Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: qdcFk9AfvMXaGXyWY6etb/+rj8x1h+3DmGACuK+IN3s=
Subject key identifier: 16:C7:AD:32:9B:48:AD:F9:F8:0D:96:F2:93:E0:DE:B6:97:71:FF:2F
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 019A4D73DB26847E2D5DBB5518A9E998E094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0B82
Signing time: Tue 04 Nov 2025 06:00:29 +0000
Manifest this update: Tue 04 Nov 2025 06:00:29 +0000
Manifest next update: Wed 05 Nov 2025 06:00:29 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: 1fsmKMtC4AY6bpUpaiSkM91PfMWiW4113EGNg4ZsBsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:db:26:84:7e:2d:5d:bb:55:18:a9:e9:98:e0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Nov 4 06:00:29 2025 GMT
Not After : Nov 5 06:00:29 2025 GMT
Subject: CN=16c7ad329b48adf9f80d96f293e0deb69771ff2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:af:0c:e5:bf:b5:32:f6:f0:b8:ba:66:b8:
a1:41:4d:29:35:1a:7c:9e:07:ad:80:9f:85:94:c7:
25:06:30:4e:45:01:b1:ff:af:6b:fc:9b:b6:60:64:
eb:a4:a9:fb:c0:4f:f9:f5:93:1d:34:8b:fd:ca:29:
05:47:38:1d:03:75:3c:a4:fb:6d:86:c7:0a:26:cb:
9b:15:83:3a:51:3e:03:b2:91:85:2e:78:4e:41:36:
0a:1e:0a:8a:5c:c8:04:8f:9d:50:73:dc:70:ae:36:
7b:2c:19:57:e1:92:a8:76:2a:10:28:80:33:31:11:
5c:a7:f4:5a:b6:be:d8:f6:35:e0:d8:52:d2:46:67:
c3:8b:51:7c:17:91:08:09:28:e4:e7:a4:34:51:b9:
f9:ee:95:f0:6c:61:7b:83:f1:8e:0a:43:31:0a:0c:
4c:0f:7e:29:4f:0b:59:11:c1:5c:4c:a4:1d:d9:14:
c7:28:9c:a8:50:7e:a1:ca:36:4d:e7:7e:ad:b6:86:
04:21:46:17:d2:49:6d:5f:bf:c4:ff:d7:33:c9:06:
05:05:7b:6f:8a:2d:be:fd:3f:f3:15:64:85:51:62:
05:86:6b:fb:55:ae:2f:ef:4b:44:b7:b5:7b:52:41:
9f:7b:a5:50:00:ae:9d:d7:1b:82:fd:03:74:5a:f4:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:AD:32:9B:48:AD:F9:F8:0D:96:F2:93:E0:DE:B6:97:71:FF:2F
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a8:7c:7f:06:2b:1a:6a:98:c4:a3:34:1c:56:d6:ce:34:f3:
82:e4:95:3d:08:13:a6:5a:ec:cb:43:05:88:7c:23:59:5c:2b:
0b:5b:7e:d1:f1:ae:db:52:74:8b:d0:db:bc:d2:d4:c0:7c:c2:
34:40:bd:20:16:27:b4:da:fa:a6:78:00:aa:fa:53:06:0c:88:
01:ae:50:69:14:0a:00:4b:cb:e3:06:8b:24:e7:3b:a6:49:77:
6a:9d:42:3f:c1:fa:5d:8e:6f:38:cc:0e:24:50:5d:87:56:ba:
28:dc:fb:d5:0e:fb:19:52:f9:88:a9:61:60:46:07:10:99:7d:
90:df:8e:b0:99:67:6d:07:bc:3d:aa:d0:ae:9a:e4:53:14:cd:
39:12:7f:74:4c:7e:e9:f6:08:36:4d:4a:b6:fc:51:7f:4c:ad:
7c:84:a5:e1:6f:04:f7:05:85:e1:86:53:e7:09:e6:41:e0:76:
06:6e:68:be:e4:54:d9:cb:f7:69:56:07:af:47:28:e9:20:e3:
90:68:de:05:74:b7:93:de:66:6d:51:69:f3:37:71:83:be:7f:
2a:cd:d1:7f:a5:ca:73:1b:2c:f1:73:97:21:1d:ea:30:8c:8c:
57:c9:1e:f3:7a:59:c0:b7:c9:d0:02:98:12:e6:44:78:19:28:
8a:f4:39:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc9smhH4tXbtVGKnpmOCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOTJmYzk2YTQ4Nzg5NTE0ZWIwOWY1Njc0YjU5ZGE1MmM5
MTE0ODMwHhcNMjUxMTA0MDYwMDI5WhcNMjUxMTA1MDYwMDI5WjAzMTEwLwYDVQQD
EygxNmM3YWQzMjliNDhhZGY5ZjgwZDk2ZjI5M2UwZGViNjk3NzFmZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9+vDOW/tTL28Li6ZrihQU0pNRp8
ngetgJ+FlMclBjBORQGx/69r/Ju2YGTrpKn7wE/59ZMdNIv9yikFRzgdA3U8pPtt
hscKJsubFYM6UT4DspGFLnhOQTYKHgqKXMgEj51Qc9xwrjZ7LBlX4ZKodioQKIAz
MRFcp/Ratr7Y9jXg2FLSRmfDi1F8F5EICSjk56Q0Ubn57pXwbGF7g/GOCkMxCgxM
D34pTwtZEcFcTKQd2RTHKJyoUH6hyjZN536ttoYEIUYX0kltX7/E/9czyQYFBXtv
ii2+/T/zFWSFUWIFhmv7Va4v70tEt7V7UkGfe6VQAK6d1xuC/QN0WvR71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbHrTKbSK35+A2W8pPg3raXcf8vMB8GA1UdIwQY
MBaAFKOS/Jakh4lRTrCfVnS1naUskRSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNzhmODMtNTM4NC00YzM2LThmNTEt
ODgzZjJmNmNiZjA0LzEvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNzhmODMtNTM4NC00YzM2LThmNTEtODgzZjJmNmNiZjA0
LzEvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArah8fwYr
GmqYxKM0HFbWzjTzguSVPQgTplrsy0MFiHwjWVwrC1t+0fGu21J0i9DbvNLUwHzC
NEC9IBYntNr6pngAqvpTBgyIAa5QaRQKAEvL4waLJOc7pkl3ap1CP8H6XY5vOMwO
JFBdh1a6KNz71Q77GVL5iKlhYEYHEJl9kN+OsJlnbQe8ParQrprkUxTNORJ/dEx+
6fYINk1KtvxRf0ytfISl4W8E9wWF4YZT5wnmQeB2Bm5ovuRU2cv3aVYHr0co6SDj
kGjeBXS3k95mbVFp8zdxg75/Ks3Rf6XKcxss8XOXIR3qMIyMV8ke83pZwLfJ0AKY
EuZEeBkoivQ5lg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:16 2025 by rpki-client