Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: HRd80YtbBvfcGQAPQrTua0ORSrqnacAXqM/qx3EqBcc=
Subject key identifier: BF:42:4C:43:2C:09:3F:DE:2B:DD:29:A7:54:9E:21:BC:6A:88:55:EC
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 0199FBEADF3A5204916FE793EAD334F137EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0270
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: DEvHi2i21xBHmObSmzAejhcRcQ77kg4oB4lv/a1vWE8=)
2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:df:3a:52:04:91:6f:e7:93:ea:d3:34:f1:37:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=bf424c432c093fde2bdd29a7549e21bc6a8855ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:c8:76:33:1b:40:72:f2:05:c6:12:40:46:
07:04:3d:4f:d5:55:3a:54:55:e1:f7:81:17:78:9e:
df:70:12:c5:d7:54:59:cc:39:53:7d:b8:df:30:62:
01:0a:ef:5b:c1:89:d6:b0:8d:d5:e7:4a:20:ae:bf:
4f:7f:c3:4c:1b:57:16:6e:c7:7a:85:0e:76:ac:9b:
3e:79:f9:a7:5b:81:96:7c:3d:4d:f8:ca:f2:ab:25:
0a:83:74:3a:5b:6c:2b:36:10:c1:b6:83:21:56:48:
a4:06:de:41:14:9a:28:22:22:f7:4e:d6:7e:58:86:
23:c1:14:2f:ae:0f:c4:8e:d3:e2:76:c7:50:85:03:
13:3f:06:fa:7f:0e:6a:d9:9c:05:c1:c3:8e:33:bd:
76:d3:66:62:03:d2:ca:12:b6:bc:05:a3:d2:54:a2:
47:61:af:47:3a:d1:3a:aa:a6:25:46:ff:f9:2a:b2:
5b:90:4c:55:94:bc:43:11:97:b5:70:3f:99:f2:cf:
d7:da:fc:4c:b4:be:13:cb:0d:51:85:2d:88:5c:59:
b4:be:4f:b5:16:86:61:c0:a3:61:98:e8:68:31:26:
cc:f4:c9:9f:ed:dd:84:17:32:74:46:8e:74:aa:00:
2b:1d:93:9f:23:6f:4f:94:a7:0f:14:ab:f1:a2:e7:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:4C:43:2C:09:3F:DE:2B:DD:29:A7:54:9E:21:BC:6A:88:55:EC
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0b:ff:30:d4:c8:90:99:a6:c6:18:09:82:20:71:75:36:0d:
6f:2a:f9:18:de:d7:f8:21:ff:37:e5:7c:2e:b2:e0:fc:2c:af:
c3:ae:25:8a:f7:5a:0f:1b:93:0f:6e:3c:dc:5a:9e:b7:76:31:
cd:41:9f:cf:a9:b7:cf:d2:4f:98:42:fb:e5:70:60:3b:55:03:
81:93:5c:66:bd:2c:43:0f:cf:d6:c4:5b:cf:6f:d0:29:fd:e7:
9e:2a:4a:f4:59:62:86:d8:8b:ff:8a:e1:66:f0:0e:a2:ac:6a:
97:8c:3f:a3:41:e7:ec:ce:c3:1d:b0:03:b6:b1:0d:1c:52:f5:
69:86:07:d5:de:cd:4a:96:35:b4:34:19:c2:86:da:f9:e7:2f:
8a:b0:71:bc:f0:d2:2c:55:f4:18:1f:5d:7c:24:77:83:13:54:
2d:32:13:ef:b5:ee:ac:e8:0a:74:14:95:dc:8b:1b:3c:34:66:
8d:e7:d7:71:a4:88:f4:12:b9:3a:32:e3:7f:1d:b7:c9:62:3e:
57:12:05:31:a4:eb:b2:2b:70:85:ec:40:1b:53:33:7b:6c:da:
45:8c:bd:d6:1a:3a:70:79:71:6d:49:e7:2e:4d:ea:3b:af:d8:
8d:cc:9f:0b:b7:3c:f9:61:6d:48:65:d9:a4:53:3e:38:eb:c2:
5e:68:fd:4c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn76t86UgSRb+eT6tM08TfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw
NDRmNTcwHhcNMjUxMDE5MTAwMTM3WhcNMjUxMDIwMTAwMTM3WjAzMTEwLwYDVQQD
EyhiZjQyNGM0MzJjMDkzZmRlMmJkZDI5YTc1NDllMjFiYzZhODg1NWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSXIdjMbQHLyBcYSQEYHBD1P1VU6
VFXh94EXeJ7fcBLF11RZzDlTfbjfMGIBCu9bwYnWsI3V50ogrr9Pf8NMG1cWbsd6
hQ52rJs+efmnW4GWfD1N+MryqyUKg3Q6W2wrNhDBtoMhVkikBt5BFJooIiL3TtZ+
WIYjwRQvrg/EjtPidsdQhQMTPwb6fw5q2ZwFwcOOM71202ZiA9LKEra8BaPSVKJH
Ya9HOtE6qqYlRv/5KrJbkExVlLxDEZe1cD+Z8s/X2vxMtL4Tyw1RhS2IXFm0vk+1
FoZhwKNhmOhoMSbM9Mmf7d2EFzJ0Ro50qgArHZOfI29PlKcPFKvxoue7TwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL9CTEMsCT/eK90pp1SeIbxqiFXsMB8GA1UdIwQY
MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw
LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw
NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwv/
MNTIkJmmxhgJgiBxdTYNbyr5GN7X+CH/N+V8LrLg/Cyvw64livdaDxuTD2483Fqe
t3YxzUGfz6m3z9JPmEL75XBgO1UDgZNcZr0sQw/P1sRbz2/QKf3nnipK9FlihtiL
/4rhZvAOoqxql4w/o0Hn7M7DHbADtrENHFL1aYYH1d7NSpY1tDQZwoba+ecvirBx
vPDSLFX0GB9dfCR3gxNULTIT77XurOgKdBSV3IsbPDRmjefXcaSI9BK5OjLjfx23
yWI+VxIFMaTrsitwhexAG1Mze2zaRYy91ho6cHlxbUnnLk3qO6/YjcyfC7c8+WFt
SGXZpFM+OOvCXmj9TA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:09 2025 by rpki-client