:0d:c2:6d:b0:76:e9:e9:fe:ad:1e:01:76:42:e1:25:
d4:d8:e0:e2:6a:c4:c6:7a:ce:c5:3d:24:57:4c:e2:61:50:8a:
0e:d5:e1:08:33:77:97:8e:22:7b:44:3a:ad:7f:03:81:c0:32:
63:00:89:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:48 2025 by rpki-client