Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: KQpQmXH16Xopzn30Cxl2jjRy5lJ9Tvgt1o54jGM5+BE=
Subject key identifier: DE:C6:0A:8B:D2:69:B1:E5:D3:23:09:E3:CE:E0:5E:CA:B2:A0:9B:E3
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 019A4F98EEA329F2186DD4E0F2C418EB436E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 045E
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: OcFl3DQ6+FBKFFwbuGP3t6raE3XahwRvw89+4O67bjM=)
2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ee:a3:29:f2:18:6d:d4:e0:f2:c4:18:eb:43:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=dec60a8bd269b1e5d32309e3cee05ecab2a09be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:3b:0b:78:c6:7c:9a:50:4b:bb:ad:b3:ba:
48:b5:0d:32:92:d9:dd:98:9f:7f:11:13:ad:2f:50:
ba:7b:6e:19:98:88:48:3f:a9:e3:6d:df:de:30:cd:
7a:7a:00:37:76:7e:9e:2c:d9:70:53:c4:b4:3a:5a:
0a:45:29:e1:08:e7:13:0a:00:52:1e:65:48:b4:0f:
77:37:c9:27:fd:03:d0:b4:40:f4:d5:09:a4:73:8b:
d3:84:e2:aa:0b:58:14:a9:ef:6c:9d:e3:fa:80:19:
ad:00:63:00:a7:9a:3d:a7:60:0c:83:fc:80:d8:23:
2c:72:72:99:04:dd:0c:21:b5:e0:00:13:8a:c1:06:
fd:95:61:3a:07:57:3b:36:1b:e4:c0:f3:77:33:82:
59:cc:53:17:36:34:01:2c:e3:ce:a2:34:39:26:1f:
f1:7c:11:78:29:f1:80:af:5b:0a:e4:eb:a6:8e:d8:
cc:3d:13:4f:bc:8e:65:87:78:cf:b5:b9:72:3d:0d:
81:b3:a8:b5:b4:9c:35:9a:d7:a2:54:98:4b:b2:09:
33:61:5c:66:ba:44:e5:9f:14:fd:02:38:aa:6a:1c:
25:29:a4:fc:dd:fb:ea:c2:a9:05:98:b9:a9:ae:cf:
c9:12:b5:99:62:55:f2:f8:fa:ff:74:5c:f0:45:ac:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:0A:8B:D2:69:B1:E5:D3:23:09:E3:CE:E0:5E:CA:B2:A0:9B:E3
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:da:87:06:c3:4e:25:38:0a:cd:28:82:e5:76:d1:29:dd:13:
83:8e:17:ab:1d:91:e9:dc:9c:7b:6c:43:41:6c:53:bc:db:d5:
c2:81:3a:82:37:29:a0:8e:4e:b8:27:22:8b:b9:c7:5e:20:6f:
3a:ec:e4:61:44:36:18:85:77:be:5c:5a:f7:25:6f:30:77:18:
01:31:88:f5:d3:11:5a:33:86:1d:3b:11:d6:32:05:c1:4c:f8:
ae:76:7c:95:ec:84:83:e5:07:08:1f:17:55:5d:f1:0c:2e:61:
06:06:39:80:43:86:56:08:7b:7b:68:91:ec:b0:f0:15:f6:89:
81:99:47:62:0c:3f:06:74:96:66:45:c5:2a:4f:47:3a:a5:e9:
32:43:71:b5:2c:cd:0c:73:71:05:38:10:5f:54:b4:e5:cd:78:
d6:2b:47:1a:55:f6:97:c5:62:02:ca:46:74:77:2c:90:d4:72:
5a:16:ce:3b:f5:e1:28:0d:43:5f:8a:2f:3b:57:fd:c7:5b:d4:
ea:ad:8f:94:22:ee:e7:e5:bc:aa:5f:50:e6:9b:85:f5:a3:60:
76:81:93:09:2c:f7:59:0d:cd:c6:81:c7:e5:d1:b4:21:0e:20:
19:c3:e3:47:62:6f:19:db:14:e5:cf:4f:99:eb:9a:3e:7c:62:
c7:e7:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:50 2025 by rpki-client