Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
File: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft (raw, json)
Hash identifier: QxUuUOh7IS6XkXI0eJr9svXa/CmSV7xI9rQXSG4BSUw=
Subject key identifier: EB:B4:2F:8D:3C:96:89:46:FB:D8:ED:67:FC:7C:02:04:12:52:3A:43
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 0199FD33EAAA721B912690BCCC59AC5A2706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: 0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl (hash: 7fGchLj6HHdHn0E2SS0hUAUX2LtM3bdK3ubahoiQTz4=)
2: OCcJDhB4OQ1X-MIeEHbwYqPSbys.roa (hash: bYb4Alf329H7/hgxf3+yXtwxwALKiQ1xJi7nvHZupTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ea:aa:72:1b:91:26:90:bc:cc:59:ac:5a:27:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=ebb42f8d3c968946fbd8ed67fc7c020412523a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:10:a1:7e:d3:c9:ef:a1:7a:f6:61:9f:06:
7f:06:fc:1e:03:25:23:4e:e6:b0:04:74:96:cc:31:
64:7d:d9:41:c5:87:2d:17:20:f7:1b:b7:61:57:29:
41:2f:a4:47:23:cf:76:9b:e1:bc:49:d4:08:71:4a:
7a:8c:bf:64:b9:96:cd:a5:30:07:a6:fd:4e:6c:4a:
9c:2b:31:24:55:47:19:39:fe:b5:36:c9:8c:5c:33:
3e:20:9b:96:7f:c8:8d:6a:d2:86:7d:db:9f:3d:21:
fe:5a:e0:98:01:79:be:d5:f6:0b:3e:92:6b:95:86:
67:07:1c:8d:fc:69:63:dd:ed:e1:7c:61:e4:19:65:
b1:20:db:bf:e6:22:26:27:37:f8:23:38:c6:9f:23:
df:bb:25:53:fe:41:20:90:af:ed:13:58:62:21:ae:
bc:46:4b:85:49:30:ed:82:1d:a9:e1:21:ee:c3:41:
2a:9f:0b:f3:08:c2:85:d5:27:e3:ae:c1:ec:33:c2:
e0:97:d8:6e:29:b9:40:5a:fe:36:a2:14:13:c4:d1:
65:0b:1f:45:6c:ad:df:2d:4d:a3:a9:08:e2:16:e1:
84:8d:00:80:9d:e9:90:ee:12:bc:70:2a:82:e0:78:
4e:9e:5c:f8:9b:df:21:8f:ed:eb:70:5c:b3:46:e3:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:2F:8D:3C:96:89:46:FB:D8:ED:67:FC:7C:02:04:12:52:3A:43
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:3d:69:b5:5b:87:78:62:15:16:4f:94:19:4f:b5:8d:49:
7d:94:22:6a:22:30:54:bc:ec:7a:ae:44:b3:ea:37:d4:05:9c:
1d:55:eb:b3:7b:bd:23:3d:0a:37:ff:99:6a:b1:f8:21:3d:d6:
49:91:82:54:5d:eb:6c:19:2c:a2:6b:e0:78:0f:55:08:30:3d:
a4:92:f2:d1:bc:76:23:84:9c:0a:9e:61:2d:4d:20:ad:61:ad:
4b:9e:a4:74:18:8e:c8:14:4c:3b:c4:e0:11:3d:af:3a:73:b9:
7a:6f:04:60:e3:b3:a1:c9:da:73:1e:7f:42:e4:76:3c:dd:34:
c0:ed:de:1c:29:10:07:79:97:da:80:41:cf:57:4d:70:68:c0:
0a:c0:41:3f:35:50:00:e1:15:11:1e:ce:9b:4a:d3:5f:b9:77:
f9:cc:b4:2b:19:7f:fa:42:0b:4f:74:1d:46:79:50:9e:8e:0d:
62:78:b4:dd:7e:80:37:75:04:d7:21:1d:07:bf:a5:6a:8d:4e:
36:a3:46:e7:b3:c5:0f:28:aa:91:21:c0:81:d2:b0:7c:41:4c:
81:bc:d6:ce:51:c3:c6:1e:34:83:b8:ba:98:34:e6:b4:ff:93:
b2:5a:19:4e:54:63:38:cf:4c:2f:4b:53:53:c7:9a:2a:c1:fb:
68:8a:41:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+qqchuRJpC8zFmsWicGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMGM4OGQ4MmQyZmFjODIyMDNkNDJhMjQyZDZlYjc2M2Qx
M2JiZjgwHhcNMjUxMDE5MTYwMTAyWhcNMjUxMDIwMTYwMTAyWjAzMTEwLwYDVQQD
EyhlYmI0MmY4ZDNjOTY4OTQ2ZmJkOGVkNjdmYzdjMDIwNDEyNTIzYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAAQoX7Tye+hevZhnwZ/BvweAyUj
TuawBHSWzDFkfdlBxYctFyD3G7dhVylBL6RHI892m+G8SdQIcUp6jL9kuZbNpTAH
pv1ObEqcKzEkVUcZOf61NsmMXDM+IJuWf8iNatKGfdufPSH+WuCYAXm+1fYLPpJr
lYZnBxyN/Glj3e3hfGHkGWWxINu/5iImJzf4IzjGnyPfuyVT/kEgkK/tE1hiIa68
RkuFSTDtgh2p4SHuw0EqnwvzCMKF1SfjrsHsM8Lgl9huKblAWv42ohQTxNFlCx9F
bK3fLU2jqQjiFuGEjQCAnemQ7hK8cCqC4HhOnlz4m98hj+3rcFyzRuM7/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu0L408lolG+9jtZ/x8AgQSUjpDMB8GA1UdIwQY
MBaAFNEMiNgtL6yCID1CokLW63Y9E7v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFF5STJDMHZySUlnUFVLaVF0YnJkajBUdV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84ZWQwMTgtMDhmMy00Nzc3LTlkZDQt
ZGUyNDVhZjRmYWNiLzEvMFF5STJDMHZySUlnUFVLaVF0YnJkajBUdV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS84ZWQwMTgtMDhmMy00Nzc3LTlkZDQtZGUyNDVhZjRmYWNi
LzEvMFF5STJDMHZySUlnUFVLaVF0YnJkajBUdV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLU9abVb
h3hiFRZPlBlPtY1JfZQiaiIwVLzseq5Es+o31AWcHVXrs3u9Iz0KN/+ZarH4IT3W
SZGCVF3rbBksomvgeA9VCDA9pJLy0bx2I4ScCp5hLU0grWGtS56kdBiOyBRMO8Tg
ET2vOnO5em8EYOOzocnacx5/QuR2PN00wO3eHCkQB3mX2oBBz1dNcGjACsBBPzVQ
AOEVER7Om0rTX7l3+cy0Kxl/+kILT3QdRnlQno4NYni03X6AN3UE1yEdB7+lao1O
NqNG57PFDyiqkSHAgdKwfEFMgbzWzlHDxh40g7i6mDTmtP+TsloZTlRjOM9ML0tT
U8eaKsH7aIpBew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:42 2025 by rpki-client