Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: bItc1j8P2NlhBz1bCq6xWJx2aKpohRREFDWcYIiRFUI=
Subject key identifier: 09:21:CD:B8:33:35:0A:5E:2E:9C:61:A1:64:04:92:48:C8:E2:86:B0
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 0199FCC6680C6FB956372920CA019DC79143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:25 +0000
Manifest this update: Sun 19 Oct 2025 14:01:25 +0000
Manifest next update: Mon 20 Oct 2025 14:01:25 +0000
Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: j6YTv/BGyZSpExuQ9nB/yL2B5aJbQ6PBGmQrPPRrf6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:68:0c:6f:b9:56:37:29:20:ca:01:9d:c7:91:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Oct 19 14:01:25 2025 GMT
Not After : Oct 20 14:01:25 2025 GMT
Subject: CN=0921cdb833350a5e2e9c61a164049248c8e286b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:ff:72:ba:2e:12:b2:2a:2b:41:8a:57:97:
5d:2a:de:2b:57:55:ff:61:eb:b4:9c:3a:39:02:02:
4c:27:4f:c5:c6:a6:0a:12:e0:c9:0a:4e:61:48:9e:
17:12:ea:d7:f4:d3:94:1b:f4:b7:b3:4c:4a:36:14:
59:44:5a:01:b0:0b:1c:9b:f7:2a:d2:b1:6e:74:f1:
3b:9a:90:5d:30:ce:46:ee:f4:5a:81:4f:d6:46:39:
f0:4a:1e:f5:c4:2b:e4:e5:b4:6b:82:7e:f1:e8:e1:
70:6b:a5:bb:08:7d:69:87:69:70:32:b0:32:53:36:
da:41:49:a7:7f:f4:32:d7:c5:9c:ff:04:04:cb:4b:
d5:e1:43:27:ee:b9:bb:6f:29:23:ed:0e:e8:be:4e:
f3:fb:a2:96:e2:1c:71:95:98:d5:90:b1:87:b6:c6:
bb:c6:42:4b:40:d9:c5:cd:63:6c:a5:65:33:1f:29:
32:ca:ff:08:8e:22:af:60:a7:13:6c:f9:cd:4c:11:
bd:d8:50:63:17:1b:97:6c:0b:92:01:8b:de:a8:c2:
70:9b:f1:74:6c:1e:d2:d3:27:f5:4e:41:6d:24:ab:
1b:32:f4:a0:1d:30:a6:67:7b:8a:60:17:7d:e7:b0:
fa:aa:ce:35:8c:d6:77:a0:62:fe:c6:57:4c:43:b9:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:CD:B8:33:35:0A:5E:2E:9C:61:A1:64:04:92:48:C8:E2:86:B0
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:f5:21:3b:1e:26:46:aa:46:c4:ed:41:ee:88:9e:a8:71:
8a:27:cd:5b:ae:ec:33:f9:48:fa:a0:7c:6c:51:41:15:af:c4:
54:0c:2a:d4:1e:92:09:ec:67:74:cd:f2:68:40:ab:05:f3:e4:
b9:60:58:92:56:bd:b7:32:e5:f8:df:b6:12:9e:c1:86:fa:5e:
c0:00:e9:4d:09:7a:4a:c5:c8:9c:a5:b6:13:c7:b3:f5:fc:94:
6d:80:5e:99:12:7b:54:1e:d4:65:9e:ba:ed:89:fc:ef:1d:98:
b8:d1:e4:61:ec:5d:9c:e7:68:de:bd:cd:6d:0e:b7:71:6d:53:
b1:dd:58:7b:05:02:39:0a:a3:df:0c:e2:25:ae:d9:89:47:f9:
85:72:14:b9:26:03:55:fd:d2:15:b9:87:f0:2f:f7:23:8e:5a:
66:a5:65:3c:4b:5a:5a:3d:38:49:4a:70:5b:c9:eb:fa:26:62:
90:50:48:93:ef:7d:24:94:90:8c:af:28:a4:b7:9d:18:dc:21:
cf:70:cb:a9:4a:ad:22:7d:d2:53:24:d2:a8:0f:a2:17:01:d6:
b2:ee:89:c6:59:6b:d7:52:aa:3f:04:d3:2f:4a:6c:98:90:5c:
44:8d:07:e6:31:66:cf:4a:aa:ea:b9:7c:91:ed:77:bf:93:5b:
18:1a:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:09 2025 by rpki-client