Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: ZZn+o31dbjhfXUun/YhogKi+ACOplzBHWCcuBpuo3uk=
Subject key identifier: 50:20:D0:F1:42:C9:95:37:F5:CB:2B:52:94:4E:CB:72:AC:52:B4:77
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 0199FC8FAD54AE623C9731F61FB62D52AD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: TX9NOp2nplD42g58kknIP2TeihtayRs/QWAvKyR91s8=)
2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ad:54:ae:62:3c:97:31:f6:1f:b6:2d:52:ad:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=5020d0f142c99537f5cb2b52944ecb72ac52b477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:d3:94:c0:ae:4f:6e:c1:69:40:fe:be:fe:
83:a6:b3:97:52:b4:c9:aa:02:88:07:9c:d8:85:bf:
46:db:d7:de:f9:8c:fe:d6:a0:a9:2f:d3:4a:22:f0:
14:8e:d8:07:42:ca:4f:17:20:af:6d:a2:31:46:2d:
0e:d2:fc:17:e0:7d:06:ab:20:90:bc:1d:a7:42:b0:
73:85:50:4a:e9:c1:a0:39:3f:3b:ca:d4:02:72:27:
fb:9a:db:a6:d4:fe:8e:d4:4a:d3:15:76:4a:98:ee:
b3:4e:c9:e2:cd:ae:ad:c3:7f:f6:11:13:a2:09:33:
06:26:bf:26:17:70:99:6b:e8:41:21:62:eb:d0:d1:
fd:72:c1:89:af:ee:4b:88:2b:e8:ef:24:29:9a:ca:
c1:86:e4:30:9b:b1:c3:72:f5:48:2a:72:1f:e1:ad:
3e:36:a0:ec:ff:e4:17:41:cd:14:3e:fd:96:98:c1:
43:95:64:af:b7:d3:c0:b1:27:ff:e2:a9:19:d9:15:
e6:1b:0c:d4:79:5c:6d:be:31:ca:fe:d2:23:db:0f:
6e:89:9c:25:df:d3:9f:bc:00:ed:5b:6f:24:29:97:
43:c8:ca:18:4c:ce:3c:2c:41:c3:bb:31:b3:42:3f:
e4:d5:02:62:a6:c8:e8:cc:e6:29:b4:cc:92:9e:9b:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:20:D0:F1:42:C9:95:37:F5:CB:2B:52:94:4E:CB:72:AC:52:B4:77
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f8:85:72:ba:2d:9e:39:28:be:f6:99:10:a3:f2:21:dd:71:
b3:4b:6a:e1:06:81:2a:6e:31:c5:5a:b3:69:9f:3b:8f:1b:a6:
00:21:6c:d7:77:1a:9c:fd:93:16:57:5e:34:c7:f1:c4:3e:21:
c7:90:84:26:16:02:68:48:55:a6:73:b2:e8:b8:e2:63:a8:d4:
71:2c:81:02:6d:71:f4:ca:9b:0b:1d:e5:5b:4f:f3:1a:43:c8:
a9:f6:0c:7f:b5:86:08:78:fb:5a:ef:43:98:a7:b7:8f:17:7c:
e2:e8:65:f1:24:de:bc:38:8b:97:ec:87:a9:41:e4:8f:f4:f2:
e6:b1:d8:7e:4c:f7:0e:d2:10:7f:cf:ba:d1:1f:17:78:0f:c5:
f4:2e:7a:2b:71:b1:58:d8:3b:09:2f:39:bc:21:95:3b:9c:c6:
ff:ca:17:5a:55:e2:37:5f:3c:d0:14:86:c2:1f:e9:81:7d:ed:
c7:75:c7:05:b1:ae:d4:48:a9:f2:1b:21:b3:2a:01:b8:72:09:
49:d4:b0:23:d7:ae:c0:d9:96:80:8b:9a:0b:36:da:5c:81:2c:
a1:75:31:f1:ef:f9:1e:a8:dd:7c:e2:7a:54:c4:65:8e:11:a3:
8d:fb:53:47:a6:73:4f:ef:75:5e:99:33:52:dd:d7:f2:f9:e6:
16:54:6d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:39 2025 by rpki-client