Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: oYKCMpvI98SpZmx/ZLvF7bmtIKuyTb5d8Cf/yTYZ1GU=
Subject key identifier: 3D:08:AA:98:62:EE:B5:2F:1E:29:7C:12:67:F4:D2:95:1B:91:BD:52
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 0199FC587BC60A16667A2B0BBDF473575FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: AP9XQZ8ZvDvtfpxIhZ+sgqBNDG8xFjOFr1+ff4lVHz8=)
2: t9qHq5xTtnN-jj4rqq-G8Agb4fE.roa (hash: t+hLra7ztXXuOYQYYQngzFN6esJ5Nassa730bMic3dU=)
3: vLREmzKS7ARNQ8r2dAo92bSwFOE.roa (hash: I+ZNUqrukd4BTvdK3vQp+SBz+2MVzX88vJMJ1QUiiVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7b:c6:0a:16:66:7a:2b:0b:bd:f4:73:57:5f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=3d08aa9862eeb52f1e297c1267f4d2951b91bd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:cf:58:07:3f:27:ca:ea:e8:36:1b:52:0f:
7e:fd:5a:2f:4b:45:e3:7c:7a:51:a3:68:bf:2f:5a:
44:db:c7:0e:dd:82:c0:e1:4c:54:da:8e:2a:3d:8e:
1d:3d:e2:ec:08:a2:10:58:d7:f7:a4:5f:90:41:42:
1c:72:de:c8:dc:0f:e4:2d:f1:74:d0:12:7c:24:86:
19:be:58:bc:2e:4a:84:61:80:60:57:1c:b9:cb:b0:
22:77:a5:db:45:6d:80:8a:8d:d7:99:13:d8:4d:fe:
30:0e:84:13:f3:36:0e:d6:9e:d0:6e:b2:54:ac:9b:
10:c4:c9:68:32:a4:3a:d0:92:e9:ef:dc:d6:92:8d:
3f:47:6f:37:71:a9:b6:65:60:f0:e2:90:d1:c6:ae:
9a:99:fa:df:28:e8:e7:f9:40:26:b9:c7:00:36:0d:
c7:c4:15:c1:46:6e:25:34:94:42:ec:a0:83:ee:fd:
c2:36:a8:01:1c:60:df:ab:c9:cb:45:b4:13:55:0d:
31:95:72:95:8f:b0:1d:63:96:99:70:df:f3:1a:21:
3b:d1:57:01:6e:c8:aa:f2:ec:d0:42:10:a6:78:4d:
32:16:ed:93:3d:eb:0c:11:24:3d:e9:54:9a:24:00:
b6:29:05:34:12:3f:cd:5c:e2:f0:58:b7:5b:f1:58:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:AA:98:62:EE:B5:2F:1E:29:7C:12:67:F4:D2:95:1B:91:BD:52
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b1:76:74:cf:3e:ad:50:b9:74:8c:05:7a:75:46:cd:b5:54:
4e:8d:c4:1c:f0:f8:25:18:30:b1:fa:07:d0:d3:81:15:36:1f:
83:8b:23:c6:bc:27:55:34:87:7d:4d:b8:38:2e:af:55:e5:db:
3f:dc:2b:75:61:46:13:65:84:a5:e5:4d:47:65:c4:16:ee:23:
57:64:98:d9:5c:27:59:5c:1b:e9:b5:f8:f1:c7:8e:56:48:5c:
09:09:42:ef:12:09:10:43:45:77:7a:e3:a0:3a:4c:9d:35:00:
02:83:36:5d:ef:b3:d8:08:f4:1e:81:51:fa:3c:66:4e:b7:2f:
2b:6e:57:f9:06:d3:6d:60:21:2e:10:59:9e:0b:d3:83:3a:ec:
30:e7:53:ff:6b:69:78:66:06:c3:64:6e:a4:30:48:87:2b:e7:
4a:85:7e:88:ed:c2:51:06:9e:be:e2:68:1e:d7:98:b5:95:9c:
e2:ed:96:d7:ed:7c:49:93:2d:d3:93:c8:92:23:b4:09:6d:a1:
c8:28:6c:c5:d7:c6:a0:dd:38:e3:36:bd:80:25:dc:ee:d9:18:
ac:a3:c4:24:c4:91:48:3b:2c:39:08:3e:4a:52:5f:d7:44:40:
80:99:d5:c7:28:29:29:66:93:4b:7a:a7:be:8b:31:51:49:a2:
69:10:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:58 2025 by rpki-client