Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: eq9sMzs/E6ljFyIXlwROCnNDSMVxBY7UwuisR+b27yk=
Subject key identifier: 82:0E:4A:7A:CA:DB:4F:C6:EF:71:7B:28:64:EE:7F:AB:A2:9B:9A:55
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 0199FB7C9738E9835AC51AA3828E12556670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: 2ksl-0DaqqPMJOIcVSjRYw3oowo.roa (hash: bR5/CsRer/6UzbcdOln79yAgzHl3TX5cZlnxevkQmfk=)
2: NeDUni-C3uHplhagAy2lf9i4WwQ.roa (hash: tf9wG40bSRlg1tIcGU3dfENffu94T3Q0YSHKTzWPt14=)
3: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: c/Q5mJaWAqaLtkIHh8Z4aqLvOwR2x5K5rVRjRlFMPgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:97:38:e9:83:5a:c5:1a:a3:82:8e:12:55:66:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=820e4a7acadb4fc6ef717b2864ee7faba29b9a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:46:4a:e3:c5:8f:c7:04:1e:64:51:6e:46:
c9:dd:6e:a2:c8:78:44:6a:ea:6b:80:bd:70:b5:26:
3b:4a:2d:5f:8e:1c:24:f8:42:2e:74:ec:51:ff:8f:
55:41:89:90:64:81:b1:f8:c0:54:ef:50:4c:fd:99:
52:1c:75:fa:b1:b3:28:a3:c0:7d:96:f7:47:ff:05:
cf:c7:1a:71:6e:09:23:43:18:76:98:9d:0f:8a:86:
79:8f:cd:f0:68:c3:62:5d:26:94:a0:c8:49:47:ed:
65:ce:96:80:3e:63:46:98:77:6a:c8:c5:49:8c:af:
53:6c:2e:f8:7d:96:56:f3:66:1e:6b:2d:f0:39:2b:
03:78:fd:0f:1e:f3:57:5e:7b:82:1c:4d:1f:4c:5f:
7f:7e:c5:02:61:29:5f:9d:6d:b3:79:9b:f1:31:8c:
1e:96:8a:0d:43:e6:aa:18:19:54:88:32:96:56:7a:
54:64:45:51:33:e0:0a:ba:be:3d:4b:17:4b:8e:c6:
3d:51:46:5a:7f:ad:f7:77:5e:e4:23:87:e1:48:3e:
ed:b0:a1:87:08:b0:90:d7:cc:d1:5f:f9:b0:db:3b:
40:5e:b6:7a:69:81:c7:99:f9:79:3e:2f:98:79:c3:
b4:0b:a9:1c:b8:00:cf:c1:a1:60:77:d1:fd:79:aa:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:4A:7A:CA:DB:4F:C6:EF:71:7B:28:64:EE:7F:AB:A2:9B:9A:55
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:83:f0:e7:ac:f1:1a:ff:d1:30:95:76:42:29:d8:e8:c7:
22:ca:16:be:22:51:ed:d2:7d:1e:91:a2:e5:1e:95:b0:b6:50:
99:b4:b8:81:b8:3f:6a:d1:07:63:ab:e6:04:4d:2f:9c:53:a6:
d7:37:a5:6e:8d:a2:85:f7:17:ef:b6:2c:4f:5b:e5:d9:85:4f:
b7:d8:be:f9:a8:84:c5:88:74:90:50:12:d3:d8:02:3c:58:a9:
1b:d9:36:d8:9e:fa:d4:39:9f:fd:9d:39:63:fa:d2:5c:09:31:
9c:5e:9a:f1:f8:25:21:37:63:f7:df:be:86:b9:d0:30:45:bb:
ab:f7:71:64:97:d6:c2:18:bb:7d:7a:fd:7e:12:f1:ef:9d:2f:
6f:45:6b:d8:aa:9a:0f:b4:24:95:93:31:f9:51:a5:67:0a:e3:
e5:f2:0d:3a:b7:6d:17:24:bf:9a:2f:16:8c:1d:c7:df:ed:1f:
06:ff:32:87:d7:1d:17:1e:7f:84:ac:11:19:3d:94:e5:c9:43:
02:bf:3b:51:74:ed:90:dd:09:b8:76:1a:8a:93:6b:ed:0f:91:
ad:af:d4:14:91:45:27:45:73:bd:c4:b2:c1:0e:e3:25:87:1e:
26:f0:da:7d:5c:59:9d:08:f5:a5:41:c8:29:c1:a9:0f:0d:5b:
d7:af:fd:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJc46YNaxRqjgo4SVWZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5M2QyZjBhOTYxOTlhMDYwODU2Y2Y2N2UyMTA1ZmRhMmNi
OTNkMzcwHhcNMjUxMDE5MDgwMTEwWhcNMjUxMDIwMDgwMTEwWjAzMTEwLwYDVQQD
Eyg4MjBlNGE3YWNhZGI0ZmM2ZWY3MTdiMjg2NGVlN2ZhYmEyOWI5YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoJGSuPFj8cEHmRRbkbJ3W6iyHhE
auprgL1wtSY7Si1fjhwk+EIudOxR/49VQYmQZIGx+MBU71BM/ZlSHHX6sbMoo8B9
lvdH/wXPxxpxbgkjQxh2mJ0PioZ5j83waMNiXSaUoMhJR+1lzpaAPmNGmHdqyMVJ
jK9TbC74fZZW82Yeay3wOSsDeP0PHvNXXnuCHE0fTF9/fsUCYSlfnW2zeZvxMYwe
looNQ+aqGBlUiDKWVnpUZEVRM+AKur49SxdLjsY9UUZaf633d17kI4fhSD7tsKGH
CLCQ18zRX/mw2ztAXrZ6aYHHmfl5Pi+YecO0C6kcuADPwaFgd9H9eap9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIOSnrK20/G73F7KGTuf6uim5pVMB8GA1UdIwQY
MBaAFDk9LwqWGZoGCFbPZ+IQX9osuT03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTkt
NjE5ZmE4MGI4ZDc0LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTktNjE5ZmE4MGI4ZDc0
LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPaD8Oes
8Rr/0TCVdkIp2OjHIsoWviJR7dJ9HpGi5R6VsLZQmbS4gbg/atEHY6vmBE0vnFOm
1zelbo2ihfcX77YsT1vl2YVPt9i++aiExYh0kFAS09gCPFipG9k22J761Dmf/Z05
Y/rSXAkxnF6a8fglITdj99++hrnQMEW7q/dxZJfWwhi7fXr9fhLx750vb0Vr2Kqa
D7QklZMx+VGlZwrj5fINOrdtFyS/mi8WjB3H3+0fBv8yh9cdFx5/hKwRGT2U5clD
Ar87UXTtkN0JuHYaipNr7Q+Rra/UFJFFJ0VzvcSywQ7jJYceJvDafVxZnQj1pUHI
KcGpDw1b16/9GQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:38 2025 by rpki-client