Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: oY2Pn3turag5RvRnSGxc3xDd3WElGGrP9AwIHTcRZRg=
Subject key identifier: DA:19:02:E0:10:AE:94:29:3B:27:52:3C:D9:16:2D:D6:D6:3D:03:11
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 0199FCFD752E8B4B6CC0544F9CD9235C3AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=)
2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: rftGPvbUYxkJnuHPDDDPLmK1sPEp//B76A8cBRbd4AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:75:2e:8b:4b:6c:c0:54:4f:9c:d9:23:5c:3a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=da1902e010ae94293b27523cd9162dd6d63d0311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:73:a1:ae:a5:43:4c:a5:d1:08:aa:c4:b0:
25:a1:e8:06:65:e2:76:75:b2:c9:2d:54:8e:81:6a:
14:1b:89:e8:62:7b:b7:5d:5f:82:7a:3a:04:a7:75:
80:dc:39:34:9c:14:81:e0:f4:cf:69:4d:b6:ba:b6:
5d:29:e4:a0:b6:d8:ac:46:c7:cf:0c:c0:06:e1:d3:
d9:68:b2:7d:2e:83:de:37:a8:b3:a7:ee:00:7b:cc:
e5:7d:1e:7a:97:62:b9:63:d4:55:28:0e:66:1c:86:
46:9f:fe:5e:eb:11:1a:ad:c8:a6:b1:10:ec:cf:8b:
7f:83:44:0c:08:95:e5:ef:db:7e:d4:37:d6:0e:5a:
29:c0:b8:33:31:a5:20:ab:d1:41:76:9c:96:04:1e:
2f:30:5c:b4:c7:cb:5d:59:59:4b:24:86:db:86:83:
c0:a3:e7:28:8f:f7:0b:98:74:f0:6c:9b:3e:10:ef:
33:86:1c:e1:0f:ef:27:82:7b:e8:f5:b0:6f:ba:1a:
c4:d7:64:9c:3c:6e:ea:2e:75:5c:ea:49:20:20:a7:
d2:c2:a2:b5:ce:65:23:58:48:23:13:b5:5d:cf:3e:
c5:fa:4e:34:39:2f:28:b4:ca:a6:3b:a5:51:3f:bb:
9a:2d:c7:8f:1a:e4:42:d9:94:a1:8d:69:2f:33:8e:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:02:E0:10:AE:94:29:3B:27:52:3C:D9:16:2D:D6:D6:3D:03:11
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:90:c2:5e:25:f2:c5:aa:e6:19:22:8d:e4:3d:70:07:78:70:
1c:18:ea:40:29:b8:16:ca:85:8e:bc:d1:4a:21:0e:da:d8:24:
6b:9e:ca:9c:45:66:e3:c2:38:df:57:19:1a:ae:b1:57:1c:16:
f5:7c:28:37:ee:b8:f3:a0:54:0e:6f:3b:85:5e:8d:4b:d2:4d:
79:6a:67:70:9e:3a:69:77:0b:69:2e:9e:cd:78:11:89:52:4a:
2e:00:64:50:2e:bc:ac:bd:3a:92:6b:e8:dc:09:f1:f9:26:a1:
f2:9b:b6:4a:f9:f3:80:e8:ef:da:1e:e6:3d:9e:30:fc:aa:c7:
38:d2:1c:29:14:93:e6:23:ef:b3:be:e9:c6:3a:f5:4d:27:0d:
0e:f5:21:ce:ac:ce:d1:85:e1:73:4d:32:b6:d2:43:a5:c4:21:
66:ed:ca:35:95:78:df:36:38:0a:5a:b4:0c:a5:ed:0e:f3:d0:
68:33:c7:97:fb:25:e6:e3:3d:52:0f:5a:1f:7b:90:4a:ce:ec:
3a:ac:ea:bd:b2:7b:8f:0f:96:bc:23:14:71:5f:7a:f9:1d:fb:
31:2b:b6:f1:0e:d2:1e:ce:da:6d:bc:0e:7a:6a:db:ad:9e:73:
8e:fc:2a:cf:71:c9:ea:fa:42:06:b2:2f:d7:ea:ff:59:b0:20:
da:84:bd:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/XUui0tswFRPnNkjXDrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZWQwYmE4YjQ2ZWYyNTFlNWEwNThhNjRhMjFiMzA3ZDM2
NTBkZGMwHhcNMjUxMDE5MTUwMTMyWhcNMjUxMDIwMTUwMTMyWjAzMTEwLwYDVQQD
EyhkYTE5MDJlMDEwYWU5NDI5M2IyNzUyM2NkOTE2MmRkNmQ2M2QwMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlhzoa6lQ0yl0QiqxLAloegGZeJ2
dbLJLVSOgWoUG4noYnu3XV+CejoEp3WA3Dk0nBSB4PTPaU22urZdKeSgttisRsfP
DMAG4dPZaLJ9LoPeN6izp+4Ae8zlfR56l2K5Y9RVKA5mHIZGn/5e6xEarcimsRDs
z4t/g0QMCJXl79t+1DfWDlopwLgzMaUgq9FBdpyWBB4vMFy0x8tdWVlLJIbbhoPA
o+coj/cLmHTwbJs+EO8zhhzhD+8ngnvo9bBvuhrE12ScPG7qLnVc6kkgIKfSwqK1
zmUjWEgjE7Vdzz7F+k40OS8otMqmO6VRP7uaLcePGuRC2ZShjWkvM44VcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoZAuAQrpQpOydSPNkWLdbWPQMRMB8GA1UdIwQY
MBaAFKLtC6i0bvJR5aBYpkohswfTZQ3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut
NzkxYzVhODUzOTBkLzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk
LzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5DCXiXy
xarmGSKN5D1wB3hwHBjqQCm4FsqFjrzRSiEO2tgka57KnEVm48I431cZGq6xVxwW
9XwoN+6486BUDm87hV6NS9JNeWpncJ46aXcLaS6ezXgRiVJKLgBkUC68rL06kmvo
3Anx+Sah8pu2SvnzgOjv2h7mPZ4w/KrHONIcKRST5iPvs77pxjr1TScNDvUhzqzO
0YXhc00yttJDpcQhZu3KNZV43zY4Clq0DKXtDvPQaDPHl/sl5uM9Ug9aH3uQSs7s
OqzqvbJ7jw+WvCMUcV96+R37MSu28Q7SHs7abbwOemrbrZ5zjvwqz3HJ6vpCBrIv
1+r/WbAg2oS9jw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:53 2025 by rpki-client