
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: 5uUWOIO4e3X42GnAPrXaHp2DiSaOTDQ148v8T8MT/1Q=
Subject key identifier: 80:33:E2:9E:EF:CB:EB:9A:C7:9E:DA:49:39:1E:E2:EF:D4:44:61:22
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 0199FBEAB27F157CADB2326ADC1F67EF33CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: phxfsjFj46OqVr5iY50Bb5aZ/ME1/t1B76x7Ey2AMgc=)
2: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b2:7f:15:7c:ad:b2:32:6a:dc:1f:67:ef:33:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=8033e29eefcbeb9ac79eda49391ee2efd4446122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:89:64:5a:5e:37:e0:9f:19:c2:cd:9d:50:44:
d8:04:72:4c:b5:2b:de:47:87:f2:32:aa:88:15:98:
07:70:0f:f0:a0:a1:2e:aa:e0:0a:23:b6:29:62:0b:
42:6f:43:39:bb:e1:61:db:39:41:2d:1f:a7:14:ff:
33:1f:e4:af:c9:2d:91:87:78:52:fc:e4:ca:24:f2:
52:d7:4a:15:aa:20:56:fa:24:60:a3:96:28:21:bd:
a7:be:a8:ce:10:bc:0f:c8:35:bc:c1:23:6a:c4:41:
d8:a5:a9:fb:1c:d6:30:71:93:6f:5c:28:96:07:55:
5a:ce:3a:29:f4:f5:11:8f:5c:13:45:76:5c:f8:18:
0b:d7:08:33:b1:49:e0:74:e3:e0:12:33:44:23:05:
82:26:7f:f9:1c:bf:8f:62:69:43:84:88:ed:ef:8e:
a3:07:3d:60:23:e3:d1:f7:c8:85:89:f4:ce:61:77:
2a:3c:ed:ff:ed:40:9e:24:83:d1:e3:1a:d9:39:a3:
79:b5:c2:da:1f:5a:f5:3b:b5:4c:14:66:f7:a7:b3:
ec:78:bd:90:b5:47:da:0f:8f:6d:7b:34:15:19:0a:
76:da:f1:4f:af:d1:38:66:97:d1:cf:a3:9e:46:3a:
74:26:1d:67:08:b1:6a:62:09:36:7c:e5:b5:30:b2:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:33:E2:9E:EF:CB:EB:9A:C7:9E:DA:49:39:1E:E2:EF:D4:44:61:22
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:64:dd:fb:01:68:4c:47:26:6e:ff:d2:b5:19:6c:80:5f:25:
42:8e:15:3b:4b:8a:c5:a0:ea:b5:2d:93:b9:d9:e5:c7:1b:a3:
d2:a9:48:e1:cc:8a:60:98:4a:85:0a:2a:5b:e0:1f:d3:6a:7f:
f1:e8:5e:2e:92:45:1e:d8:c5:98:d7:e5:57:b0:03:82:3c:06:
ea:45:ae:c3:a2:ac:3b:f6:7b:a5:c7:77:97:e8:6a:fb:93:d4:
16:b7:2e:11:84:c3:4c:a8:d8:28:f0:48:7b:e6:48:92:6a:14:
3b:5b:81:52:cb:4a:2f:8e:a2:b0:58:c4:c0:09:35:56:e3:37:
4a:3a:18:30:a4:8e:2e:4f:46:a7:9f:37:03:0e:10:ca:86:91:
e3:08:c1:53:42:b0:db:98:04:6a:39:5a:36:40:db:93:1d:7d:
d0:29:ef:1f:d0:42:45:01:2e:69:cc:cd:d2:6c:33:8e:d3:78:
05:64:7b:d3:35:1c:0b:4a:8b:d1:21:0a:35:d6:46:f4:4a:e7:
8c:8f:21:64:37:08:d2:8a:58:0f:cd:8c:aa:99:99:f0:33:4e:
1c:74:93:f4:51:a4:de:25:72:5e:99:07:b0:c7:a5:7b:2f:29:
17:cf:df:fd:1c:2c:9f:34:ad:2b:aa:83:b0:b2:a4:b9:6f:b4:
81:f1:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:47 2025 by rpki-client