Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: VcF006IQFZYQv/ccOYTT+ydV36/MMAW9GDm6QjK5oSs=
Subject key identifier: F8:98:97:1D:71:86:36:A4:4E:70:FD:4B:E6:E0:7B:15:A4:72:B3:2D
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 019A2A4434E3C49B6FC6DDD7F3889B1D4E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 10:01:44 +0000
Manifest this update: Tue 28 Oct 2025 10:01:44 +0000
Manifest next update: Wed 29 Oct 2025 10:01:44 +0000
Files and hashes: 1: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: LueVWnpEqYQ3TS26oLQcRbgP7EKsduGtP6ZHqPh+CMc=)
2: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (hash: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=)
3: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (hash: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:34:e3:c4:9b:6f:c6:dd:d7:f3:88:9b:1d:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Oct 28 10:01:44 2025 GMT
Not After : Oct 29 10:01:44 2025 GMT
Subject: CN=f898971d718636a44e70fd4be6e07b15a472b32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:fb:9b:d3:5b:fe:10:7c:2b:0b:65:69:f7:
f8:98:58:47:b5:38:00:af:30:ea:c4:0d:81:e3:8c:
2f:1c:e6:b7:e0:60:d5:9f:f8:52:33:35:2d:79:b2:
04:b9:60:26:d3:55:aa:39:71:1f:d3:a4:e8:f5:62:
38:d2:2f:3a:e9:47:d2:dd:32:c0:30:35:0f:93:27:
6f:53:1b:40:74:cc:23:ed:e7:5e:83:4c:49:ae:03:
62:a8:83:a4:09:58:26:34:2d:f7:00:31:40:cb:77:
b0:5e:69:a5:60:b3:9c:26:7f:a7:60:e9:e3:79:d7:
da:7f:b0:70:a4:b1:9a:d8:e4:5d:84:39:c6:4a:34:
8c:dc:b9:52:b4:32:22:c8:c5:f3:60:3a:fd:c0:b5:
db:f1:5c:f6:59:21:08:a2:2f:b9:b1:0d:33:57:07:
a6:b0:73:93:1e:a2:b6:86:f6:1f:e3:5f:23:80:fa:
23:5a:6b:94:9d:0d:82:f6:f9:88:d6:2f:95:1a:f4:
6c:92:a5:0e:ea:17:93:43:8c:7f:e0:27:f6:00:6d:
a6:f9:af:94:fd:4f:9b:ef:f6:ad:cf:af:2b:0f:0e:
d1:87:b8:ff:14:66:59:e0:88:a6:d5:1b:20:2c:e4:
6c:df:c6:60:c5:65:2b:e8:e6:b0:aa:b7:5b:38:c2:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:98:97:1D:71:86:36:A4:4E:70:FD:4B:E6:E0:7B:15:A4:72:B3:2D
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8b:d2:44:b5:8a:fa:a2:88:53:d9:e3:09:a9:03:b1:65:34:
7b:dd:15:38:29:aa:c9:41:8d:a2:04:23:8d:64:59:1e:ce:f1:
94:aa:66:3b:f2:f9:e5:e6:fe:c9:36:0d:94:80:e5:ce:b4:b5:
74:50:5e:cd:37:49:d2:c7:35:9d:5a:09:b2:91:e7:9a:08:64:
83:a1:fe:15:77:85:f6:cb:1d:06:8c:4f:94:f8:b5:b4:b4:68:
fa:66:ac:a9:34:d4:9d:79:1c:4f:35:3d:f8:ec:23:6c:6d:de:
da:0f:c5:4b:60:51:4d:00:db:69:14:e4:2f:2c:aa:19:53:22:
bb:19:d4:f2:ff:88:d8:13:e9:1d:79:9f:09:12:b9:7c:c4:df:
11:d7:0d:3b:a4:5a:88:d2:bd:85:b3:41:ee:f5:0e:c5:12:f3:
e4:cf:7f:2a:cc:f0:02:c6:25:f3:a4:73:53:e1:9b:88:82:66:
76:07:f9:58:56:9e:70:60:bc:36:b1:f3:5b:0d:e8:2c:06:28:
1d:eb:af:6b:95:cc:41:a4:18:d9:f3:82:04:22:da:a0:ef:37:
5a:63:36:05:b1:08:98:b8:15:8e:d8:94:1f:8f:db:89:62:74:
b9:d0:e3:d2:43:3e:ec:35:18:c8:c1:89:bb:d6:d1:ac:70:79:
6d:16:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:57:48 2025 by rpki-client