Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: OI/Gs2ra63Qewyb4CA37jvKuL6FMDN+t8LD2mSDQpU0=
Subject key identifier: 4D:1B:86:7C:EB:3E:EC:45:C5:AA:61:2F:38:B1:BD:F1:01:DE:35:C4
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 0199FB0F3CE90788795C4459EC7C0D57DDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:43 +0000
Manifest this update: Sun 19 Oct 2025 06:01:43 +0000
Manifest next update: Mon 20 Oct 2025 06:01:43 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: evkLTabdfVMqh7Wph2VY4SKpv4EoEVFq//8NzvXsPaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:3c:e9:07:88:79:5c:44:59:ec:7c:0d:57:dd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Oct 19 06:01:43 2025 GMT
Not After : Oct 20 06:01:43 2025 GMT
Subject: CN=4d1b867ceb3eec45c5aa612f38b1bdf101de35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:5f:b5:62:7f:8e:4a:35:fd:72:da:00:f7:
36:d2:bf:44:e6:b9:b6:0e:5e:1b:31:af:79:11:02:
31:d7:5c:94:26:73:44:ef:d9:b2:3a:a9:8f:54:e5:
92:21:1f:29:5e:27:85:94:d0:67:a6:62:bd:b8:56:
05:96:fc:cd:53:01:5f:1d:d6:4e:eb:cd:66:96:af:
25:3d:5a:93:46:4a:08:94:17:37:e0:3c:a5:27:aa:
6a:81:3b:31:72:a2:55:d0:b6:c4:fb:38:b4:26:bb:
02:e7:d3:38:f9:ce:06:a4:72:95:c3:7c:fc:36:1b:
3f:8d:c7:88:b9:58:e9:b4:ef:80:de:ed:d4:0e:b6:
8d:b7:1e:a7:83:dd:cb:5c:fc:22:94:28:80:92:aa:
64:b5:b8:f9:d9:d6:f9:96:a7:89:cc:5a:67:b0:b1:
6f:66:f6:5a:13:63:99:0b:95:3d:05:d2:79:7b:6d:
9d:ea:21:b4:10:d3:69:8d:ba:bf:10:f0:34:a5:b5:
31:68:3a:e3:27:06:aa:f6:31:42:d4:a4:c4:ff:02:
15:df:dd:b3:1e:f0:5c:0d:84:54:38:d5:db:e0:be:
9d:ba:72:d9:c2:b7:1e:56:0b:32:30:7c:15:13:d2:
20:c6:e8:06:33:e1:8a:6f:e2:da:8f:76:ed:5b:29:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:86:7C:EB:3E:EC:45:C5:AA:61:2F:38:B1:BD:F1:01:DE:35:C4
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e6:a8:e7:95:93:40:b1:55:86:b1:fb:ff:c0:2b:ac:1a:da:
e4:e6:b5:76:d4:b8:11:3b:2f:4f:37:77:98:be:56:00:1e:b4:
37:ca:39:a0:98:d8:c5:45:02:0f:a7:b9:a8:87:5d:76:00:d8:
ca:82:69:34:34:18:ad:ca:3c:e6:13:be:ea:e5:8b:fe:8c:b8:
8b:6b:0a:77:83:a9:d1:fd:6b:99:40:f6:97:7a:9c:e8:77:cb:
a2:c3:af:0e:c2:f7:3c:60:47:64:e4:56:b5:e3:4c:6b:80:e2:
ac:db:da:89:f7:bd:95:26:8c:dd:bf:8a:04:9b:6f:35:54:b6:
fa:4d:28:47:c2:c1:b2:56:ea:3b:70:a1:b7:44:15:64:12:e2:
ba:86:c8:2c:38:98:a8:ad:62:b8:0b:c1:ef:28:3e:6c:8b:bf:
c2:65:b7:43:e9:f8:b7:2c:46:5c:05:97:52:21:a9:d8:74:db:
bc:1e:1c:5c:04:1a:5c:52:e2:94:fb:79:a4:54:4f:a3:19:88:
0c:09:86:4f:96:37:f9:a5:8a:a1:eb:87:6a:04:e7:a9:e0:d8:
34:3e:5f:db:e1:b7:a2:6b:68:5a:4b:39:cd:5d:e0:71:e4:8b:
f8:b1:25:1a:bb:6e:04:98:00:40:fd:76:b5:03:a0:1b:09:ed:
35:63:a5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DzzpB4h5XERZ7HwNV93iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZWJhZjJjYmE4MzU5NDM4ZTQzNDEyM2RkYTdhNWEzOTZm
NWY1MTkwHhcNMjUxMDE5MDYwMTQzWhcNMjUxMDIwMDYwMTQzWjAzMTEwLwYDVQQD
Eyg0ZDFiODY3Y2ViM2VlYzQ1YzVhYTYxMmYzOGIxYmRmMTAxZGUzNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7ZftWJ/jko1/XLaAPc20r9E5rm2
Dl4bMa95EQIx11yUJnNE79myOqmPVOWSIR8pXieFlNBnpmK9uFYFlvzNUwFfHdZO
681mlq8lPVqTRkoIlBc34DylJ6pqgTsxcqJV0LbE+zi0JrsC59M4+c4GpHKVw3z8
Nhs/jceIuVjptO+A3u3UDraNtx6ng93LXPwilCiAkqpktbj52db5lqeJzFpnsLFv
ZvZaE2OZC5U9BdJ5e22d6iG0ENNpjbq/EPA0pbUxaDrjJwaq9jFC1KTE/wIV392z
HvBcDYRUONXb4L6dunLZwrceVgsyMHwVE9IgxugGM+GKb+Laj3btWymDowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0bhnzrPuxFxaphLzixvfEB3jXEMB8GA1UdIwQY
MBaAFIDrryy6g1lDjkNBI92npaOW9fUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDkt
Zjc4YmRiNmY2MGMyLzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDktZjc4YmRiNmY2MGMy
LzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOao55WT
QLFVhrH7/8ArrBra5Oa1dtS4ETsvTzd3mL5WAB60N8o5oJjYxUUCD6e5qIdddgDY
yoJpNDQYrco85hO+6uWL/oy4i2sKd4Op0f1rmUD2l3qc6HfLosOvDsL3PGBHZORW
teNMa4DirNvaife9lSaM3b+KBJtvNVS2+k0oR8LBslbqO3Cht0QVZBLiuobILDiY
qK1iuAvB7yg+bIu/wmW3Q+n4tyxGXAWXUiGp2HTbvB4cXAQaXFLilPt5pFRPoxmI
DAmGT5Y3+aWKoeuHagTnqeDYND5f2+G3omtoWks5zV3gceSL+LElGrtuBJgAQP12
tQOgGwntNWOl8A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:50 2025 by rpki-client