Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
File: 1OKJaJepchZ45oRpOZOlqISQM2Q.mft (raw, json)
Hash identifier: EsizQ5/Q+lz+DfUCndtVdUZkstZHhOvEfU9QQykgRS0=
Subject key identifier: 24:FA:B6:CB:62:28:39:27:FB:A4:01:CF:EE:27:17:47:AA:0F:67:2F
Authority key identifier: D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
Certificate issuer: /CN=d4e2896897a9721678e684693993a5a884903364
Certificate serial: 0199FB7CA3219DBEA2DD5EF6CC3FDE44059A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: 1OKJaJepchZ45oRpOZOlqISQM2Q.crl (hash: 23d7Xsay7hnHz9O+PePIPFofpPSUNfe8Hu1v2ZQax4w=)
2: WAQz-NVz1tPP197fB-7kdlHEMDo.roa (hash: EfunuE83nVqoEWqBwZZf7jU1FPr/i4YaWTLI4hd6d6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a3:21:9d:be:a2:dd:5e:f6:cc:3f:de:44:05:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2896897a9721678e684693993a5a884903364
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=24fab6cb62283927fba401cfee271747aa0f672f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:14:02:44:eb:44:c3:ec:32:82:28:59:21:
53:25:97:46:9a:55:9e:e2:47:a4:db:7f:b9:2d:75:
e5:39:99:01:e6:e5:b8:31:cb:c3:6b:18:9b:4a:ba:
2d:af:de:37:5a:4e:83:eb:8b:49:ea:6a:4f:39:3a:
98:f2:15:73:5e:33:5e:e9:c5:82:10:90:44:17:67:
f4:60:8c:05:12:c1:06:6a:85:e5:04:d5:44:55:7b:
33:8b:9c:42:b6:ca:cf:c7:84:42:dd:68:2e:1e:1f:
73:9c:fc:f7:f5:4f:37:6e:77:36:2f:65:8c:7d:d1:
39:90:7a:c1:78:23:14:d9:ac:e9:33:21:3a:db:1a:
1f:40:56:0e:2d:3e:50:a8:34:09:0c:28:90:8a:40:
54:cc:c0:84:72:0d:96:95:77:54:78:0f:9e:71:be:
e6:9a:b2:f8:1d:eb:31:bc:94:bb:e2:dc:2a:52:6d:
52:16:19:ad:28:f5:76:82:94:3b:50:35:02:ba:17:
30:c1:d9:3d:95:9e:3a:ff:b1:1c:8f:3c:85:bd:3d:
14:fa:f0:73:50:55:d5:be:fa:ea:b7:de:d2:66:c9:
6f:fd:86:4d:7b:e7:51:c9:77:0d:9f:7c:15:9f:38:
47:a2:53:45:ed:82:8d:34:18:42:27:73:78:b1:a2:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FA:B6:CB:62:28:39:27:FB:A4:01:CF:EE:27:17:47:AA:0F:67:2F
X509v3 Authority Key Identifier:
keyid:D4:E2:89:68:97:A9:72:16:78:E6:84:69:39:93:A5:A8:84:90:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKJaJepchZ45oRpOZOlqISQM2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e28103-a0fb-4227-bcb1-e497d40f4e2a/1/1OKJaJepchZ45oRpOZOlqISQM2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:39:7d:19:a1:d0:c1:28:ad:62:c0:74:f7:95:0f:98:14:41:
f1:6e:4a:be:26:5d:32:4e:cc:44:99:9a:b1:b9:9d:57:0e:c2:
fe:e8:ac:19:69:54:02:1c:87:ba:f9:5d:cf:07:8d:3d:f0:f8:
ad:6b:67:79:56:c6:c3:55:e8:88:07:d0:da:0b:6c:3a:a6:35:
05:8b:30:6d:4a:a1:b9:ad:1e:05:74:be:65:8b:b4:58:b9:0c:
b2:72:ef:27:ba:0a:bd:5a:48:e9:6e:88:cf:a0:e1:2c:5c:c2:
ce:81:66:9b:4c:e9:64:f9:9d:ee:29:e6:a5:c4:0c:22:bd:f5:
34:1a:0b:26:32:89:e1:f6:99:54:ec:82:c7:32:ca:7f:97:83:
aa:b1:50:5f:2f:ff:c9:5d:a0:4e:26:b5:52:bd:d3:3a:cb:b9:
33:af:e5:42:46:4a:3e:3f:f9:5d:66:cd:64:4b:99:af:ce:9d:
06:cd:25:7b:44:49:22:47:b3:ad:ab:17:59:92:9f:64:ac:a1:
fc:28:d7:c0:07:54:3d:bb:71:46:75:da:85:6a:5a:4e:5a:04:
cd:fb:aa:d8:e7:a9:d7:fa:85:27:c5:12:d1:d7:fe:70:70:da:
83:19:54:32:19:1a:e5:11:f0:70:83:9b:be:85:29:7f:31:6d:
3e:15:ab:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKMhnb6i3V72zD/eRAWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTI4OTY4OTdhOTcyMTY3OGU2ODQ2OTM5OTNhNWE4ODQ5
MDMzNjQwHhcNMjUxMDE5MDgwMTEzWhcNMjUxMDIwMDgwMTEzWjAzMTEwLwYDVQQD
EygyNGZhYjZjYjYyMjgzOTI3ZmJhNDAxY2ZlZTI3MTc0N2FhMGY2NzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRIUAkTrRMPsMoIoWSFTJZdGmlWe
4kek23+5LXXlOZkB5uW4McvDaxibSrotr943Wk6D64tJ6mpPOTqY8hVzXjNe6cWC
EJBEF2f0YIwFEsEGaoXlBNVEVXszi5xCtsrPx4RC3WguHh9znPz39U83bnc2L2WM
fdE5kHrBeCMU2azpMyE62xofQFYOLT5QqDQJDCiQikBUzMCEcg2WlXdUeA+ecb7m
mrL4HesxvJS74twqUm1SFhmtKPV2gpQ7UDUCuhcwwdk9lZ46/7EcjzyFvT0U+vBz
UFXVvvrqt97SZslv/YZNe+dRyXcNn3wVnzhHolNF7YKNNBhCJ3N4saLDSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCT6tstiKDkn+6QBz+4nF0eqD2cvMB8GA1UdIwQY
MBaAFNTiiWiXqXIWeOaEaTmTpaiEkDNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMjgxMDMtYTBmYi00MjI3LWJjYjEt
ZTQ5N2Q0MGY0ZTJhLzEvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lMjgxMDMtYTBmYi00MjI3LWJjYjEtZTQ5N2Q0MGY0ZTJh
LzEvMU9LSmFKZXBjaFo0NW9ScE9aT2xxSVNRTTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDl9GaHQ
wSitYsB095UPmBRB8W5KviZdMk7MRJmasbmdVw7C/uisGWlUAhyHuvldzweNPfD4
rWtneVbGw1XoiAfQ2gtsOqY1BYswbUqhua0eBXS+ZYu0WLkMsnLvJ7oKvVpI6W6I
z6DhLFzCzoFmm0zpZPmd7inmpcQMIr31NBoLJjKJ4faZVOyCxzLKf5eDqrFQXy//
yV2gTia1Ur3TOsu5M6/lQkZKPj/5XWbNZEuZr86dBs0le0RJIkezrasXWZKfZKyh
/CjXwAdUPbtxRnXahWpaTloEzfuq2Oep1/qFJ8US0df+cHDagxlUMhka5RHwcIOb
voUpfzFtPhWrKA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:51 2025 by rpki-client