Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: 8kot/5BEUmELX0LnezaOUpRjnv7E+UiHMQ9Zx9/Pxg4=
Subject key identifier: 9A:9B:AC:48:12:1F:D0:96:E9:A5:C1:67:1C:92:9E:B2:A0:30:50:33
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 0199FBEAB1D480C6D78D8AF8C27620A34A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: jDT/209GEJtZaRcrFrQe9NumXfHNDFazSPnyShXTOTQ=)
2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b1:d4:80:c6:d7:8d:8a:f8:c2:76:20:a3:4a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=9a9bac48121fd096e9a5c1671c929eb2a0305033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:8c:2c:51:d0:dc:39:50:97:ab:f9:6e:ec:
65:9b:9e:7f:b6:2a:58:6f:8e:0a:29:22:16:02:a5:
74:2e:36:51:d2:cd:00:8e:6b:6f:ae:91:55:f2:b5:
07:8d:6e:2f:06:0b:5c:30:7f:7b:4f:bd:8e:b9:6f:
7b:05:6f:25:72:ce:82:11:f1:fe:9e:eb:f2:07:81:
63:a5:fc:84:fb:cf:32:cc:ba:5f:12:e4:be:49:51:
e3:fc:11:54:2e:0a:2d:07:c0:19:72:ff:e4:fc:4b:
a3:9a:91:f1:4e:13:b3:ff:14:92:78:77:cc:3c:fc:
c5:c8:a5:e3:ab:7d:0c:27:62:25:1d:02:b0:03:c0:
a0:6d:e0:7c:fb:28:a4:f7:71:74:10:a7:30:dd:49:
c7:0c:39:36:c4:74:17:99:e0:e7:61:c1:c3:68:de:
4f:a7:a2:68:49:06:1a:04:ed:d3:6d:43:b9:43:65:
43:94:98:ca:70:35:18:9e:60:29:2b:b7:fb:1d:f7:
d6:f0:81:14:87:3a:c6:cd:c2:fe:6a:80:9a:94:a8:
ae:65:af:bb:8b:5d:cb:35:07:4e:bf:91:4a:7b:85:
f7:a3:5b:88:21:68:67:64:67:fe:19:43:a6:79:76:
83:1d:2d:b5:5d:f8:3a:cb:dd:30:ce:a7:91:7d:8a:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:AC:48:12:1F:D0:96:E9:A5:C1:67:1C:92:9E:B2:A0:30:50:33
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:79:23:5a:c4:55:9b:26:e8:f3:60:f4:c4:ed:86:b6:a1:
7a:60:72:ce:d4:e9:05:65:32:0e:bd:39:1e:ad:00:aa:87:60:
fa:1d:64:08:70:30:1e:d4:4a:62:21:23:6a:93:95:66:6e:33:
ac:53:70:9b:3f:6c:9d:dd:01:e8:5a:04:7f:6e:08:7f:dc:bc:
f9:87:56:a4:e7:9d:0f:21:84:69:c3:a4:44:f1:21:19:bb:72:
b8:79:76:ec:f1:2d:db:04:18:e0:74:21:48:e4:55:0a:66:e2:
8b:79:71:58:db:56:de:c9:23:5a:16:5a:07:db:3d:4e:5d:04:
db:60:93:0d:1e:a6:de:fe:20:27:d1:88:38:4d:fc:95:42:2e:
b4:0d:c5:74:3a:22:4c:dc:67:46:7b:a8:ea:a7:3f:07:58:2a:
56:65:43:b8:46:58:e5:48:24:36:78:9a:ac:85:d2:10:dc:36:
8c:1e:f2:ca:0d:1b:76:68:db:21:08:9c:20:f6:e0:1d:70:d9:
20:b6:4a:72:22:66:51:07:b1:6f:94:eb:c0:b0:ea:cd:7e:ba:
19:ef:05:73:53:54:b6:72:2f:9d:c0:1d:2d:38:3d:a6:43:9b:
e7:73:c1:d8:6b:2c:6b:ed:7e:2d:4f:66:38:ac:9a:15:8b:02:
ee:48:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:23 2025 by rpki-client