Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: NifnOtvSeubE63kRTdJOJy350K0hRPQbg2CuAajlmFs=
Subject key identifier: CB:36:69:B1:E1:D1:12:69:37:C5:73:21:47:E6:1A:31:8B:FB:4D:48
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 0199FC58EAC2F8F78DCBB76C6AFBFECEC880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 16F2
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: eBTlP4F92UTDB5XuOJrYTpc3gf1lMBB1FIBMRXM5KDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ea:c2:f8:f7:8d:cb:b7:6c:6a:fb:fe:ce:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=cb3669b1e1d1126937c5732147e61a318bfb4d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:2f:36:e6:8d:eb:9e:a8:e5:af:c3:66:13:
5d:0c:87:67:d2:12:28:d4:f3:dd:83:77:fa:22:1a:
fe:dc:d5:5d:6f:16:5c:a1:d8:b7:1e:03:42:15:ed:
10:18:63:1d:2c:7c:5a:24:66:9a:95:c5:4e:36:21:
8a:ef:89:16:04:f6:96:75:ee:bc:8a:3d:f5:06:0f:
61:e7:8b:96:46:ad:f3:8e:d6:56:42:47:d8:c2:3d:
a8:ed:29:a4:8b:12:3d:42:57:60:48:91:25:fb:0e:
38:21:de:42:1f:28:c4:93:3b:b5:4c:63:ac:c0:7d:
93:d0:02:08:79:6e:8f:94:f1:dd:05:3e:32:61:0a:
ee:57:5a:2a:d4:1e:cb:3f:fa:af:6b:de:05:3b:3b:
5e:fa:0a:94:df:ea:e8:bd:80:7d:0a:fe:e7:fa:62:
04:a5:f2:d7:72:6e:b0:12:b9:39:ec:0e:47:86:05:
6a:24:db:cb:b0:5a:8e:e6:58:8e:23:4b:3a:4c:4a:
6e:4a:2a:4c:ae:6d:12:6b:3b:7c:96:76:99:4c:03:
35:3e:4f:79:50:58:1a:09:7e:ab:7a:24:65:34:38:
a3:88:0c:d9:1a:6e:b2:97:0b:eb:c7:f0:70:1b:b3:
42:0b:85:56:b0:68:0a:8d:20:2a:f9:3d:38:0d:54:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:69:B1:E1:D1:12:69:37:C5:73:21:47:E6:1A:31:8B:FB:4D:48
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4e:4b:fa:77:cc:d8:5c:32:80:90:01:1a:de:4e:d6:60:5f:
63:87:13:fb:b4:0f:29:33:27:b0:b0:44:fc:aa:3f:47:36:ed:
0f:76:03:7d:16:e6:83:50:9e:21:cf:11:e3:35:8e:c1:5b:60:
3d:9d:fd:1a:e7:d2:06:0b:7c:61:aa:9f:76:78:56:cc:3a:aa:
39:3e:74:78:be:1f:d1:61:d4:39:41:21:2f:d9:c1:b3:6a:2f:
c0:08:ed:f3:3a:87:36:ba:86:21:02:f4:7b:41:fe:a1:c7:d3:
9c:62:69:77:ad:6b:26:90:79:0c:b6:da:3f:ce:1c:b8:bb:d5:
ad:55:27:8a:1a:43:f2:cc:28:5a:22:2f:3c:47:a0:2d:82:bf:
de:ea:96:13:d0:ae:ef:70:68:31:7a:4a:5b:3e:1a:06:0c:dd:
13:fb:55:e2:77:a6:46:94:34:83:9b:56:63:1b:c0:a7:9b:5d:
88:5b:73:90:a1:82:11:75:07:ee:a9:98:1e:67:e4:2c:ac:08:
ad:f6:aa:a9:d0:f1:21:88:6f:a9:b3:ab:db:4e:9b:ab:b0:dc:
96:da:bc:1d:6e:1e:0f:c8:46:e7:3b:44:83:5f:ab:6c:6e:7a:
95:ed:1a:67:54:df:8c:22:54:15:e8:52:c3:62:d3:48:9c:ba:
c3:b9:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:29 2025 by rpki-client