Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: CGbpZEk96Z/1N2z39JzY3ufpMtNLHKNOs24mS32yaHQ=
Subject key identifier: 04:5E:D5:AD:52:72:9D:16:D0:88:0A:D4:1F:8D:EB:D9:54:2F:3E:9D
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 019A7293B1CC6F0E603E1A8945F6C490CAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: yYLrSqiHdKNuStTJktUrTAI/tA1msw1Y7NI7I0vhFRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b1:cc:6f:0e:60:3e:1a:89:45:f6:c4:90:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=045ed5ad52729d16d0880ad41f8debd9542f3e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:23:ce:36:c0:68:c1:ef:76:b6:cf:45:51:
61:f8:bc:9a:02:59:07:97:ca:10:77:6b:5f:4d:7f:
d1:64:52:b1:53:26:5b:57:da:92:a4:0a:32:b3:8a:
6c:54:8d:93:12:de:3e:5c:e2:c6:e6:94:65:7a:2d:
f9:eb:df:dd:6d:ab:93:17:02:98:67:da:ce:f1:ee:
a3:97:07:79:15:3d:1b:5a:6c:b0:8f:42:8e:69:83:
bb:0c:3a:a7:3e:e5:d6:cb:8c:1a:db:e0:33:8a:8a:
28:0f:29:1a:99:12:19:99:b1:b0:71:22:b9:90:84:
11:47:9e:34:fc:08:e3:4b:8d:50:07:af:3a:01:4a:
db:7b:29:55:fa:36:9b:6a:cd:a4:21:8f:8a:a1:c0:
55:ce:5e:a4:45:cd:9f:81:71:40:b7:06:1d:f2:dd:
ff:02:8d:1c:bc:08:a3:6c:2f:93:06:ce:10:c4:a6:
b3:e1:05:68:a0:06:c6:ec:4e:8b:a5:c5:69:b3:c0:
98:5c:1d:80:73:e9:aa:0a:39:91:c3:41:f4:3a:38:
97:82:5d:91:81:a7:bc:75:26:d4:47:21:e5:f4:1d:
be:2d:b5:49:e4:21:ef:8f:98:4e:a6:81:70:a1:f7:
e8:cc:2b:72:4e:98:87:2d:9d:41:1e:d9:d8:78:f3:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:D5:AD:52:72:9D:16:D0:88:0A:D4:1F:8D:EB:D9:54:2F:3E:9D
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:36:b2:f9:e9:51:87:10:62:a0:54:21:4b:65:9c:5d:2c:a9:
bd:12:fd:74:79:02:97:3e:b9:f8:0b:02:aa:f5:f3:b7:48:23:
17:4d:61:83:fa:fb:29:31:58:24:38:8f:b3:bc:53:62:03:c6:
c4:b5:e4:4c:b6:2a:75:db:82:74:cd:f0:e3:f0:6c:51:87:b3:
71:b1:20:47:76:4f:40:d6:ee:8f:50:ed:5e:68:24:ef:49:61:
95:5e:b0:a3:0c:58:03:1b:6e:7e:6d:d8:1a:af:21:d5:83:d6:
90:83:a8:2b:e5:d0:5d:2e:5f:73:89:a4:0a:6b:75:6e:87:d9:
a2:a3:ce:fe:f7:70:5b:79:cd:72:19:84:69:98:04:2f:eb:c3:
71:16:47:3f:55:51:8d:c7:5e:fb:e0:2d:5b:00:b2:c9:08:b8:
f7:eb:f7:21:52:fd:ea:88:e5:5d:50:dd:42:08:38:4d:45:cf:
29:58:7e:0b:8a:8b:e5:0a:1b:85:a8:0d:9b:35:2b:39:68:52:
35:fb:6c:19:8f:aa:96:1d:a9:92:57:b9:ce:ce:3f:2d:80:c4:
78:3e:6a:f6:e5:1d:76:72:6e:45:2d:17:23:a7:42:ed:ea:79:
8d:54:1d:33:f2:c6:83:22:54:be:6c:df:19:1a:08:7b:08:91:
97:9a:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:24 2025 by rpki-client