Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: 1WIn85q5560ShGNUft2tgLMK+kGWLmuQVR4BEVrpsEk=
Subject key identifier: 30:27:4B:EB:E8:75:1C:78:96:4B:6E:94:42:07:67:25:7B:45:AC:EF
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 0199FC8F24416AD4D49C5EEF7C623219F245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: PWOLrM7RWdBE8CkuMue+8W1X2wpjopnD5+Qr+Sb2Wko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:24:41:6a:d4:d4:9c:5e:ef:7c:62:32:19:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=30274bebe8751c78964b6e94420767257b45acef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:d7:55:99:c2:4c:93:da:61:45:2e:99:da:
86:3d:51:32:94:63:2f:b5:69:08:4a:3c:08:9e:93:
5f:98:39:2f:8b:c9:55:bb:b2:37:a8:1f:82:25:04:
7a:76:98:92:44:d3:bb:f5:07:89:c0:b2:2f:af:42:
22:6c:4d:3d:e1:fc:79:b1:49:72:d3:5b:c7:6e:3b:
de:d9:2b:0b:54:b9:b9:c9:1d:fc:a4:dd:80:09:56:
5f:16:32:f4:f2:72:39:5b:78:fb:25:45:6a:84:4b:
51:0c:53:e0:d8:00:c8:46:5e:61:81:e2:29:cf:65:
59:3f:e9:ca:30:41:15:74:db:e4:bf:59:1e:b6:05:
39:97:83:95:5f:5b:be:6b:8c:fd:c9:64:83:62:ea:
56:9b:31:77:9d:2d:fd:5d:cc:e1:3e:b7:8b:29:aa:
81:dd:d8:97:33:fb:28:2c:e3:1c:ec:93:d0:74:ae:
30:de:e3:ca:7c:57:5e:14:58:02:48:66:6e:31:12:
58:eb:ee:34:30:97:54:8d:98:c1:f7:8a:4a:31:7c:
e5:a7:29:01:5b:99:04:91:ac:f3:2c:77:c1:d2:a4:
83:49:de:83:71:2f:e2:ca:45:11:0c:ea:97:a9:69:
7a:50:35:10:1d:ee:09:ad:35:bd:1b:61:9e:c4:0c:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:27:4B:EB:E8:75:1C:78:96:4B:6E:94:42:07:67:25:7B:45:AC:EF
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:33:3a:3b:77:c0:5e:a2:69:77:b2:60:7f:f4:c9:af:47:d6:
e8:fa:6f:24:cf:a1:42:74:3a:e2:dc:db:24:99:bc:7d:64:b3:
38:e2:0e:a4:1a:ec:56:6e:17:22:cc:f4:5c:fc:96:ad:54:4f:
75:c0:df:8f:ce:67:b4:a8:80:35:d1:ee:dc:35:68:b8:3a:bc:
69:3e:ae:13:9c:99:79:b9:a6:45:9f:7c:80:76:6e:45:87:89:
d0:54:4a:fd:d2:92:92:a4:14:48:0a:d8:6a:09:65:f4:fc:7a:
68:48:3a:9b:cc:4d:db:7f:e7:6f:7c:40:f9:98:0e:39:76:5e:
f9:1f:9d:83:ac:b3:2d:5a:e7:6a:a7:f6:dc:35:e0:27:d2:a4:
d7:f8:cf:3f:05:50:26:5f:39:12:75:97:ef:e8:2e:f4:ee:e5:
d8:4e:c4:f1:15:eb:14:87:96:aa:75:4e:56:90:fa:d5:8e:04:
77:5e:c8:af:ba:ad:b3:b4:bb:8b:4b:88:37:eb:17:29:e4:1a:
8d:e8:cd:28:09:47:32:e0:fc:46:9d:68:b0:c3:f3:53:17:20:
95:4e:89:81:96:22:92:9e:60:2f:f8:69:8d:e4:d5:44:5f:bf:
4b:6f:88:73:3e:7e:7e:47:1c:2a:f3:a9:0c:a6:f1:a1:a6:58:
fc:f9:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:57 2025 by rpki-client