Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: MqZ53oXHGwunKXNILVDoTnJBQbGO7qTqfwPPOCsMTKc=
Subject key identifier: 61:55:CE:AC:23:73:E1:6F:D0:17:00:CE:E6:90:87:E6:E7:81:D5:78
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 0199FC217BB7C4F6A0A38F4BF7D93731368F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0D84
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: 4syn9kRCXSDwqgM7mvkX9gvV/jWVQ5oJaXQSXEpxW0s=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7b:b7:c4:f6:a0:a3:8f:4b:f7:d9:37:31:36:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=6155ceac2373e16fd01700cee69087e6e781d578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:7b:c3:c9:66:88:1e:e5:5d:db:41:db:5d:
d9:b0:01:56:04:c9:ef:8a:7c:12:ae:d9:9c:48:a5:
c8:83:5a:b7:92:13:ad:f6:8c:cf:61:ba:e3:57:e2:
4c:b4:a5:df:8a:16:29:4d:fc:52:a6:ae:a4:39:49:
4c:b7:1a:17:28:49:3b:a3:6a:00:a4:52:72:48:7c:
04:f8:8a:70:a5:23:d5:19:e7:26:f5:6a:18:9b:c7:
99:52:c4:44:8e:45:9c:1f:3f:8b:92:e7:3a:8e:1a:
0d:66:e7:ec:c8:7b:c5:d8:e7:a2:3e:5c:37:e1:de:
ef:e5:a3:fa:a3:60:8c:3c:94:12:7c:31:0e:0f:51:
bd:7a:aa:68:9e:0e:ba:65:79:57:ab:e6:49:54:98:
e4:ac:5d:30:80:4a:25:ee:17:75:fe:2d:f8:56:95:
7a:93:ab:90:86:0d:d0:9f:20:9a:d0:42:83:41:d5:
c6:6d:43:4c:a0:c8:e1:d8:89:c8:43:ff:92:f6:73:
de:23:cc:0b:a9:9a:37:5c:30:cf:ce:9c:74:51:6e:
c9:16:3a:32:5a:1b:5c:05:41:07:06:dd:4f:d4:2c:
77:e2:ed:88:cf:21:fd:fb:2b:04:b0:91:c7:54:f1:
12:bd:4e:e9:49:71:c8:ae:5b:76:71:fb:1e:c1:84:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:CE:AC:23:73:E1:6F:D0:17:00:CE:E6:90:87:E6:E7:81:D5:78
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:06:ed:fc:d6:19:4b:6c:10:ce:95:82:e9:1c:a1:0c:54:61:
cd:b7:55:dc:b8:ca:cc:92:5c:2e:93:d8:91:bb:67:d2:43:cb:
06:c6:4d:5f:bd:a8:28:a7:aa:44:9a:7c:3e:e7:07:c3:78:9e:
c5:53:51:f0:90:c0:b4:71:83:76:10:a0:6a:ed:0e:d8:9e:a0:
b4:2f:3f:fe:37:16:d9:d5:cd:bf:d8:16:58:f3:62:7d:2c:7a:
e3:60:6a:4b:c6:af:8e:43:d5:3f:f0:94:bd:39:21:5f:3a:60:
a9:23:be:ce:fb:94:45:80:8e:15:f4:3a:2b:bb:78:5a:b9:91:
7e:c4:87:6f:99:f9:f1:59:9a:8b:b2:ea:83:d2:92:63:f6:55:
56:19:e8:ea:aa:e4:de:6d:f3:f6:d3:92:12:14:0f:35:ab:b0:
6b:4b:0a:9e:34:b4:06:06:8d:75:79:5f:b8:13:86:5d:2b:2c:
a5:86:e7:54:57:7f:8e:d0:fb:78:05:16:92:49:7c:86:42:09:
31:99:2d:97:73:a3:e1:f5:cd:a6:31:f3:e3:9d:ae:15:fd:e6:
d9:90:1a:6c:7b:78:4e:16:0e:64:92:05:64:f2:b1:b5:17:15:
08:7a:bc:cc:e9:4c:cb:26:6f:de:8d:8c:e1:3c:8b:4b:df:ef:
5b:12:5a:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8IXu3xPago49L99k3MTaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjUxMDE5MTEwMTE2WhcNMjUxMDIwMTEwMTE2WjAzMTEwLwYDVQQD
Eyg2MTU1Y2VhYzIzNzNlMTZmZDAxNzAwY2VlNjkwODdlNmU3ODFkNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e17w8lmiB7lXdtB213ZsAFWBMnv
inwSrtmcSKXIg1q3khOt9ozPYbrjV+JMtKXfihYpTfxSpq6kOUlMtxoXKEk7o2oA
pFJySHwE+IpwpSPVGecm9WoYm8eZUsREjkWcHz+Lkuc6jhoNZufsyHvF2OeiPlw3
4d7v5aP6o2CMPJQSfDEOD1G9eqpong66ZXlXq+ZJVJjkrF0wgEol7hd1/i34VpV6
k6uQhg3QnyCa0EKDQdXGbUNMoMjh2InIQ/+S9nPeI8wLqZo3XDDPzpx0UW7JFjoy
WhtcBUEHBt1P1Cx34u2IzyH9+ysEsJHHVPESvU7pSXHIrlt2cfsewYSLGwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGFVzqwjc+Fv0BcAzuaQh+bngdV4MB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgbt
/NYZS2wQzpWC6RyhDFRhzbdV3LjKzJJcLpPYkbtn0kPLBsZNX72oKKeqRJp8PucH
w3iexVNR8JDAtHGDdhCgau0O2J6gtC8//jcW2dXNv9gWWPNifSx642BqS8avjkPV
P/CUvTkhXzpgqSO+zvuURYCOFfQ6K7t4WrmRfsSHb5n58Vmai7Lqg9KSY/ZVVhno
6qrk3m3z9tOSEhQPNauwa0sKnjS0BgaNdXlfuBOGXSsspYbnVFd/jtD7eAUWkkl8
hkIJMZktl3Oj4fXNpjHz452uFf3m2ZAabHt4ThYOZJIFZPKxtRcVCHq8zOlMyyZv
3o2M4TyLS9/vWxJanw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:14 2025 by rpki-client