Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: /7o7kVHECnFx+VLj/Gdk7uyXJZF9q8PIbwUqI/XPBvA=
Subject key identifier: 65:4F:05:05:4F:BC:90:71:8E:C0:9C:81:25:C8:E6:F0:4F:1B:08:5B
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 0199FB7CAD8D77010E814D8B8DE9AB5F9A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: vpKD7hJvhvLlUqlXHNOkJs/vtH51F/p8dPL4jIPEBsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ad:8d:77:01:0e:81:4d:8b:8d:e9:ab:5f:9a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=654f05054fbc90718ec09c8125c8e6f04f1b085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:95:9f:33:d5:25:44:0c:cb:26:3d:63:89:
b6:f7:22:94:45:d3:e0:f0:d3:67:9f:f5:13:08:3c:
26:22:cc:6b:91:38:90:1a:d7:6d:6e:c9:25:a4:47:
c3:72:cb:d0:cc:35:c7:cc:0c:80:25:5f:9d:68:0a:
bc:a0:c2:b9:f2:1e:d9:46:0e:84:ff:7b:e9:5b:c9:
ef:e9:d9:b2:bd:fa:60:c4:d0:a2:3d:b3:62:29:99:
90:8f:2e:14:1b:a1:0c:b5:10:b5:4a:2f:78:35:94:
2a:ab:f6:6d:0e:8e:56:4f:5b:6e:9c:6f:5b:31:51:
65:23:17:34:e7:26:19:e6:42:c9:28:9d:ba:ba:3b:
09:b8:de:15:40:d2:0f:b5:be:dd:ee:41:82:c5:8d:
cc:6b:12:7a:df:c9:b6:a0:93:f7:5f:fa:9c:95:c1:
97:2e:44:4b:e0:11:d2:07:4e:66:65:9f:3e:40:7e:
8e:35:06:5c:50:53:7c:76:23:c6:a6:0d:b4:73:9f:
86:19:c5:68:6c:5c:a0:94:b9:12:1a:9b:65:05:5b:
d3:70:7d:92:e3:d6:78:fc:04:99:5a:a0:b2:18:07:
58:d2:5e:c1:d5:5a:d6:99:06:63:6e:4e:6e:4b:af:
98:4e:92:16:72:b9:a6:c3:8f:53:81:0b:a6:b9:e3:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4F:05:05:4F:BC:90:71:8E:C0:9C:81:25:C8:E6:F0:4F:1B:08:5B
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f4:c9:81:6c:91:4c:fd:9b:8f:e2:1d:03:0f:b1:dd:c4:b7:
48:cd:52:e3:ef:57:da:cf:82:68:02:2a:ea:ba:c9:0d:c7:3e:
ea:e0:65:88:13:a7:ed:5b:af:ba:5c:07:a0:72:27:8e:9e:aa:
a8:3c:35:f2:23:51:ed:93:58:d4:8d:22:8c:1a:2f:63:30:43:
20:ba:35:e7:28:58:33:fc:85:8f:5e:42:0a:8e:6c:45:17:cf:
bb:12:32:48:69:6f:87:9e:b0:59:01:d6:ce:5f:ae:3b:47:61:
74:df:62:72:25:98:ba:c6:dd:f5:a8:4e:9f:28:ba:32:2f:bc:
de:99:7a:70:6d:91:18:eb:c3:d0:24:06:25:2c:fd:90:b0:60:
ec:69:bb:14:3d:39:4e:87:96:4a:c0:98:90:40:9d:74:49:6a:
95:37:52:ae:4f:06:01:07:5c:d2:af:c2:1c:5d:f4:85:8f:67:
6e:c4:4f:af:fa:f2:0b:db:ee:74:b3:e7:69:68:b6:64:1c:0b:
97:f7:ef:b4:62:ba:75:51:31:8e:89:c7:e6:d5:d5:ab:48:5b:
fe:1e:6b:09:0a:3d:54:58:14:92:6b:b6:40:96:2c:63:dc:76:
45:8e:ba:45:db:7f:f6:5f:c3:0e:bb:09:df:d8:d2:7e:3c:0a:
ef:78:fc:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fK2NdwEOgU2LjemrX5qRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy
ZThkZDkwHhcNMjUxMDE5MDgwMTE2WhcNMjUxMDIwMDgwMTE2WjAzMTEwLwYDVQQD
Eyg2NTRmMDUwNTRmYmM5MDcxOGVjMDljODEyNWM4ZTZmMDRmMWIwODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfSVnzPVJUQMyyY9Y4m29yKURdPg
8NNnn/UTCDwmIsxrkTiQGtdtbsklpEfDcsvQzDXHzAyAJV+daAq8oMK58h7ZRg6E
/3vpW8nv6dmyvfpgxNCiPbNiKZmQjy4UG6EMtRC1Si94NZQqq/ZtDo5WT1tunG9b
MVFlIxc05yYZ5kLJKJ26ujsJuN4VQNIPtb7d7kGCxY3MaxJ638m2oJP3X/qclcGX
LkRL4BHSB05mZZ8+QH6ONQZcUFN8diPGpg20c5+GGcVobFyglLkSGptlBVvTcH2S
49Z4/ASZWqCyGAdY0l7B1VrWmQZjbk5uS6+YTpIWcrmmw49TgQumueO/LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVPBQVPvJBxjsCcgSXI5vBPGwhbMB8GA1UdIwQY
MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt
NjU0NGEyYjk5ODE3LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3
LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfTJgWyR
TP2bj+IdAw+x3cS3SM1S4+9X2s+CaAIq6rrJDcc+6uBliBOn7VuvulwHoHInjp6q
qDw18iNR7ZNY1I0ijBovYzBDILo15yhYM/yFj15CCo5sRRfPuxIySGlvh56wWQHW
zl+uO0dhdN9iciWYusbd9ahOnyi6Mi+83pl6cG2RGOvD0CQGJSz9kLBg7Gm7FD05
ToeWSsCYkECddElqlTdSrk8GAQdc0q/CHF30hY9nbsRPr/ryC9vudLPnaWi2ZBwL
l/fvtGK6dVExjonH5tXVq0hb/h5rCQo9VFgUkmu2QJYsY9x2RY66Rdt/9l/DDrsJ
39jSfjwK73j8Mw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:16 2025 by rpki-client