Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: ztk8Cw8u6R/zvgLOOb+4+65XwY1ouD92OArVJUJ4a0c=
Subject key identifier: 86:1E:45:77:D9:F3:B8:30:A1:53:45:13:61:48:74:0D:2D:B0:86:B7
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 0199FC8F71AB392C50C67E856F4C3BE2E35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 0433
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: /QZkPJ6ERnq7V62DRUMU9kREWaCVPiHBHKzHwByD2Ps=)
2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:71:ab:39:2c:50:c6:7e:85:6f:4c:3b:e2:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=861e4577d9f3b830a15345136148740d2db086b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:60:25:ff:c9:f3:4d:aa:d3:8c:56:10:d4:
f9:aa:38:b4:d9:07:4d:1d:da:27:43:fe:9e:c8:c5:
59:1e:23:ee:dd:27:d6:60:3b:43:52:36:75:9d:57:
d1:de:4f:24:ce:14:2e:5e:96:54:a0:74:71:29:94:
c5:1d:d5:db:3e:ba:50:85:73:ce:14:d1:2f:58:cf:
34:f6:e8:19:60:6d:23:48:84:8a:2b:d1:3b:7e:ef:
1d:4a:5d:5d:dc:13:3b:26:32:ae:07:39:8d:a2:f8:
cc:01:f1:20:b7:d8:f9:fd:e5:fc:f9:e1:19:f2:b2:
0f:7b:d3:0e:c7:12:54:b0:d3:a2:b4:62:ec:74:00:
b6:8d:c9:ed:5c:03:39:d7:d2:0b:89:a2:dc:7a:2e:
98:da:8a:0b:84:8d:fd:02:c5:4d:98:27:9b:9c:7c:
76:1b:ab:09:8b:9a:0e:02:4a:d8:53:2b:44:49:45:
85:2f:9b:70:10:82:3d:d3:47:03:b2:9a:aa:a2:7f:
96:e0:8a:b2:8e:79:56:9b:5d:53:3e:ca:4c:be:d6:
ea:b5:60:a2:5d:c5:3a:7e:73:ce:99:4f:84:fc:97:
ab:2d:82:60:12:20:6f:59:1c:1c:9a:c7:08:1f:08:
e5:10:54:08:78:85:68:6a:7f:be:26:e5:89:49:63:
f9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:45:77:D9:F3:B8:30:A1:53:45:13:61:48:74:0D:2D:B0:86:B7
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:04:1f:31:29:9a:74:65:03:91:4d:2f:7d:9b:cc:32:57:9f:
19:6f:2f:e7:d2:c8:4f:75:87:9f:12:56:39:8f:53:d7:82:0f:
91:39:6b:2e:45:e6:b8:fe:67:b3:43:e5:b5:d8:0a:5d:c3:38:
49:d8:34:3a:4a:df:9e:22:06:37:4d:4f:f6:e6:ca:f1:fc:0e:
b5:50:cb:69:29:fb:d8:91:3c:2d:b5:3f:eb:1a:8f:63:d2:16:
a9:39:cf:4d:68:f4:37:30:93:e1:8d:e4:b3:ae:d4:7a:45:d7:
14:76:96:e6:40:3b:e7:a8:01:26:dc:ba:f9:42:6c:36:c6:9f:
6d:50:f9:26:83:e6:47:b0:f1:54:95:40:2b:08:ad:e9:59:a8:
ef:14:3e:77:37:e0:a7:88:6a:3d:0c:cc:33:c7:5a:92:a9:d1:
9e:fd:ed:93:8d:6e:2d:ec:f6:b2:70:f7:58:68:5f:d6:41:5a:
a5:c5:74:c5:10:6a:11:92:80:69:de:6a:05:9d:6b:f8:30:90:
8e:ce:4b:2e:3d:db:82:dd:17:82:67:e9:0f:37:9b:ea:30:68:
b9:0e:ed:ca:a1:5a:20:cf:20:0f:52:fc:28:9e:af:5d:f5:9c:
52:a6:a4:d1:48:48:f5:ca:94:c4:2b:14:db:89:8a:37:54:f2:
12:fd:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:16 2025 by rpki-client