Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: Y11mlppYBHReIEA3SPsF8Bbs+hAv3DNzlOGSDhkoiew=
Subject key identifier: 63:83:AE:E8:54:14:76:C9:BE:D5:B3:23:71:05:68:14:5C:BC:57:25
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 0199FBEBF77C9B49899A635CBEAA0AF2F378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0ED1
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: iTiG2Yz5R6+9RSYXXEW2zbU2x96J77wjTCX4cC8Csu0=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f7:7c:9b:49:89:9a:63:5c:be:aa:0a:f2:f3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=6383aee8541476c9bed5b323710568145cbc5725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:9e:b2:a9:0e:9f:3c:09:54:ff:54:10:0b:
b7:5f:95:f4:33:96:92:1e:a6:6e:4f:02:c8:41:a3:
21:4a:9c:a8:fd:fe:97:c8:77:47:3f:12:7d:fd:3b:
6b:50:cd:99:a7:28:d1:da:6c:e5:37:ba:63:f6:c9:
07:a8:82:dc:95:a9:1c:ac:3f:f5:00:f5:1c:0f:9c:
ba:bd:b5:df:c8:ff:5c:97:4f:c8:7f:1a:46:7a:6f:
75:dc:dd:a1:31:14:b1:b9:ab:63:92:b6:4f:95:bf:
72:fd:d8:92:c1:bb:fa:ef:53:c1:0d:c2:13:4e:b3:
4d:d0:3e:f6:46:94:55:be:d3:a3:1b:04:b6:32:c3:
24:1a:05:ef:3c:93:8b:7f:00:bd:57:ea:55:80:40:
d5:a1:c5:5c:10:54:69:9b:bd:6b:8d:0f:39:f1:30:
8b:fb:3a:0a:62:d2:b3:9f:bb:2f:36:32:56:de:37:
f4:fc:17:79:59:86:94:25:fd:24:30:82:60:c0:3d:
73:d9:0c:73:07:3e:9a:f8:c5:d1:cb:fe:23:31:38:
a6:04:8d:f3:14:19:88:a3:b9:21:52:b9:77:b3:78:
88:a4:4d:d9:fd:89:c1:a7:ee:a1:37:85:06:fa:38:
bf:64:64:6d:71:d8:4d:e9:6a:4e:29:6c:4d:dd:81:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:AE:E8:54:14:76:C9:BE:D5:B3:23:71:05:68:14:5C:BC:57:25
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cb:79:ec:50:e5:5d:aa:3a:b6:e0:ed:df:c7:2c:b3:6a:d0:
fd:da:34:1d:9d:d7:6d:12:48:5a:43:13:f8:0e:32:b3:aa:18:
a8:4c:c4:8c:7e:cc:5d:13:74:a8:b6:9c:4e:36:6a:c3:62:00:
3c:c7:9d:66:e6:b6:97:0a:bf:27:c5:0d:54:ab:9b:61:60:e5:
ff:12:3d:c4:15:cf:72:b0:fe:b6:81:30:5f:8d:6d:3e:0a:eb:
c3:ce:70:07:64:4b:b9:e4:3b:c8:55:9a:29:07:f8:31:3a:d4:
3b:08:c7:bd:36:38:2a:e9:6a:72:cd:5c:f7:4c:56:51:32:5e:
fa:4f:3c:d4:94:8e:5e:85:29:6a:8d:3f:e1:9d:f3:62:95:63:
e3:59:38:43:27:14:69:2d:c2:08:b8:17:70:23:fb:ce:64:c1:
cc:f0:e1:94:95:b0:f0:3a:ac:56:64:a0:ca:87:9b:fd:2b:28:
30:55:c7:2a:64:e9:e4:aa:2f:ee:f1:a8:a8:71:8f:25:24:64:
c3:71:97:9e:8f:08:b6:9c:3a:b5:0d:ad:99:64:8c:61:9e:c5:
2a:ad:24:64:f3:3d:83:f8:9a:79:a1:e9:dd:ad:26:b1:f4:2d:
70:8d:4f:74:09:d7:20:b5:8a:bf:b2:83:58:e9:56:20:06:f4:
0f:d7:ee:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/d8m0mJmmNcvqoK8vN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODk3MWVhMWQyMmI1ZWNkYTFhOTc1OWYwNWMyNmM4YzU2
YTQ2OGMwHhcNMjUxMDE5MTAwMjQ5WhcNMjUxMDIwMTAwMjQ5WjAzMTEwLwYDVQQD
Eyg2MzgzYWVlODU0MTQ3NmM5YmVkNWIzMjM3MTA1NjgxNDVjYmM1NzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0KesqkOnzwJVP9UEAu3X5X0M5aS
HqZuTwLIQaMhSpyo/f6XyHdHPxJ9/TtrUM2ZpyjR2mzlN7pj9skHqILclakcrD/1
APUcD5y6vbXfyP9cl0/IfxpGem913N2hMRSxuatjkrZPlb9y/diSwbv671PBDcIT
TrNN0D72RpRVvtOjGwS2MsMkGgXvPJOLfwC9V+pVgEDVocVcEFRpm71rjQ858TCL
+zoKYtKzn7svNjJW3jf0/Bd5WYaUJf0kMIJgwD1z2QxzBz6a+MXRy/4jMTimBI3z
FBmIo7khUrl3s3iIpE3Z/YnBp+6hN4UG+ji/ZGRtcdhN6WpOKWxN3YEwMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGODruhUFHbJvtWzI3EFaBRcvFclMB8GA1UdIwQY
MBaAFNaJceodIrXs2hqXWfBcJsjFakaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEt
YTQ3NTQwZmVkNGI5LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEtYTQ3NTQwZmVkNGI5
LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAust57FDl
Xao6tuDt38css2rQ/do0HZ3XbRJIWkMT+A4ys6oYqEzEjH7MXRN0qLacTjZqw2IA
PMedZua2lwq/J8UNVKubYWDl/xI9xBXPcrD+toEwX41tPgrrw85wB2RLueQ7yFWa
KQf4MTrUOwjHvTY4Kulqcs1c90xWUTJe+k881JSOXoUpao0/4Z3zYpVj41k4QycU
aS3CCLgXcCP7zmTBzPDhlJWw8DqsVmSgyoeb/SsoMFXHKmTp5Kov7vGoqHGPJSRk
w3GXno8Itpw6tQ2tmWSMYZ7FKq0kZPM9g/iaeaHp3a0msfQtcI1PdAnXILWKv7KD
WOlWIAb0D9fu4w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:53 2025 by rpki-client