Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: EmQnOYaEFIFab6tcBlMrI7mi3USbkCK4hTW6vkQ91XI=
Subject key identifier: 27:51:BD:D8:91:4D:D1:A3:B5:46:73:52:88:88:7C:AD:F3:73:D4:56
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 0199FD3458FB376D2A91B053119710F21424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: 9yB36t+7U8ZvXdcfhKSYGvtqwjnzzsW7VwLPDRreBFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:58:fb:37:6d:2a:91:b0:53:11:97:10:f2:14:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=2751bdd8914dd1a3b546735288887cadf373d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:08:47:18:13:0f:42:5f:ce:8d:08:1c:00:
f2:2a:8a:f6:4a:00:95:4e:88:33:42:ab:af:9a:c1:
3e:b4:33:bb:e6:29:10:f3:e7:1d:a2:71:97:12:f7:
5c:d0:ea:03:29:0f:6e:65:77:2c:81:38:58:b5:f7:
94:9d:b8:35:db:6b:28:9b:d4:a4:43:37:9e:60:6f:
46:f0:55:1f:bc:b4:ac:d4:04:d7:0f:f4:83:7c:cc:
9c:ea:b9:80:77:5e:03:b3:23:bf:5d:27:93:c6:9a:
46:c4:29:4f:bb:32:99:44:85:61:ed:30:07:af:5c:
df:66:e8:0b:96:3a:f4:c2:de:ed:ba:0f:d0:66:52:
37:fc:b1:c9:6c:4a:52:de:00:51:6e:a1:06:2f:da:
32:c4:2b:4c:15:62:ca:13:83:36:ef:48:0e:af:54:
4b:91:4c:72:7f:9d:68:78:f3:4b:bc:f4:e7:67:2e:
b1:03:ce:dc:da:30:6a:73:6d:22:da:5f:c9:ce:9e:
44:2e:20:c2:f8:f8:7a:96:cb:2d:95:07:11:dc:f8:
cb:94:5f:46:7c:77:93:ed:68:f4:a5:78:6e:a4:31:
11:dd:9c:14:2c:e2:40:f9:10:fe:6d:66:cf:22:07:
7f:87:39:b3:0f:5b:98:5f:72:92:3e:6a:30:87:09:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:BD:D8:91:4D:D1:A3:B5:46:73:52:88:88:7C:AD:F3:73:D4:56
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0a:67:43:45:8e:e4:ff:79:ef:04:9a:4a:3d:37:ad:af:1d:
43:be:d8:d8:ee:50:bc:db:2d:8f:29:c9:1f:aa:88:ae:3f:8c:
47:65:d4:74:c5:ac:ab:0b:f5:73:c8:37:c1:c7:95:37:46:d6:
6d:d6:5c:3b:77:23:c3:f8:4e:e8:66:69:49:56:5c:ec:bb:68:
91:b7:3c:6b:d4:8f:67:a5:30:bb:bd:c4:13:95:38:d3:42:ca:
f3:f8:d2:b2:35:cb:5e:0f:a0:ad:77:34:cd:a0:4f:bf:16:a0:
b2:80:54:f3:43:2f:bd:bf:0a:77:38:88:e8:11:92:15:88:5e:
0b:a4:32:67:d0:4b:fd:88:aa:96:c1:45:56:19:3c:88:65:e2:
72:3e:3d:6a:1c:1e:a4:29:2b:fa:8d:d9:d9:94:a1:b1:37:cd:
df:58:d8:77:b7:b4:af:af:13:7e:1e:59:41:91:28:31:6d:bb:
3f:24:a1:ce:d2:93:d5:4a:28:28:b2:1e:48:7f:ef:05:8c:92:
04:7b:bc:0e:2e:bf:db:21:95:50:4b:07:7a:72:16:be:9f:c4:
6a:9f:c6:5f:5d:48:4d:60:10:53:bf:ec:c6:c4:b5:f6:d2:f4:
1d:07:23:b5:a4:d0:67:40:f0:a1:12:48:c7:5f:82:fd:e1:4e:
d7:f4:e9:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFj7N20qkbBTEZcQ8hQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGY2ZmI2ZjVjODBjYTRhNjAzODI3Yzk2YjNiZGY2MGFk
NTYzYWEwHhcNMjUxMDE5MTYwMTMwWhcNMjUxMDIwMTYwMTMwWjAzMTEwLwYDVQQD
EygyNzUxYmRkODkxNGRkMWEzYjU0NjczNTI4ODg4N2NhZGYzNzNkNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniUIRxgTD0Jfzo0IHADyKor2SgCV
TogzQquvmsE+tDO75ikQ8+cdonGXEvdc0OoDKQ9uZXcsgThYtfeUnbg122som9Sk
QzeeYG9G8FUfvLSs1ATXD/SDfMyc6rmAd14DsyO/XSeTxppGxClPuzKZRIVh7TAH
r1zfZugLljr0wt7tug/QZlI3/LHJbEpS3gBRbqEGL9oyxCtMFWLKE4M270gOr1RL
kUxyf51oePNLvPTnZy6xA87c2jBqc20i2l/Jzp5ELiDC+Ph6lsstlQcR3PjLlF9G
fHeT7Wj0pXhupDER3ZwULOJA+RD+bWbPIgd/hzmzD1uYX3KSPmowhwmPLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdRvdiRTdGjtUZzUoiIfK3zc9RWMB8GA1UdIwQY
MBaAFKMPb7b1yAykpgOCfJazvfYK1WOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgt
ODBhYjc3OWVlZDEwLzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgtODBhYjc3OWVlZDEw
LzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQpnQ0WO
5P957wSaSj03ra8dQ77Y2O5QvNstjynJH6qIrj+MR2XUdMWsqwv1c8g3wceVN0bW
bdZcO3cjw/hO6GZpSVZc7Ltokbc8a9SPZ6Uwu73EE5U400LK8/jSsjXLXg+grXc0
zaBPvxagsoBU80Mvvb8KdziI6BGSFYheC6QyZ9BL/YiqlsFFVhk8iGXicj49ahwe
pCkr+o3Z2ZShsTfN31jYd7e0r68Tfh5ZQZEoMW27PyShztKT1UooKLIeSH/vBYyS
BHu8Di6/2yGVUEsHenIWvp/Eap/GX11ITWAQU7/sxsS19tL0HQcjtaTQZ0DwoRJI
x1+C/eFO1/TpUw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:20 2025 by rpki-client