Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File: odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier: wjJ4gRqU2j6VZVAMv9+3NGqILrjj5o62LXWDwZiOIA0=
Subject key identifier: CB:30:A8:02:FA:28:CA:46:6D:95:BE:D9:1F:04:BB:A8:ED:16:A9:7F
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 019A00A34FAD4754917F9DE68CC2008CD5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number: 16F5
Signing time: Mon 20 Oct 2025 08:01:33 +0000
Manifest this update: Mon 20 Oct 2025 08:01:33 +0000
Manifest next update: Tue 21 Oct 2025 08:01:33 +0000
Files and hashes: 1: H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa (hash: jQUdvjp+XMu9RhMc9HBGBO2BWt37hObPuG6tYSQQ2Vc=)
2: NqcS3iBK8U8flvef0Nqw2TVfi60.roa (hash: j8yFbIlyMimvTa7T3CseeI21D35WgrPORHectZm7+m8=)
3: RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa (hash: M6AyczLNwaE/pwZJ9qp9kSzxL5JgaMLnNyyEPKCm858=)
4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: SQBQ20acxhdskRAH0DNMFosw5ciLI/Xy7HmdbNPZZJo=)
5: vzGcID_N34zQFrVI3nMugUoVewA.roa (hash: s5waq9wx34dg2rh+ta7n4AjQKU2ote6EQ3de9ofeRpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:4f:ad:47:54:91:7f:9d:e6:8c:c2:00:8c:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Oct 20 08:01:33 2025 GMT
Not After : Oct 21 08:01:33 2025 GMT
Subject: CN=cb30a802fa28ca466d95bed91f04bba8ed16a97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:5c:87:6b:fb:9b:69:5c:ab:00:0f:f9:3f:
78:94:e1:99:ac:e7:cf:e8:c2:c3:d3:40:ef:75:fd:
20:c6:a2:8f:5b:25:a4:18:5c:86:05:af:d6:f6:5f:
fd:e0:90:36:43:dc:89:10:32:af:7c:6a:00:be:d1:
07:09:38:56:e1:5c:cc:f0:c4:43:fb:a7:f3:1e:81:
e2:79:40:34:b3:e8:66:c0:bd:da:69:a2:29:03:76:
79:14:e9:bb:82:fc:ec:ca:7c:88:50:71:b0:af:0a:
39:8e:0f:80:10:e0:b6:4d:d7:a5:6f:f7:46:1f:2c:
09:00:7d:b3:6d:c0:0a:43:ef:a6:67:24:8d:49:e5:
7b:47:bc:07:36:3e:30:65:23:bf:ba:f7:03:fb:44:
99:06:fa:13:df:e6:44:d8:29:42:5a:81:30:15:1b:
82:b2:f2:d7:70:b3:f8:d8:c5:76:23:8d:1b:a6:a9:
e3:da:73:1f:a5:ed:c4:87:0e:66:34:d6:6f:a1:f3:
7d:23:27:57:9c:89:35:b0:4e:51:40:35:91:be:07:
18:03:46:95:f3:38:6b:8e:29:76:4f:fe:7e:ad:da:
a9:3a:93:03:f7:04:e1:04:27:a1:9a:4a:a1:84:83:
a2:4d:f9:8f:da:93:4f:23:3c:8f:1c:4a:61:6c:98:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:A8:02:FA:28:CA:46:6D:95:BE:D9:1F:04:BB:A8:ED:16:A9:7F
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4d:8e:8c:5f:7e:3b:1f:80:35:3b:ef:f6:c6:fd:60:61:86:
d0:73:ac:37:fb:77:cf:f2:37:04:b5:3f:bb:27:fb:37:70:9e:
e7:c5:ba:92:78:ca:98:b8:be:cd:4c:16:fb:d4:8c:86:1b:fa:
66:a1:da:95:be:74:f4:2b:59:3c:0d:83:02:5c:6c:98:1d:36:
97:e6:6c:6b:6b:81:64:49:ed:ee:85:ac:1e:80:0c:c3:81:e9:
2f:30:0f:d0:15:e5:7d:c9:ad:d7:ac:c3:55:ea:2a:02:28:8d:
ff:04:4d:5a:c1:51:98:76:48:be:a0:bd:69:5a:84:e9:7c:ad:
b1:e9:2c:7e:a9:48:68:c0:0c:0d:11:f3:70:39:93:3e:3a:80:
fe:b9:b9:92:fe:1b:98:13:2e:30:8c:ff:d5:2b:36:5f:65:54:
4c:5e:4e:2d:e6:b6:73:67:aa:09:92:f5:d5:8c:ea:b9:81:98:
16:73:cb:7d:3f:20:49:fe:dd:69:f4:ad:e5:ec:55:71:33:20:
3f:f9:08:0d:6f:e9:30:9b:bb:02:2a:20:9d:fd:4c:9b:1c:4c:
54:12:96:74:7b:e1:34:47:e1:68:0c:4c:56:e9:b0:9d:dc:af:
68:a7:7a:56:26:97:74:f7:10:44:3d:ad:6a:14:b8:41:28:21:
28:83:ab:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo0+tR1SRf53mjMIAjNXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDAzMTUzNzNiMDliMDYxYWE1OWYxMjlkNTkyZWFiZjdi
M2FhZWYwHhcNMjUxMDIwMDgwMTMzWhcNMjUxMDIxMDgwMTMzWjAzMTEwLwYDVQQD
EyhjYjMwYTgwMmZhMjhjYTQ2NmQ5NWJlZDkxZjA0YmJhOGVkMTZhOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuANch2v7m2lcqwAP+T94lOGZrOfP
6MLD00Dvdf0gxqKPWyWkGFyGBa/W9l/94JA2Q9yJEDKvfGoAvtEHCThW4VzM8MRD
+6fzHoHieUA0s+hmwL3aaaIpA3Z5FOm7gvzsynyIUHGwrwo5jg+AEOC2Tdelb/dG
HywJAH2zbcAKQ++mZySNSeV7R7wHNj4wZSO/uvcD+0SZBvoT3+ZE2ClCWoEwFRuC
svLXcLP42MV2I40bpqnj2nMfpe3Ehw5mNNZvofN9IydXnIk1sE5RQDWRvgcYA0aV
8zhrjil2T/5+rdqpOpMD9wThBCehmkqhhIOiTfmP2pNPIzyPHEphbJhfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMswqAL6KMpGbZW+2R8Eu6jtFql/MB8GA1UdIwQY
MBaAFKHQMVNzsJsGGqWfEp1ZLqv3s6rvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMt
ZGZjYmRmM2IxMDU4LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMtZGZjYmRmM2IxMDU4
LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmk2OjF9+
Ox+ANTvv9sb9YGGG0HOsN/t3z/I3BLU/uyf7N3Ce58W6knjKmLi+zUwW+9SMhhv6
ZqHalb509CtZPA2DAlxsmB02l+Zsa2uBZEnt7oWsHoAMw4HpLzAP0BXlfcmt16zD
VeoqAiiN/wRNWsFRmHZIvqC9aVqE6XytseksfqlIaMAMDRHzcDmTPjqA/rm5kv4b
mBMuMIz/1Ss2X2VUTF5OLea2c2eqCZL11YzquYGYFnPLfT8gSf7dafSt5exVcTMg
P/kIDW/pMJu7Aiognf1MmxxMVBKWdHvhNEfhaAxMVumwndyvaKd6ViaXdPcQRD2t
ahS4QSghKIOrPA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:59 2025 by rpki-client