Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: erlGgvRQeJCxZKgLyz26NY+OYuMKNa2w9AsdmCK+SYE=
Subject key identifier: DA:16:06:A1:7E:01:AD:D7:36:43:FE:2B:E1:7D:73:8C:71:6C:F2:2E
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 019A4D7459A74038208C873CEC461AC27BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 10E8
Signing time: Tue 04 Nov 2025 06:01:02 +0000
Manifest this update: Tue 04 Nov 2025 06:01:02 +0000
Manifest next update: Wed 05 Nov 2025 06:01:02 +0000
Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: vi7CqCMdEzX1N4sqbonTCZyqQarOEDTIUGvqovTWWZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:59:a7:40:38:20:8c:87:3c:ec:46:1a:c2:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Nov 4 06:01:02 2025 GMT
Not After : Nov 5 06:01:02 2025 GMT
Subject: CN=da1606a17e01add73643fe2be17d738c716cf22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:eb:64:cd:85:e6:5d:85:29:90:d2:a9:2b:
52:ff:7c:c5:df:e1:35:01:c0:dc:1e:66:9c:32:19:
3a:f1:c2:2f:4b:88:69:ac:bd:30:a8:6e:29:e2:e7:
9e:5a:2d:42:0b:17:ad:19:c3:9a:20:fb:ec:21:fe:
1e:43:e3:37:1c:e5:14:55:9f:cb:d2:1f:ef:de:87:
11:92:ec:77:fe:0f:6b:0b:75:e5:4d:3e:8a:bf:32:
ac:19:08:e5:1b:12:a8:a4:ee:5f:94:7d:46:92:6a:
53:5e:d3:29:78:d5:1d:65:07:2b:07:51:be:f3:57:
6c:66:65:52:b4:23:49:38:6d:74:9a:2d:a4:96:1b:
64:e1:e3:9b:45:c4:3e:41:07:9a:f9:7e:89:ba:4e:
6b:fc:2a:60:f6:17:27:70:9c:85:cb:80:99:d8:38:
a1:a2:cd:21:35:41:b6:7c:b2:77:98:54:76:e7:b4:
f0:3e:79:f6:c3:af:e6:c5:e3:3a:ef:73:82:fc:b7:
5f:a6:61:5f:73:37:66:bd:83:fd:8a:7c:17:48:3b:
65:ec:8e:38:ea:ee:c4:e7:2b:74:7e:38:6e:0b:93:
78:0b:a0:4b:1a:56:7f:ae:3d:6c:42:8d:e7:ee:bd:
c9:38:dd:42:c2:09:3a:2d:db:27:b7:93:11:aa:88:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:16:06:A1:7E:01:AD:D7:36:43:FE:2B:E1:7D:73:8C:71:6C:F2:2E
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fc:2c:c5:7b:4b:5e:c2:3f:2a:0d:76:fb:74:32:1a:9a:f8:
c5:cb:4d:5b:58:fd:39:03:1a:aa:22:b6:d2:d2:42:37:64:04:
33:5e:e4:b9:e1:35:f7:2a:bc:11:e0:1e:5e:d8:a2:e0:63:b9:
d5:75:02:90:7d:a6:74:40:12:ad:d8:b2:9d:0d:cc:d1:bb:c1:
30:75:9f:a9:d5:de:b3:97:00:c2:6c:1a:a0:70:f2:c7:63:0f:
9b:71:80:d7:3a:18:7e:ab:3e:b3:05:9b:30:0b:15:58:79:6d:
f5:85:53:c3:94:6d:8d:85:5b:91:46:5f:6a:26:34:c3:a6:46:
e4:00:27:46:b5:82:31:7c:2f:81:be:6f:b3:bb:60:12:fa:91:
74:a0:6f:03:09:03:ad:58:66:d0:38:e3:ed:7c:b9:b6:ce:fd:
39:64:82:4f:3d:c5:98:db:cb:10:b7:cb:80:e7:93:d0:5b:4e:
ef:13:96:71:38:96:9b:32:1e:d1:97:d8:13:d0:2e:f7:7c:2c:
32:3e:c1:ec:f1:a5:98:ac:b7:4c:75:9f:5d:b1:c8:be:a6:c7:
eb:a0:56:92:54:cd:b4:fa:56:47:10:54:c6:74:ad:63:f5:29:
01:b6:c3:b4:58:3b:41:84:9d:16:b0:c3:23:c5:5b:8a:82:df:
7e:c0:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:13 2025 by rpki-client