
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier: JQeDzCWhO82Ko7/VmiZc9yVnN94np3zH86LRz6MsnCk=
Subject key identifier: 98:93:62:A6:CD:09:16:3C:11:60:DE:74:8D:E8:69:5F:B5:C4:2E:C0
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial: 0199FBEB2AB14F6287B7453E2D70B8FF1345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number: 0F
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: v3vsKDix+gxn3F1N3+dxekj1SXnIepGXnFKIebI5z4k=)
2: bzFosFN5ObqKTXX0o67vA-bvyEU.roa (hash: yXoWK432d1fj4jLB5fBcuqn/7QkMmdbiVvgP3kSmafw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2a:b1:4f:62:87:b7:45:3e:2d:70:b8:ff:13:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=989362a6cd09163c1160de748de8695fb5c42ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:18:2e:ec:fd:cd:39:66:9b:82:c8:d7:0f:
0a:3a:4f:27:b2:69:8b:31:37:de:9c:2f:70:8b:21:
31:54:1c:e9:d5:86:b8:56:2c:6d:0c:b8:6b:e7:6c:
01:f2:62:f4:09:33:eb:8b:13:fe:0c:a1:c9:1c:35:
a5:16:af:65:c2:80:6f:02:91:5b:a8:49:a0:bd:c6:
7e:5b:c7:33:66:da:5b:64:6a:d2:c5:f6:fe:c6:83:
d0:d2:40:5f:89:b0:40:aa:f8:5d:b3:7a:ba:b6:20:
6a:d1:22:e7:29:16:c6:1f:69:43:8f:4a:a7:a4:f9:
59:c9:c1:da:e8:f9:9e:18:73:65:c7:b2:d9:e8:55:
3b:0c:04:ba:6e:f7:4f:50:95:3d:60:85:f8:af:0a:
6a:91:ae:b1:5d:3c:99:5a:b2:cd:0f:66:e0:0f:1c:
1e:95:ba:e5:bf:a2:98:a7:bb:54:57:84:cc:bd:63:
ec:45:aa:68:04:2c:cd:36:45:a2:22:90:6a:4d:89:
24:77:46:0d:07:ba:99:67:0e:ed:f7:56:30:e4:1a:
e9:51:95:0a:c1:f1:f4:24:dd:85:60:16:bf:7f:35:
fb:bf:8e:f1:dd:60:0c:e4:77:e2:71:ad:dd:2c:a7:
bd:a0:bd:c5:22:07:ed:7a:f5:5c:90:34:cf:35:b8:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:93:62:A6:CD:09:16:3C:11:60:DE:74:8D:E8:69:5F:B5:C4:2E:C0
X509v3 Authority Key Identifier:
keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:7d:ad:2e:56:7c:f9:76:bf:69:aa:a0:96:49:7f:ac:96:
fd:a4:50:f6:ea:c1:05:ed:51:15:ce:b1:ab:66:4c:65:79:c2:
f8:c3:fc:ca:ca:c9:27:68:5e:7b:2c:86:85:c4:f9:af:c9:37:
f6:12:5a:13:49:ac:e9:e9:a9:04:ac:e8:fb:22:f8:9f:62:20:
4a:79:7f:12:68:39:b2:99:0b:79:93:d7:3c:b7:22:01:4f:3c:
95:a3:6a:9c:c9:d7:87:c9:12:91:b9:55:00:14:17:c2:b1:a4:
46:bf:ae:d2:89:63:d9:8c:66:87:7b:85:3d:58:8d:19:ab:dc:
8b:51:4c:6a:33:fe:19:72:00:9e:ce:67:8e:e5:c3:be:67:94:
ac:f0:b5:40:c6:48:67:8a:41:8d:53:f0:4a:32:7f:cb:92:97:
54:e0:17:06:9d:98:41:a2:29:de:ba:45:d3:21:c4:81:67:30:
33:5a:df:a3:71:6e:e2:d7:1d:23:ce:b9:84:c7:08:45:11:66:
05:31:e2:86:0a:3a:17:83:16:dd:3a:8a:10:eb:b1:20:2f:45:
d2:a4:91:65:be:4d:a1:ba:d6:3c:2a:92:01:5b:fd:40:76:cc:
b7:07:e3:b9:11:75:b9:b2:9c:da:ed:f8:dd:ed:cd:d0:74:c3:
d5:8e:c4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yqxT2KHt0U+LXC4/xNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZWQ2NjRmNGFmMmY4ZTExOWI4N2EyNjhjNWQ0MzAzZmJi
MzYxMTYwHhcNMjUxMDE5MTAwMTU2WhcNMjUxMDIwMTAwMTU2WjAzMTEwLwYDVQQD
Eyg5ODkzNjJhNmNkMDkxNjNjMTE2MGRlNzQ4ZGU4Njk1ZmI1YzQyZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMkYLuz9zTlmm4LI1w8KOk8nsmmL
MTfenC9wiyExVBzp1Ya4VixtDLhr52wB8mL0CTPrixP+DKHJHDWlFq9lwoBvApFb
qEmgvcZ+W8czZtpbZGrSxfb+xoPQ0kBfibBAqvhds3q6tiBq0SLnKRbGH2lDj0qn
pPlZycHa6PmeGHNlx7LZ6FU7DAS6bvdPUJU9YIX4rwpqka6xXTyZWrLND2bgDxwe
lbrlv6KYp7tUV4TMvWPsRapoBCzNNkWiIpBqTYkkd0YNB7qZZw7t91Yw5BrpUZUK
wfH0JN2FYBa/fzX7v47x3WAM5Hfica3dLKe9oL3FIgftevVckDTPNbgzswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiTYqbNCRY8EWDedI3oaV+1xC7AMB8GA1UdIwQY
MBaAFNHtZk9K8vjhGbh6JoxdQwP7s2EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2Mt
NGI5NTI5YjQ4Y2VhLzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2MtNGI5NTI5YjQ4Y2Vh
LzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELt9rS5W
fPl2v2mqoJZJf6yW/aRQ9urBBe1RFc6xq2ZMZXnC+MP8ysrJJ2heeyyGhcT5r8k3
9hJaE0ms6empBKzo+yL4n2IgSnl/Emg5spkLeZPXPLciAU88laNqnMnXh8kSkblV
ABQXwrGkRr+u0olj2Yxmh3uFPViNGavci1FMajP+GXIAns5njuXDvmeUrPC1QMZI
Z4pBjVPwSjJ/y5KXVOAXBp2YQaIp3rpF0yHEgWcwM1rfo3Fu4tcdI865hMcIRRFm
BTHihgo6F4MW3TqKEOuxIC9F0qSRZb5NobrWPCqSAVv9QHbMtwfjuRF1ubKc2u34
3e3N0HTD1Y7Efg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:15 2025 by rpki-client