Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: 1rN1h1ykvkWTt/UEG73Dn86uOm2cTTqKs4YdkVWYXKE=
Subject key identifier: BA:FC:0B:0E:E3:A2:55:9A:12:7A:C9:8E:AA:9A:D2:49:EA:8A:86:5A
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0199FC5914DC4ECD592F86E47DD92CE92070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 12D9
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: G9V/V98sUEc+OXeqZ1zemJHstORKkhK0604B41r8I8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:14:dc:4e:cd:59:2f:86:e4:7d:d9:2c:e9:20:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=bafc0b0ee3a2559a127ac98eaa9ad249ea8a865a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:a7:14:c9:69:e4:18:f1:10:b2:13:8c:b3:
40:1d:3e:f4:a3:9b:b8:ca:3a:25:9b:7e:a2:81:26:
aa:9d:22:4f:cb:de:0a:ef:fa:00:82:74:d6:3c:3a:
0b:5b:53:92:7a:7d:47:3c:52:95:b3:cf:66:2a:91:
07:4a:41:ef:e3:fd:e0:96:1a:78:32:67:e6:09:97:
d3:a4:e9:b3:b5:4d:e9:77:61:17:21:91:5d:67:c8:
24:34:38:fc:b4:46:86:76:81:07:86:80:b7:8b:24:
ef:16:6c:ec:04:ce:9a:96:d6:ea:e0:1d:e8:18:ad:
a9:0a:59:fa:bc:50:b9:51:5d:17:36:6c:49:27:62:
7d:ab:64:94:e1:b4:c8:d0:7e:a5:99:2d:af:c4:b0:
06:15:16:2b:88:3c:a2:6c:12:63:05:16:0b:04:46:
c3:b7:3d:a9:10:02:94:0b:b8:3b:26:47:d7:ad:13:
58:74:63:8b:c9:d3:ec:68:93:9e:b4:0b:19:72:aa:
8e:aa:cb:8d:9d:cb:bf:d2:7b:69:98:9f:7d:a4:98:
c5:be:54:d4:53:f4:2d:9c:18:28:e5:86:94:38:23:
8d:33:ab:76:12:5e:2a:56:eb:f8:46:d4:d6:09:44:
75:e9:d5:f3:6a:80:f5:fa:a6:de:26:b6:49:2e:9e:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FC:0B:0E:E3:A2:55:9A:12:7A:C9:8E:AA:9A:D2:49:EA:8A:86:5A
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:5e:9c:fb:be:9e:a1:26:8f:b6:2b:14:b8:cc:24:f0:54:
de:ae:75:4b:2d:59:73:92:bb:44:02:38:ff:f8:78:98:40:b2:
22:6e:f8:ec:d7:8f:c3:ec:00:2c:c2:6b:6a:b4:52:ef:98:40:
78:dc:64:01:06:f4:1f:a9:a2:d4:b5:9b:9c:8a:b1:ed:95:43:
70:55:85:a7:e4:3e:75:05:04:3f:ef:53:8f:4b:72:ec:13:23:
9c:0c:d1:de:33:0c:58:27:9b:72:f5:1d:f8:19:f1:ff:b2:1c:
5d:db:41:dd:e3:2f:1a:2a:c8:3b:58:c5:9a:79:d3:2e:df:d5:
58:8a:95:6d:db:7d:91:b3:21:4b:d8:4c:b5:79:b2:a2:e1:51:
9e:75:39:b1:86:60:cf:29:8c:64:5a:91:fc:66:93:59:8b:42:
64:75:2c:18:98:ba:20:70:b5:d5:cf:45:8d:05:dc:17:56:9b:
5b:0f:07:c0:8f:9a:3d:1d:43:5d:53:3c:6b:90:91:e3:ca:ce:
7e:ef:0f:09:c0:66:64:f5:ad:93:58:19:b6:ea:22:0f:27:34:
0b:61:6c:ab:6f:5c:3f:4a:82:c7:d7:7e:6e:aa:90:a7:c6:42:
f0:48:18:e6:db:ff:b0:03:c7:be:95:72:83:5f:f2:96:e1:86:
c0:c8:9f:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WRTcTs1ZL4bkfdks6SBwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5
NmVlNzkwHhcNMjUxMDE5MTIwMjAwWhcNMjUxMDIwMTIwMjAwWjAzMTEwLwYDVQQD
EyhiYWZjMGIwZWUzYTI1NTlhMTI3YWM5OGVhYTlhZDI0OWVhOGE4NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rGnFMlp5BjxELITjLNAHT70o5u4
yjolm36igSaqnSJPy94K7/oAgnTWPDoLW1OSen1HPFKVs89mKpEHSkHv4/3glhp4
MmfmCZfTpOmztU3pd2EXIZFdZ8gkNDj8tEaGdoEHhoC3iyTvFmzsBM6altbq4B3o
GK2pCln6vFC5UV0XNmxJJ2J9q2SU4bTI0H6lmS2vxLAGFRYriDyibBJjBRYLBEbD
tz2pEAKUC7g7JkfXrRNYdGOLydPsaJOetAsZcqqOqsuNncu/0ntpmJ99pJjFvlTU
U/QtnBgo5YaUOCONM6t2El4qVuv4RtTWCUR16dXzaoD1+qbeJrZJLp7V3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr8Cw7jolWaEnrJjqqa0knqioZaMB8GA1UdIwQY
MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt
NTA2YmI2YzY3OWNlLzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl
LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS5enPu+
nqEmj7YrFLjMJPBU3q51Sy1Zc5K7RAI4//h4mECyIm747NePw+wALMJrarRS75hA
eNxkAQb0H6mi1LWbnIqx7ZVDcFWFp+Q+dQUEP+9Tj0ty7BMjnAzR3jMMWCebcvUd
+Bnx/7IcXdtB3eMvGirIO1jFmnnTLt/VWIqVbdt9kbMhS9hMtXmyouFRnnU5sYZg
zymMZFqR/GaTWYtCZHUsGJi6IHC11c9FjQXcF1abWw8HwI+aPR1DXVM8a5CR48rO
fu8PCcBmZPWtk1gZtuoiDyc0C2Fsq29cP0qCx9d+bqqQp8ZC8EgY5tv/sAPHvpVy
g1/yluGGwMifEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:22 2025 by rpki-client