Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: uyd5Te7gzdVjSTXsYu9CspzcMViler4rxIknJkTfhTM=
Subject key identifier: 0B:48:3C:24:59:74:CC:52:A7:21:B2:C4:12:82:D5:AF:95:37:31:E7
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 0199FD3475186148D860ABB09EE54879D0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
2: NNbGYKZN2MczsbLVZDvW2hdl718.roa (hash: 4E2t0fTnEc7nZVPHCni1To4F2fDuKI/+fcnfWn1WYJA=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: RF6oe0imEAJr4QgCLeHxdzEXzqJ0J336zeTGkEkO3zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:75:18:61:48:d8:60:ab:b0:9e:e5:48:79:d0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=0b483c245974cc52a721b2c41282d5af953731e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:d6:32:b2:a0:e9:a7:ae:c8:9b:63:0e:4a:
f3:24:3b:f8:db:2d:bf:0e:c4:c8:e5:90:cb:bc:f7:
8f:21:43:09:6d:71:ab:4b:e2:d7:2d:16:81:ef:6c:
6f:09:74:ed:ea:42:64:07:f5:24:fe:66:ed:af:e8:
68:c9:e9:9a:fa:e0:00:a9:dd:b4:37:6f:c8:05:27:
32:31:c1:0a:ba:0b:f6:b8:1d:96:01:34:36:7a:92:
7a:d4:8b:6f:6b:95:f6:ee:56:60:dd:9b:61:80:0d:
51:8b:7e:32:62:14:8b:cf:dc:31:2d:cc:c2:3b:df:
25:87:93:aa:ad:f9:a8:da:14:aa:e0:6a:ed:cb:24:
3e:02:17:c6:07:88:3d:e0:ea:5c:c1:65:d6:30:08:
42:e1:a4:2a:c9:2f:e0:2e:33:b2:bc:75:a1:b7:00:
d1:30:e5:e0:e8:65:7c:c2:9e:07:19:d9:cf:10:04:
21:74:41:74:d3:21:af:9b:97:70:cb:0d:83:5f:04:
e9:2f:ad:85:62:aa:63:fe:d6:b2:86:3b:de:b4:7d:
66:c7:c2:64:e8:e0:57:cc:8b:69:85:42:38:70:93:
dc:8d:3f:0b:bc:6b:6c:54:ff:8a:35:76:62:94:52:
4d:06:2f:44:2f:09:b5:15:65:96:35:9d:74:c7:e7:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:3C:24:59:74:CC:52:A7:21:B2:C4:12:82:D5:AF:95:37:31:E7
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c9:92:9a:9e:c9:41:ff:49:6f:ac:85:16:ed:22:97:ff:d0:
27:48:89:4a:d8:0c:39:03:ab:ca:06:8f:c9:4b:c4:6b:78:2f:
21:1a:79:b9:23:1b:4f:91:78:bf:b5:37:62:2e:2b:0b:86:2b:
fa:16:c4:44:3c:f2:07:3c:98:65:07:80:3e:8c:ea:11:e2:78:
39:fb:72:f7:e2:f7:2a:70:d6:79:8c:5b:0e:28:98:21:64:4b:
79:93:ee:5c:0a:6d:91:3e:8f:4e:3e:8d:e4:ce:34:6b:3b:3b:
6c:ae:64:b5:62:9e:18:cd:e5:21:20:d1:59:9f:20:9f:1f:30:
40:1d:a5:3c:a3:a4:31:b9:eb:fe:01:18:18:a9:67:de:15:30:
07:23:f7:dc:7a:41:86:7d:90:25:1b:2c:44:51:75:30:b2:bc:
09:f1:65:90:8a:04:ac:79:11:71:2a:9f:06:44:c9:7f:23:c1:
5d:91:83:8d:19:db:86:59:9f:89:03:ca:a3:33:45:dc:6d:be:
e1:a6:f7:43:f1:dc:e7:34:a0:01:30:e2:b1:5f:66:a8:ee:91:
91:fe:d8:8b:fd:1c:4b:de:e2:db:f4:98:c6:3e:d9:44:ce:ca:
c3:38:d6:e8:08:58:af:d4:db:9d:51:70:99:28:41:81:43:1d:
62:58:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:17 2025 by rpki-client