Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: SpFe0BMdHqX4OSwp16rP/6iVlirckU4/+vhuyZ6Cx0Q=
Subject key identifier: B5:70:EC:32:0D:2F:3F:D9:99:34:76:39:F5:C2:37:66:99:6D:1B:66
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 0199C5699B2679E826A60C1CBBD071EFD620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 16C3
Signing time: Wed 08 Oct 2025 20:00:56 +0000
Manifest this update: Wed 08 Oct 2025 20:00:56 +0000
Manifest next update: Thu 09 Oct 2025 20:00:56 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: 34L3GJrD4ZYL6BcyrA9F9aDsQRTn117wt1dQJ1fm20c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:9b:26:79:e8:26:a6:0c:1c:bb:d0:71:ef:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Oct 8 20:00:56 2025 GMT
Not After : Oct 9 20:00:56 2025 GMT
Subject: CN=b570ec320d2f3fd999347639f5c23766996d1b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:f6:cd:0c:e0:c5:51:ba:7f:ac:71:be:58:
0f:43:15:27:f4:40:26:35:07:c9:c7:c8:a7:4c:ca:
62:76:7a:ad:78:35:74:43:7b:32:c6:5f:16:9c:fe:
c6:60:00:f3:87:00:55:6a:3f:c7:64:94:58:bc:64:
68:b6:63:b9:9f:8c:63:68:a5:e3:9e:e2:df:4f:db:
79:e8:06:6f:aa:21:37:ec:46:f4:dd:39:9d:f2:e1:
68:90:4a:e3:5f:3b:92:c5:c3:3b:ca:e8:7c:8e:e9:
e3:da:15:a8:93:ad:26:ef:dc:5d:2c:9b:52:15:c7:
84:88:c9:8b:84:61:d2:1d:85:7c:aa:60:49:d6:01:
4c:d2:63:15:a5:14:15:a1:a1:3f:a5:ab:2b:b3:1a:
12:2b:35:fc:74:32:58:dc:a8:7b:5f:ac:b6:6f:12:
cb:87:15:ab:cd:ca:3d:a0:54:88:91:67:34:c7:c2:
95:98:0e:a2:d1:0f:82:91:d1:f8:1e:f6:9c:5f:56:
b7:09:2c:54:f5:02:67:ac:49:4d:69:14:6b:92:09:
8f:b6:5f:1c:6e:fe:20:9d:42:27:dd:a8:77:05:b1:
4d:79:4f:e1:07:ad:0d:63:36:7c:42:99:b0:f7:c1:
e1:d5:90:2b:9e:95:65:55:69:a5:47:7c:8b:da:f3:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:70:EC:32:0D:2F:3F:D9:99:34:76:39:F5:C2:37:66:99:6D:1B:66
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:b5:db:b3:1e:e8:66:91:70:cd:8b:71:3b:5a:e0:39:d6:
06:12:8f:5d:9c:67:ce:6a:19:91:be:c0:8f:58:c7:17:f9:8a:
0f:e4:f5:5b:c4:75:2f:4e:0b:c3:49:e6:aa:c0:24:c7:b5:56:
7e:d5:ee:89:75:6c:3c:32:43:a4:27:b1:15:79:e4:65:b6:68:
54:d6:3b:fb:85:ac:2a:e7:01:0a:bf:4b:aa:93:3c:61:19:c5:
58:da:2e:7c:2e:53:1d:6c:c6:39:64:1f:ee:ec:e1:6a:8f:74:
24:ac:2b:33:6c:86:ad:53:57:e9:a5:7a:f2:a9:cd:ba:31:89:
c9:08:e1:4c:af:8c:f2:bf:09:a2:6a:42:c9:14:d6:5b:b1:0c:
78:ba:86:b1:b7:92:b7:d0:2f:aa:1d:39:6f:07:57:0e:65:c4:
38:e8:11:e5:e6:6b:27:c6:38:90:bd:6c:47:e8:84:2b:cf:71:
fa:48:00:f7:fe:42:37:ca:99:4d:dc:8c:9f:65:88:29:44:cc:
51:8b:c3:5a:01:66:a6:10:05:c3:bb:c9:ea:b6:5d:ae:73:d0:
60:6a:54:68:b8:17:ed:20:90:62:b6:cc:62:6f:7e:df:e6:c2:
1d:38:64:19:76:7f:f3:dc:e9:18:5f:2a:90:1d:50:23:1b:8f:
89:26:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:22 2025 by rpki-client