Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: crrRtlKYKGOcogco+o6RSPKkgsokIaTdUx4PDO4MXto=
Subject key identifier: 2E:EF:56:02:B5:48:1F:A8:B4:37:B9:80:E0:CB:E7:A8:E6:C1:89:7B
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 0199FE468E79E0AA290DCB11792EDCD30600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 21:01:00 +0000
Manifest this update: Sun 19 Oct 2025 21:01:00 +0000
Manifest next update: Mon 20 Oct 2025 21:01:00 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: EW/tpYB7oRufnE83to+D3KSBEIjTpAP/V64fPP/uzhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8e:79:e0:aa:29:0d:cb:11:79:2e:dc:d3:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Oct 19 21:01:00 2025 GMT
Not After : Oct 20 21:01:00 2025 GMT
Subject: CN=2eef5602b5481fa8b437b980e0cbe7a8e6c1897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:96:84:5e:55:81:95:c9:e0:59:47:df:4c:ef:
46:56:b0:4f:72:e5:58:98:94:0a:d0:d1:66:4d:fd:
1c:39:25:83:ae:d1:9c:3a:bd:f1:07:86:23:1e:4d:
f0:39:0e:4e:88:64:3e:0e:1d:ab:a2:13:0b:42:b9:
8a:ed:18:fb:83:41:f1:d8:9f:f0:39:bb:db:c2:80:
f7:1b:af:37:ad:93:2a:7e:b6:f3:d5:53:3d:8e:fe:
f5:65:e3:93:cb:44:a4:11:12:9e:c6:80:81:5d:df:
89:e5:aa:53:56:d4:12:11:04:8c:2c:81:c1:59:6c:
90:4b:09:88:f4:a4:8d:be:66:23:c3:de:e1:a4:e4:
72:75:e2:d2:eb:67:4e:39:1d:32:db:99:11:49:a5:
c6:31:a4:ec:0c:2f:a4:22:0c:16:04:18:c4:da:8f:
f3:68:ac:52:da:bb:c5:8d:30:15:eb:44:d4:0b:18:
e8:34:61:bd:44:79:64:68:16:b0:61:c4:97:12:a0:
b9:47:23:72:80:5e:76:72:02:d9:34:5e:c7:10:d5:
8b:05:92:75:f9:0a:f8:e3:4a:d1:eb:f3:a8:9d:00:
18:b6:6c:e4:f5:c1:17:25:d3:5b:ff:fd:87:d2:3d:
44:5a:e9:b0:73:6d:c9:cd:db:9c:52:58:59:e6:f6:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:56:02:B5:48:1F:A8:B4:37:B9:80:E0:CB:E7:A8:E6:C1:89:7B
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:96:11:7c:92:1f:b9:6f:0b:eb:ce:c2:70:49:70:8c:61:94:
34:20:3e:e7:72:6a:4c:38:b5:cb:e7:7f:fb:47:90:29:f7:15:
a9:a2:9a:f0:99:74:ed:b1:23:21:fe:f1:94:2a:a6:50:24:5a:
08:79:c0:4d:30:79:31:42:a7:e6:d4:54:1a:ba:18:be:90:3f:
7c:a6:52:06:5b:30:a5:34:df:6c:6f:32:1b:9c:a8:a8:e9:64:
50:ee:12:b8:c5:86:7b:03:68:8a:80:cb:f9:b7:84:26:4e:64:
bc:ac:3c:3c:c7:1a:4c:28:b5:ee:df:5a:ca:eb:9e:8b:fb:56:
4b:1d:9b:3c:45:f4:e0:68:cb:ff:05:6f:6a:4e:37:8b:e8:06:
87:6c:88:d8:6c:44:70:ab:04:2a:07:fe:2a:65:41:ca:70:fa:
76:8f:e7:3a:28:f5:57:00:f5:5f:b1:4d:cf:65:07:d1:de:7c:
ee:92:0a:00:0f:ef:65:6e:e2:5b:1a:28:18:10:a7:c7:0d:d8:
08:e9:63:bc:69:54:25:74:a0:96:92:0a:d3:44:ff:66:2b:49:
cd:4e:85:93:4e:64:f9:4a:28:25:12:28:2b:4b:57:d7:c4:09:
e3:bb:d7:2b:ac:61:ce:1b:79:ef:94:d4:ee:fe:cd:20:b0:b2:
75:ef:ed:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Ro554KopDcsReS7c0wYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNzNhM2YyMWExOTQ0NDIxYjRkZGJhN2VjYmM4MzYwY2Nh
NWU2ZmMwHhcNMjUxMDE5MjEwMTAwWhcNMjUxMDIwMjEwMTAwWjAzMTEwLwYDVQQD
EygyZWVmNTYwMmI1NDgxZmE4YjQzN2I5ODBlMGNiZTdhOGU2YzE4OTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZaEXlWBlcngWUffTO9GVrBPcuVY
mJQK0NFmTf0cOSWDrtGcOr3xB4YjHk3wOQ5OiGQ+Dh2rohMLQrmK7Rj7g0Hx2J/w
ObvbwoD3G683rZMqfrbz1VM9jv71ZeOTy0SkERKexoCBXd+J5apTVtQSEQSMLIHB
WWyQSwmI9KSNvmYjw97hpORydeLS62dOOR0y25kRSaXGMaTsDC+kIgwWBBjE2o/z
aKxS2rvFjTAV60TUCxjoNGG9RHlkaBawYcSXEqC5RyNygF52cgLZNF7HENWLBZJ1
+Qr440rR6/OonQAYtmzk9cEXJdNb//2H0j1EWumwc23JzducUlhZ5vbrBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7vVgK1SB+otDe5gODL56jmwYl7MB8GA1UdIwQY
MBaAFL9zo/IaGURCG03bp+y8g2DMpeb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEt
MDAwNDQ3NTdmZThhLzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80MDA2ODYtOGM3NS00MmQwLThiZDEtMDAwNDQ3NTdmZThh
LzEvdjNPajhob1pSRUliVGR1bjdMeURZTXlsNXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5YRfJIf
uW8L687CcElwjGGUNCA+53JqTDi1y+d/+0eQKfcVqaKa8Jl07bEjIf7xlCqmUCRa
CHnATTB5MUKn5tRUGroYvpA/fKZSBlswpTTfbG8yG5yoqOlkUO4SuMWGewNoioDL
+beEJk5kvKw8PMcaTCi17t9ayuuei/tWSx2bPEX04GjL/wVvak43i+gGh2yI2GxE
cKsEKgf+KmVBynD6do/nOij1VwD1X7FNz2UH0d587pIKAA/vZW7iWxooGBCnxw3Y
COljvGlUJXSglpIK00T/ZitJzU6Fk05k+UooJRIoK0tX18QJ47vXK6xhzht575TU
7v7NILCyde/t6w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:21 2025 by rpki-client