Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: XbTWyA0g02+xi3EJLfyGSTV4nFrFTnuIfTYQC57yohs=
Subject key identifier: 2B:5C:17:9A:B7:45:21:33:0E:E7:26:8E:2B:BE:E2:BD:2F:1F:40:13
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 0199FB7CDEE30B2CE3DFAF4B5BB6725C0B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=)
2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: RV6+6oqB/D1lQSW/XJprq7/tfylFa8FEPpjTGEWmAwI=)
3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:de:e3:0b:2c:e3:df:af:4b:5b:b6:72:5c:0b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=2b5c179ab74521330ee7268e2bbee2bd2f1f4013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:0c:61:c4:03:4d:50:41:d2:29:f6:c1:0d:
5a:84:66:ff:8f:cb:d6:e8:8e:47:48:3f:ba:99:c1:
b4:b7:5d:14:46:24:af:32:ec:6b:dd:8e:aa:e4:ca:
66:56:fd:c7:22:80:5b:a8:c5:e6:87:23:f1:8c:d1:
e4:9c:b4:13:30:9d:52:fd:8c:2e:0a:39:41:c2:0c:
66:cc:c3:f9:29:40:05:4c:03:f4:84:02:59:35:b3:
ec:85:b5:5d:21:b8:09:80:cd:63:f6:b4:b2:e6:d2:
7e:5a:a3:be:88:53:45:e7:82:35:4f:84:f9:0c:b0:
fc:df:58:4e:bd:0c:be:3e:53:d6:ad:c6:7c:f7:66:
23:55:77:50:22:4f:85:72:8a:22:2a:18:44:10:ae:
e5:f3:2b:41:92:f5:f6:6c:7f:41:88:00:33:e5:ab:
36:18:ab:70:53:19:be:cc:41:a8:7e:6b:5d:04:25:
e1:3f:fb:04:8c:a8:28:76:64:9f:ef:b4:00:1b:32:
97:ad:c3:85:81:20:ba:39:a4:e1:a4:33:b1:6f:6d:
68:f2:09:7f:13:0e:ee:37:61:03:8e:b6:9d:b2:76:
b7:9c:42:26:fe:a7:f4:cd:14:33:61:bf:19:3c:7a:
bc:4f:20:48:9c:31:94:c9:7e:0f:f6:c3:fd:0f:09:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:17:9A:B7:45:21:33:0E:E7:26:8E:2B:BE:E2:BD:2F:1F:40:13
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:95:44:59:c9:b1:80:10:50:19:73:a5:a4:aa:3d:93:5a:4b:
51:a0:08:5a:bd:f1:ba:69:f3:87:16:6d:e7:01:0a:3a:8c:bb:
fa:4e:80:e8:24:70:8e:7c:55:9c:47:cd:55:81:12:26:44:f3:
9f:f1:a6:08:74:7e:9d:ac:c3:b8:44:cc:d0:89:02:b1:8f:67:
31:57:e5:9d:13:92:a1:7e:73:bc:8c:7b:d1:4b:9a:e6:63:16:
c8:67:0f:13:e3:24:8c:f1:4c:fa:3c:89:bd:dc:f8:e1:53:35:
30:6f:03:95:68:73:6b:3c:ca:59:50:d4:6c:d7:46:dc:67:96:
bf:cd:ca:3f:2f:86:7e:33:2e:87:75:e6:f1:e1:e6:c1:d6:2e:
49:53:89:f7:14:7e:c6:28:7f:0b:ac:be:57:99:e6:9f:33:88:
61:60:91:48:a2:ba:b4:74:da:52:91:4b:99:40:09:72:9c:61:
ea:e7:42:42:b6:78:11:ee:1f:89:62:fd:44:2e:c0:fa:6b:98:
37:38:fb:ec:7b:82:da:5b:cd:01:ac:94:ed:bd:eb:c3:e9:44:
74:60:e0:a1:80:13:66:ab:c2:e4:18:42:aa:35:4b:2e:78:56:
22:29:8b:07:a1:89:ca:a8:d7:b1:ca:6c:a7:b3:22:e7:fe:83:
8c:c2:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:01 2025 by rpki-client