Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: IGGBenkmz0fRVebw/7F+xhWkB3Y2rjwQHKGw9oxxQWQ=
Subject key identifier: 7A:7F:E0:98:81:06:06:48:91:76:58:F6:E9:22:A7:33:3E:48:39:DB
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 0199FBEB652CD8CA0AFF5621132EBA171F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 1053
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: BSu4lswUaSrmiTg6/xmahwqTRGLJimetJAEVtug7EfM=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:65:2c:d8:ca:0a:ff:56:21:13:2e:ba:17:1f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=7a7fe09881060648917658f6e922a7333e4839db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:12:e6:55:69:ef:a1:f4:af:1d:5c:08:f6:
d1:23:51:0b:01:63:50:e0:3f:b7:fd:32:55:c6:27:
ac:a6:37:d1:28:05:24:88:d6:75:db:ca:d5:e9:a7:
d4:fd:7a:fd:0a:f2:a3:8a:7e:dd:35:1f:91:ef:47:
22:e7:5b:70:3b:64:ce:52:0e:bd:1a:57:21:9a:f1:
70:a2:86:17:de:62:08:15:a0:c9:59:07:8f:2e:fb:
6e:e4:ce:64:58:c1:17:0f:ef:c4:20:23:ee:bf:fe:
08:4f:f3:b3:1f:36:d7:72:a6:a0:de:a4:16:4b:e6:
61:3c:52:9e:a0:ea:3d:f4:60:10:31:1e:10:1d:4d:
b0:50:83:7c:af:01:21:37:f9:3f:50:b8:52:19:79:
26:b8:22:0e:e4:05:68:d0:a2:d3:2c:c6:b8:7e:88:
82:c8:3f:eb:52:ff:b1:8c:7c:b3:fc:01:ff:47:8f:
9a:fa:21:34:6c:93:f6:30:56:7a:40:60:0e:43:cf:
32:14:ff:0a:84:86:f3:ba:08:76:b4:e0:8c:c2:40:
7e:21:49:ac:7c:78:e0:76:bf:ea:a1:97:f2:a0:28:
07:f5:89:82:1c:3a:67:cc:aa:ad:04:a9:62:c4:9c:
d2:51:e6:52:12:0a:dc:fa:65:3b:ff:0d:f3:b6:58:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:E0:98:81:06:06:48:91:76:58:F6:E9:22:A7:33:3E:48:39:DB
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b1:77:4f:66:2f:4d:ec:63:34:a7:ad:6b:dc:05:c7:2d:d0:
81:c8:bf:97:3d:78:17:9d:96:30:3d:7f:44:72:c3:4f:cb:a0:
1b:4a:d1:55:10:65:f5:68:5c:dd:47:80:4e:46:b8:2f:43:89:
d6:01:6c:28:0b:5d:96:7d:95:4c:a2:3b:9a:30:e5:bf:a1:73:
97:e5:ca:f5:fe:d0:27:89:ee:94:ef:94:6c:08:46:76:3f:76:
c6:c5:03:bc:10:3f:7d:f5:cc:e9:ee:b5:e2:04:c9:1e:a7:cc:
6b:b3:ae:54:e1:91:85:bf:fc:87:e0:36:0f:6e:9f:e2:02:bd:
47:cf:89:36:98:44:9e:48:60:71:f5:9d:76:e0:36:97:54:56:
f5:27:d9:e6:00:1b:cc:4d:7c:c0:76:ec:1d:cf:c9:75:75:95:
f4:45:05:3f:0a:d6:13:96:86:5a:fc:67:3f:07:d2:96:3d:70:
53:dd:f1:8f:95:91:ad:e5:43:d5:7d:87:1c:be:a3:44:87:52:
0a:17:3c:8d:55:f7:e4:7f:2d:32:34:e9:96:40:15:ea:02:46:
99:be:e1:a1:bf:c5:29:33:3c:67:eb:27:d4:0e:9a:68:71:58:
b7:8d:90:a9:75:d9:dc:49:e2:e0:cb:b1:14:57:61:c3:d0:69:
38:d8:0a:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn762Us2MoK/1YhEy66Fx8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMDNhZjE5NzY0NWE0OTQxYzZjZGIwODY2OWFmMDA4Yjc5
MTAyYmUwHhcNMjUxMDE5MTAwMjEyWhcNMjUxMDIwMTAwMjEyWjAzMTEwLwYDVQQD
Eyg3YTdmZTA5ODgxMDYwNjQ4OTE3NjU4ZjZlOTIyYTczMzNlNDgzOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDgS5lVp76H0rx1cCPbRI1ELAWNQ
4D+3/TJVxiespjfRKAUkiNZ128rV6afU/Xr9CvKjin7dNR+R70ci51twO2TOUg69
GlchmvFwooYX3mIIFaDJWQePLvtu5M5kWMEXD+/EICPuv/4IT/OzHzbXcqag3qQW
S+ZhPFKeoOo99GAQMR4QHU2wUIN8rwEhN/k/ULhSGXkmuCIO5AVo0KLTLMa4foiC
yD/rUv+xjHyz/AH/R4+a+iE0bJP2MFZ6QGAOQ88yFP8KhIbzugh2tOCMwkB+IUms
fHjgdr/qoZfyoCgH9YmCHDpnzKqtBKlixJzSUeZSEgrc+mU7/w3ztlgejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp/4JiBBgZIkXZY9ukipzM+SDnbMB8GA1UdIwQY
MBaAFNEDrxl2RaSUHGzbCGaa8Ai3kQK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDkt
N2RiM2VjNmZhMzAyLzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDktN2RiM2VjNmZhMzAy
LzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLF3T2Yv
TexjNKeta9wFxy3Qgci/lz14F52WMD1/RHLDT8ugG0rRVRBl9Whc3UeATka4L0OJ
1gFsKAtdln2VTKI7mjDlv6Fzl+XK9f7QJ4nulO+UbAhGdj92xsUDvBA/ffXM6e61
4gTJHqfMa7OuVOGRhb/8h+A2D26f4gK9R8+JNphEnkhgcfWdduA2l1RW9SfZ5gAb
zE18wHbsHc/JdXWV9EUFPwrWE5aGWvxnPwfSlj1wU93xj5WRreVD1X2HHL6jRIdS
Chc8jVX35H8tMjTplkAV6gJGmb7hob/FKTM8Z+sn1A6aaHFYt42QqXXZ3Eni4Mux
FFdhw9BpONgKhA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:04 2025 by rpki-client