Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: 8oki9H4CSaCf16EoRwEJRX1qBqysfMicdhYBgMDbGeM=
Subject key identifier: BA:C0:7B:F0:FC:C9:61:2A:8B:94:8C:B9:03:97:C7:BC:88:34:43:31
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 0199FDD971CA18F3C0ED7C94C04FAE9D77D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 1185
Signing time: Sun 19 Oct 2025 19:01:49 +0000
Manifest this update: Sun 19 Oct 2025 19:01:49 +0000
Manifest next update: Mon 20 Oct 2025 19:01:49 +0000
Files and hashes: 1: c7xqGqZ0KnoVgSHP1uxqIn-gcow.roa (hash: fgA4jW+G01sd+KIFTnm2o/eJLY8zge2zWEftjWqJRcE=)
2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: PfLYM1Ox9usF6DBlB95Nc17GVTAisp6E8ULppUvJ294=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:71:ca:18:f3:c0:ed:7c:94:c0:4f:ae:9d:77:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Oct 19 19:01:49 2025 GMT
Not After : Oct 20 19:01:49 2025 GMT
Subject: CN=bac07bf0fcc9612a8b948cb90397c7bc88344331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:3d:ff:95:60:e1:49:e6:d7:fd:e0:cf:95:
43:3d:07:bf:e5:8a:8c:64:15:5a:2a:31:78:fa:b7:
5c:c6:11:65:f3:29:d2:fd:c6:77:5e:57:f8:0a:f3:
1d:aa:3c:b3:d0:01:61:38:8d:e3:76:80:93:bc:9a:
1d:8f:c3:8e:5f:af:5b:59:84:25:c3:23:a0:dd:59:
04:8f:a3:bd:8f:3d:2e:23:f7:29:ad:ef:8f:01:ad:
81:0f:65:08:68:d6:57:82:ab:49:39:39:e2:ab:5d:
90:01:07:56:e4:c4:e0:6f:96:b0:7f:09:97:44:16:
8f:8f:34:e5:41:5a:52:dd:81:44:8a:09:c7:e2:41:
d3:52:a0:fe:43:79:60:25:8c:42:97:8a:58:66:33:
dc:a2:c7:28:97:8d:86:55:13:1d:6c:b0:2f:c4:dd:
1f:f4:3f:5e:ba:eb:45:89:c7:b3:6a:4a:11:48:a5:
be:84:43:e9:fa:04:9c:37:c4:2f:7c:0f:46:ae:a2:
0c:dd:ba:eb:c3:8d:00:10:88:98:13:6b:42:ab:bc:
77:eb:4e:28:f1:f7:0d:fb:99:d9:86:92:b5:2b:64:
e5:61:04:15:22:f6:42:e8:fe:be:9d:66:f2:eb:5b:
b9:55:ea:bb:a7:c2:fe:c9:77:21:7d:e2:42:8b:51:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:7B:F0:FC:C9:61:2A:8B:94:8C:B9:03:97:C7:BC:88:34:43:31
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6d:49:88:91:48:15:14:3d:7b:6d:42:05:dc:79:4e:ac:54:
a4:68:79:e5:4e:07:19:24:72:7e:e1:a0:b9:45:06:ad:3d:95:
1b:ab:b5:d9:fe:13:41:fb:f6:aa:aa:a6:08:5d:a4:8c:2a:d9:
17:2d:2f:1a:97:c0:30:e7:7b:f6:13:e7:0d:b9:c8:6d:e0:64:
6e:44:cc:91:7e:35:39:2a:18:bd:86:6e:02:0a:b2:f2:7f:2e:
92:34:d0:c3:94:87:bd:4f:e7:5b:c8:6d:a6:fa:8c:08:78:72:
d1:c3:61:ce:21:37:f8:36:9e:a5:c3:82:a9:76:a7:af:2f:00:
73:7f:23:eb:c0:6d:d4:83:43:2d:1f:90:aa:bb:54:c2:67:bb:
db:61:6f:1c:39:0c:15:b2:5e:4a:24:28:b1:1a:11:77:95:9e:
15:68:e7:de:6e:62:41:12:70:7b:84:87:63:2a:bb:5e:3e:9c:
b0:10:5b:41:c0:ca:70:0a:1b:39:d4:56:0b:cc:aa:27:ca:b7:
bd:b8:c7:e8:1e:b2:77:80:6e:e8:06:19:38:96:76:85:cd:62:
50:74:4c:4b:e0:04:b9:33:e4:aa:53:b7:e7:95:c2:be:f3:52:
b9:83:ea:16:cf:96:05:bc:dd:b4:fb:b7:b5:56:28:f7:bf:58:
4d:69:7a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92XHKGPPA7XyUwE+unXfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm
NDRkNTQwHhcNMjUxMDE5MTkwMTQ5WhcNMjUxMDIwMTkwMTQ5WjAzMTEwLwYDVQQD
EyhiYWMwN2JmMGZjYzk2MTJhOGI5NDhjYjkwMzk3YzdiYzg4MzQ0MzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8c9/5Vg4Unm1/3gz5VDPQe/5YqM
ZBVaKjF4+rdcxhFl8ynS/cZ3Xlf4CvMdqjyz0AFhOI3jdoCTvJodj8OOX69bWYQl
wyOg3VkEj6O9jz0uI/cpre+PAa2BD2UIaNZXgqtJOTniq12QAQdW5MTgb5awfwmX
RBaPjzTlQVpS3YFEignH4kHTUqD+Q3lgJYxCl4pYZjPcoscol42GVRMdbLAvxN0f
9D9euutFicezakoRSKW+hEPp+gScN8QvfA9GrqIM3brrw40AEIiYE2tCq7x3604o
8fcN+5nZhpK1K2TlYQQVIvZC6P6+nWby61u5Veq7p8L+yXchfeJCi1FvOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrAe/D8yWEqi5SMuQOXx7yINEMxMB8GA1UdIwQY
MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt
OGRkYTZjNmNhODFkLzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk
LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW21JiJFI
FRQ9e21CBdx5TqxUpGh55U4HGSRyfuGguUUGrT2VG6u12f4TQfv2qqqmCF2kjCrZ
Fy0vGpfAMOd79hPnDbnIbeBkbkTMkX41OSoYvYZuAgqy8n8ukjTQw5SHvU/nW8ht
pvqMCHhy0cNhziE3+DaepcOCqXanry8Ac38j68Bt1INDLR+QqrtUwme722FvHDkM
FbJeSiQosRoRd5WeFWjn3m5iQRJwe4SHYyq7Xj6csBBbQcDKcAobOdRWC8yqJ8q3
vbjH6B6yd4Bu6AYZOJZ2hc1iUHRMS+AEuTPkqlO355XCvvNSuYPqFs+WBbzdtPu3
tVYo979YTWl6gA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:44 2025 by rpki-client