Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier: SATleYHKuVWP16XewECHVCqU3T6Jb2TKleSt3gGrup8=
Subject key identifier: 45:C8:EC:11:79:9F:41:E3:53:89:01:8F:B3:30:65:6A:84:7A:DD:F4
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer: /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial: 0199FD6ADC7CF3C11A67F29C9F36515C4385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:02 +0000
Manifest this update: Sun 19 Oct 2025 17:01:02 +0000
Manifest next update: Mon 20 Oct 2025 17:01:02 +0000
Files and hashes: 1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: 64wV7cqWyrL6WcPDNGQGh2Z8DLks1cvfed6yTm1RX9A=)
2: 7Di18vds1Lh1nvSgqntfk1Ud90I.roa (hash: Lb6z4ox8gNoPqTMyyRUv6dVTsaJBuGj9jiCgzfLjPm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:dc:7c:f3:c1:1a:67:f2:9c:9f:36:51:5c:43:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Validity
Not Before: Oct 19 17:01:02 2025 GMT
Not After : Oct 20 17:01:02 2025 GMT
Subject: CN=45c8ec11799f41e35389018fb330656a847addf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:cc:a5:10:6d:30:f0:fb:44:a7:d6:26:97:
70:0b:0d:03:aa:a0:26:7e:b6:12:6a:e8:70:c0:57:
a5:83:10:68:94:21:da:ad:69:80:1a:67:1e:3d:25:
8b:5c:ed:77:2a:61:7a:8f:df:d4:89:ba:96:e8:99:
7c:04:6b:56:20:2c:ca:85:8e:f6:a5:de:89:16:54:
99:44:e0:ba:72:0d:ab:15:80:d6:72:42:b1:17:8a:
32:99:5c:ee:e9:66:3c:da:90:15:b8:07:b6:bf:b6:
99:c4:55:1a:d7:85:01:4f:dc:17:5b:2a:a8:b6:ef:
5d:06:ef:dc:63:5d:7c:f9:9b:54:6b:c9:4c:47:4a:
3d:18:3e:d3:cf:af:6f:c2:1a:19:c4:76:07:ec:8a:
25:be:23:94:37:1e:59:bb:be:eb:de:40:e7:ae:64:
77:60:b7:79:83:8a:f2:65:b6:bd:ca:ea:85:73:71:
ab:3e:e7:50:f1:e1:93:92:3a:51:50:64:9e:b5:15:
20:27:6c:17:97:4f:e4:c6:b2:84:5a:c0:c0:45:72:
6b:0b:1b:ba:9d:00:48:d8:9e:d5:f2:0f:6c:68:40:
d3:0c:5c:44:43:53:c9:d7:17:7b:cb:71:74:dd:ce:
dc:b3:c1:a7:8e:1e:89:43:53:c4:b7:9b:2f:26:0a:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C8:EC:11:79:9F:41:E3:53:89:01:8F:B3:30:65:6A:84:7A:DD:F4
X509v3 Authority Key Identifier:
keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4e:f9:72:f3:65:6a:2f:47:9a:66:22:eb:b3:cb:5f:a3:06:
0f:19:d9:45:49:6b:bd:3e:aa:b4:bd:54:3b:47:52:ff:a0:a0:
e7:b3:60:0c:65:e4:09:83:b2:e5:78:75:f9:00:4b:30:28:e3:
4e:41:4e:45:cb:4e:3e:51:99:28:86:b5:5a:10:86:05:e2:a1:
24:35:52:74:fb:3b:af:92:0f:37:c5:af:11:08:96:aa:93:e5:
ca:86:9d:31:ed:fc:d4:f4:65:64:68:7e:6c:47:77:2f:f1:cd:
9c:33:c8:a6:5d:6e:0d:0b:3e:09:2f:cf:3b:61:30:68:84:62:
f9:89:9b:42:1e:24:4a:be:a5:18:90:4a:c5:4c:e2:de:a4:79:
58:c4:8e:f9:92:82:59:bb:8d:17:45:d7:98:42:95:64:1c:18:
61:fc:bb:4e:3f:f0:01:51:a2:da:5b:1d:ff:f3:9d:f3:a8:a4:
d7:12:1e:f8:b1:6f:5c:c1:b5:84:07:0e:df:1b:18:9a:48:88:
61:b0:f6:dd:3e:9d:a0:fb:ca:c0:85:47:d8:24:39:70:3a:cc:
96:d1:b7:a6:e5:ba:a1:61:ec:09:33:dc:72:04:30:5e:2b:e7:
8f:f5:b5:2f:bc:cc:02:6b:f8:e8:81:9a:39:eb:1f:0c:08:da:
59:52:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:20 2025 by rpki-client