Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
File: _OTzlnKb9HjmNlSYIfb2lw2JP1I.mft (raw, json)
Hash identifier: LdfWBJxOW23vXwc/Gj/iIRjwr7Jfdg1wSDKEvUfxVic=
Subject key identifier: BF:AB:2D:47:19:47:FB:CF:2A:50:B0:E7:DA:1D:4F:9F:94:05:35:E0
Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
Certificate issuer: /CN=fce4f396729bf478e636549821f6f6970d893f52
Certificate serial: 0198D5F145F3714E5AA610AD4FD126D8F4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: _OTzlnKb9HjmNlSYIfb2lw2JP1I.crl (hash: kfYFqLO6ZOm+MwWxNgolhx9RF9z2i3TCl7lfvBCEh3k=)
2: adNqeNQUFWI4IAHxy1r153UdECA.roa (hash: xLvUeb8ak+yii4A1TZl7dHrog2mgx9j4/AxydjM8K8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:45:f3:71:4e:5a:a6:10:ad:4f:d1:26:d8:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=bfab2d471947fbcf2a50b0e7da1d4f9f940535e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:e8:eb:7b:43:c5:c2:e3:4d:84:fe:dc:7f:
e4:4c:3f:bc:1e:f1:7d:13:61:0a:5b:17:4e:85:85:
ab:e3:83:31:2d:71:38:2e:fa:88:01:34:ef:e1:f8:
6a:f1:5b:ac:d4:88:07:58:4c:3f:f4:4b:e1:f2:d5:
6e:a9:18:ee:1c:d0:06:09:22:fd:e7:6c:fc:f6:e7:
f6:dd:70:2c:e5:b3:4a:87:f5:90:46:43:dc:3f:62:
e3:18:7e:c7:b7:2d:ae:3a:10:9a:97:85:b5:8a:62:
f6:35:bd:56:05:7c:b7:ff:8c:22:8a:70:67:c0:5c:
19:21:74:a2:3e:b7:6d:6e:83:b7:58:e8:d4:3e:a2:
f2:a1:76:d7:81:a5:a3:7c:3c:f8:1c:37:2c:4c:d3:
e5:37:09:18:cc:f7:63:a3:ec:29:d0:47:dd:d0:75:
48:ba:0b:2d:d9:f3:71:b0:4c:84:b2:80:dc:03:09:
90:1e:f0:ef:e7:ee:4b:ef:c3:90:33:6d:10:49:7d:
27:cd:66:a9:af:e0:fe:4b:7a:d3:55:2b:75:41:87:
61:e1:66:11:36:45:ab:31:da:8a:0a:03:c5:23:f1:
6b:20:ff:ff:f1:6e:e8:a7:6d:61:ea:c3:3c:5d:09:
d4:ac:f9:8b:31:78:34:a8:ff:bc:d9:51:4e:36:52:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:2D:47:19:47:FB:CF:2A:50:B0:E7:DA:1D:4F:9F:94:05:35:E0
X509v3 Authority Key Identifier:
keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:01:fc:ab:59:59:de:3a:14:c2:cb:7c:8b:1c:e6:6f:7c:ce:
e2:34:a5:35:35:bc:49:a9:a9:2e:45:f4:ec:37:9e:44:e1:ef:
35:35:7e:24:8b:12:75:14:50:ef:ab:c7:00:79:bd:41:0b:22:
83:f9:72:a4:db:af:1e:d5:ef:d7:3e:4a:0b:23:d8:c9:53:68:
ea:87:a3:27:b4:5c:2e:4d:a3:32:e2:32:98:fb:71:08:a0:74:
60:b0:84:9b:c8:a6:86:f5:b6:5c:5a:30:03:32:c1:ac:3b:57:
e0:b6:96:89:d2:33:8a:66:bf:af:86:52:3e:65:e8:bb:b3:0b:
30:68:f1:80:eb:e7:6d:85:8e:e6:4f:0f:0b:07:a9:35:55:78:
ed:aa:b6:64:63:1a:0b:5c:bf:e3:57:b6:18:a5:57:4c:51:c8:
5e:d7:85:b4:9f:e7:e8:27:64:1c:39:a5:f3:3d:af:f3:08:bb:
4e:9a:2b:54:e6:68:15:f0:9b:83:f3:de:e5:0a:46:1c:95:ca:
78:15:ca:24:dc:79:69:2c:11:66:83:d4:27:26:9d:23:a6:c6:
e1:77:a1:d0:69:5c:70:ec:cb:e6:b9:15:6a:94:5c:e6:49:ab:
e8:37:a1:8a:dd:b9:00:43:32:a2:a3:77:04:d6:91:7d:0d:b2:
90:85:66:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8UXzcU5aphCtT9Em2PS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTRmMzk2NzI5YmY0NzhlNjM2NTQ5ODIxZjZmNjk3MGQ4
OTNmNTIwHhcNMjUwODIzMDgwMDE1WhcNMjUwODI0MDgwMDE1WjAzMTEwLwYDVQQD
EyhiZmFiMmQ0NzE5NDdmYmNmMmE1MGIwZTdkYTFkNGY5Zjk0MDUzNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I7o63tDxcLjTYT+3H/kTD+8HvF9
E2EKWxdOhYWr44MxLXE4LvqIATTv4fhq8Vus1IgHWEw/9Evh8tVuqRjuHNAGCSL9
52z89uf23XAs5bNKh/WQRkPcP2LjGH7Hty2uOhCal4W1imL2Nb1WBXy3/4wiinBn
wFwZIXSiPrdtboO3WOjUPqLyoXbXgaWjfDz4HDcsTNPlNwkYzPdjo+wp0Efd0HVI
ugst2fNxsEyEsoDcAwmQHvDv5+5L78OQM20QSX0nzWapr+D+S3rTVSt1QYdh4WYR
NkWrMdqKCgPFI/FrIP//8W7op21h6sM8XQnUrPmLMXg0qP+82VFONlL/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+rLUcZR/vPKlCw59odT5+UBTXgMB8GA1UdIwQY
MBaAFPzk85Zym/R45jZUmCH29pcNiT9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09UemxuS2I5SGptTmxTWUlmYjJsdzJKUDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zNjI3NWUtNjc1OS00ZDUyLWIyZDEt
OGM3MGRlOWU5YjlkLzEvX09UemxuS2I5SGptTmxTWUlmYjJsdzJKUDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zNjI3NWUtNjc1OS00ZDUyLWIyZDEtOGM3MGRlOWU5Yjlk
LzEvX09UemxuS2I5SGptTmxTWUlmYjJsdzJKUDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAH8q1lZ
3joUwst8ixzmb3zO4jSlNTW8SampLkX07DeeROHvNTV+JIsSdRRQ76vHAHm9QQsi
g/lypNuvHtXv1z5KCyPYyVNo6oejJ7RcLk2jMuIymPtxCKB0YLCEm8imhvW2XFow
AzLBrDtX4LaWidIzima/r4ZSPmXou7MLMGjxgOvnbYWO5k8PCwepNVV47aq2ZGMa
C1y/41e2GKVXTFHIXteFtJ/n6CdkHDml8z2v8wi7TporVOZoFfCbg/Pe5QpGHJXK
eBXKJNx5aSwRZoPUJyadI6bG4Xeh0GlccOzL5rkVapRc5kmr6Dehit25AEMyoqN3
BNaRfQ2ykIVmPw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:08 2025 by rpki-client