Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
File: _OTzlnKb9HjmNlSYIfb2lw2JP1I.mft (raw, json)
Hash identifier: 9KV5UPJrPmNGbGiHkvF8qy43LuGJmeBKK4mVO8Etzo8=
Subject key identifier: C0:8E:B0:F5:3C:16:1C:2B:1D:18:D5:4D:72:3B:C8:ED:22:B1:84:CA
Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
Certificate issuer: /CN=fce4f396729bf478e636549821f6f6970d893f52
Certificate serial: 0199FB7CF716FBD8919FD8C4916033C55922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: _OTzlnKb9HjmNlSYIfb2lw2JP1I.crl (hash: M1866VxRRPBBrNd8FBOBsN0/AjyAs+zl0/Ob4TwB/LI=)
2: adNqeNQUFWI4IAHxy1r153UdECA.roa (hash: xLvUeb8ak+yii4A1TZl7dHrog2mgx9j4/AxydjM8K8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f7:16:fb:d8:91:9f:d8:c4:91:60:33:c5:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=c08eb0f53c161c2b1d18d54d723bc8ed22b184ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:e2:ca:86:9c:72:ef:30:0e:2b:65:da:38:
76:f3:97:c2:c2:20:09:06:7b:ed:3b:6e:b7:43:be:
db:c4:e7:3b:40:95:9b:80:cd:87:e6:c3:81:f6:e7:
20:20:8f:c4:cf:b7:be:af:ba:4b:4a:17:56:a6:2c:
9e:7a:6c:24:45:64:73:80:9c:ca:c4:9d:73:02:fb:
8e:31:79:8a:8d:bf:40:c0:19:85:e4:d3:35:a7:7f:
39:1c:95:db:17:81:d5:90:44:10:ba:d1:1a:27:03:
5d:c4:5d:9b:95:c4:df:21:76:95:b7:58:f4:f6:99:
c5:07:8f:fd:7b:9f:46:b2:4c:5a:40:37:40:e3:de:
cf:e6:90:34:23:be:cc:68:61:71:d2:d1:4d:49:ed:
0a:4b:ea:f2:06:23:a5:ed:6f:d9:b0:c9:eb:bf:f2:
c0:ee:3e:7e:36:99:93:37:8e:b2:13:46:05:3b:41:
90:d7:f8:5f:26:da:a7:70:16:09:dd:b6:45:64:79:
15:0d:1d:e5:e2:86:e9:b2:e3:87:fd:00:79:7d:e1:
40:b0:7d:7e:08:7c:7d:e3:45:9a:d7:ba:cd:de:d2:
03:6b:f0:ef:4a:0c:4c:de:76:84:87:01:c4:07:b3:
9f:c0:c2:c2:5e:72:00:3a:58:b2:dd:e3:46:ec:6f:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:B0:F5:3C:16:1C:2B:1D:18:D5:4D:72:3B:C8:ED:22:B1:84:CA
X509v3 Authority Key Identifier:
keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ec:f9:2a:2d:66:76:c3:bd:f3:29:f6:b2:c7:08:62:8b:2e:
5b:b0:36:dc:8f:19:84:30:2d:d9:a1:c1:6c:d3:dc:f9:e0:aa:
45:e6:5b:0e:0c:72:78:67:12:71:fb:3a:4b:87:22:89:7d:9c:
cf:b7:4e:f1:61:4b:11:43:2a:0b:18:e4:38:16:f0:a0:d6:2f:
f1:dc:22:5d:23:cc:cf:a5:72:ad:74:f6:74:ee:74:89:51:6b:
68:54:af:38:e4:ee:9e:68:16:30:f4:ca:06:5f:2b:d0:0d:c6:
67:b9:6a:39:79:70:c8:71:99:d0:61:3c:fd:3c:2a:ea:35:04:
4d:62:3c:7e:3d:81:8a:c6:03:74:b6:72:8f:48:e5:d7:da:e2:
cb:05:20:9b:b7:23:dc:7f:9b:5a:78:09:7e:ed:0e:a9:fa:7c:
73:97:c0:5c:21:85:bf:36:0b:b9:cd:b5:f7:61:26:38:fb:20:
41:86:56:e6:03:20:88:5d:76:ed:39:6a:5c:93:bf:33:ff:6c:
ba:91:87:cb:1f:8c:a8:c7:5d:98:3a:8f:df:b2:06:fb:84:3b:
55:bd:26:89:77:12:0e:66:79:56:04:8b:92:e6:0b:25:85:da:
eb:fb:c3:80:e8:82:aa:ff:85:83:20:7c:c3:dd:bc:25:30:a0:
57:65:fc:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPcW+9iRn9jEkWAzxVkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTRmMzk2NzI5YmY0NzhlNjM2NTQ5ODIxZjZmNjk3MGQ4
OTNmNTIwHhcNMjUxMDE5MDgwMTM0WhcNMjUxMDIwMDgwMTM0WjAzMTEwLwYDVQQD
EyhjMDhlYjBmNTNjMTYxYzJiMWQxOGQ1NGQ3MjNiYzhlZDIyYjE4NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzziyoaccu8wDitl2jh285fCwiAJ
BnvtO263Q77bxOc7QJWbgM2H5sOB9ucgII/Ez7e+r7pLShdWpiyeemwkRWRzgJzK
xJ1zAvuOMXmKjb9AwBmF5NM1p385HJXbF4HVkEQQutEaJwNdxF2blcTfIXaVt1j0
9pnFB4/9e59GskxaQDdA497P5pA0I77MaGFx0tFNSe0KS+ryBiOl7W/ZsMnrv/LA
7j5+NpmTN46yE0YFO0GQ1/hfJtqncBYJ3bZFZHkVDR3l4obpsuOH/QB5feFAsH1+
CHx940Wa17rN3tIDa/DvSgxM3naEhwHEB7OfwMLCXnIAOliy3eNG7G+3jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCOsPU8FhwrHRjVTXI7yO0isYTKMB8GA1UdIwQY
MBaAFPzk85Zym/R45jZUmCH29pcNiT9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09UemxuS2I5SGptTmxTWUlmYjJsdzJKUDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zNjI3NWUtNjc1OS00ZDUyLWIyZDEt
OGM3MGRlOWU5YjlkLzEvX09UemxuS2I5SGptTmxTWUlmYjJsdzJKUDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zNjI3NWUtNjc1OS00ZDUyLWIyZDEtOGM3MGRlOWU5Yjlk
LzEvX09UemxuS2I5SGptTmxTWUlmYjJsdzJKUDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+z5Ki1m
dsO98yn2sscIYosuW7A23I8ZhDAt2aHBbNPc+eCqReZbDgxyeGcScfs6S4ciiX2c
z7dO8WFLEUMqCxjkOBbwoNYv8dwiXSPMz6VyrXT2dO50iVFraFSvOOTunmgWMPTK
Bl8r0A3GZ7lqOXlwyHGZ0GE8/Twq6jUETWI8fj2BisYDdLZyj0jl19riywUgm7cj
3H+bWngJfu0Oqfp8c5fAXCGFvzYLuc2192EmOPsgQYZW5gMgiF127TlqXJO/M/9s
upGHyx+MqMddmDqP37IG+4Q7Vb0miXcSDmZ5VgSLkuYLJYXa6/vDgOiCqv+FgyB8
w928JTCgV2X8Mw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:45 2025 by rpki-client