
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier: NvxNMZeojC/I9y/zCIarRjiqHiI7LbkWl0bdKFo/y0s=
Subject key identifier: A3:5A:B7:CB:D9:37:7A:DE:B7:3D:F6:0A:F0:15:68:41:4F:E3:B7:41
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial: 0199FDD8FA6FF3D9E4114BFFAE6AEF79FB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:19 +0000
Manifest this update: Sun 19 Oct 2025 19:01:19 +0000
Manifest next update: Mon 20 Oct 2025 19:01:19 +0000
Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: +Syqut046g8GLtdKPOXFGT5+pgWwM+2fCPrMeLXxjLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fa:6f:f3:d9:e4:11:4b:ff:ae:6a:ef:79:fb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Validity
Not Before: Oct 19 19:01:19 2025 GMT
Not After : Oct 20 19:01:19 2025 GMT
Subject: CN=a35ab7cbd9377adeb73df60af01568414fe3b741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:9a:1a:d6:a6:5c:6b:78:3a:3b:b3:5a:29:
22:72:7a:2d:32:43:eb:77:55:7a:74:ff:d5:e5:0c:
c0:bb:f5:02:5a:3d:0a:4c:fc:a6:ad:6e:cc:09:2b:
d1:9d:93:ca:d9:6e:64:2b:bc:b3:23:fa:b1:e0:62:
1e:c6:81:14:4e:73:e1:c9:5e:d5:2c:a0:07:7c:c4:
72:fd:d4:58:8d:63:a8:34:9e:16:f8:43:1b:a8:84:
8f:f5:b8:87:d1:6d:da:2a:59:28:aa:7b:99:c5:ac:
1c:0d:43:41:02:22:b3:30:41:2f:06:98:f2:aa:34:
87:30:50:7b:51:4c:20:0c:c8:28:97:1b:3f:a1:ef:
f7:00:5f:3c:19:07:d8:fa:8e:ca:d4:6e:ac:26:3f:
c4:62:d9:90:ac:62:eb:71:a4:44:80:c2:d6:7c:37:
e8:24:8c:53:11:73:cb:b5:0a:5b:1e:41:6f:86:32:
2a:c7:b1:5a:46:11:ae:a5:85:12:fb:72:65:ae:7c:
a9:9b:35:0d:56:16:cf:bb:ae:83:4e:1f:9c:0b:29:
36:3c:ab:d6:85:20:13:2d:76:a3:3f:ef:5c:f7:c9:
cb:dc:60:88:ce:92:37:d0:a0:4e:b8:63:e7:68:90:
36:e9:36:ed:48:28:9f:d9:8f:cb:77:27:43:82:29:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5A:B7:CB:D9:37:7A:DE:B7:3D:F6:0A:F0:15:68:41:4F:E3:B7:41
X509v3 Authority Key Identifier:
keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ac:77:d6:70:9e:4d:70:b2:e1:99:41:78:71:77:a6:43:a4:
14:56:aa:b2:4c:64:f8:0b:8b:79:a5:b5:46:93:18:1e:5d:af:
71:f8:32:a6:af:20:c8:48:27:09:02:c0:73:24:45:81:dc:c8:
f5:bc:cc:f7:3d:5d:1c:ad:a1:1d:b5:c5:fd:13:3e:8a:c1:03:
24:9e:99:06:07:97:74:b3:9c:ae:8a:09:bc:5f:55:45:64:c1:
29:a6:14:39:c9:f6:ed:b8:c8:5d:1e:9a:f8:40:48:8c:fd:66:
42:cc:ac:6d:3d:ad:9d:97:6c:66:a7:47:70:df:b3:46:53:e6:
40:0a:cc:13:fb:c4:1c:3e:56:f3:9b:08:90:8e:59:db:fa:69:
95:01:93:bc:35:3c:d3:6d:fe:0f:14:47:e7:ae:5b:89:5d:04:
d7:9d:a8:b6:a9:c5:4d:45:ac:2a:d9:54:ca:b1:c2:09:a0:98:
b9:8a:24:fa:8d:f5:78:a3:00:62:09:85:bb:6b:13:88:d9:82:
6a:10:cd:fb:db:d3:68:9e:f4:7d:85:b5:c7:a5:12:fa:88:b7:
1c:ba:f2:f0:09:ea:43:1b:5d:2d:36:0c:4e:81:f1:40:58:ca:
86:41:be:bb:ea:12:f2:76:52:ea:20:3f:8a:33:8b:41:96:1d:
7d:a7:35:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Ppv89nkEUv/rmrvefsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDYyY2E5Y2NlOGM4ZmZkMWY5ZDdkZTdjN2U5MDVjNmU4
OTNjZmMwHhcNMjUxMDE5MTkwMTE5WhcNMjUxMDIwMTkwMTE5WjAzMTEwLwYDVQQD
EyhhMzVhYjdjYmQ5Mzc3YWRlYjczZGY2MGFmMDE1Njg0MTRmZTNiNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTGaGtamXGt4OjuzWikicnotMkPr
d1V6dP/V5QzAu/UCWj0KTPymrW7MCSvRnZPK2W5kK7yzI/qx4GIexoEUTnPhyV7V
LKAHfMRy/dRYjWOoNJ4W+EMbqISP9biH0W3aKlkoqnuZxawcDUNBAiKzMEEvBpjy
qjSHMFB7UUwgDMgolxs/oe/3AF88GQfY+o7K1G6sJj/EYtmQrGLrcaREgMLWfDfo
JIxTEXPLtQpbHkFvhjIqx7FaRhGupYUS+3JlrnypmzUNVhbPu66DTh+cCyk2PKvW
hSATLXajP+9c98nL3GCIzpI30KBOuGPnaJA26TbtSCif2Y/LdydDgimxdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNat8vZN3retz32CvAVaEFP47dBMB8GA1UdIwQY
MBaAFKFGLKnM6Mj/0fnX3nx+kFxuiTz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4Mjgt
MjcyY2M5MmNjNjBiLzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4MjgtMjcyY2M5MmNjNjBi
LzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqx31nCe
TXCy4ZlBeHF3pkOkFFaqskxk+AuLeaW1RpMYHl2vcfgypq8gyEgnCQLAcyRFgdzI
9bzM9z1dHK2hHbXF/RM+isEDJJ6ZBgeXdLOcrooJvF9VRWTBKaYUOcn27bjIXR6a
+EBIjP1mQsysbT2tnZdsZqdHcN+zRlPmQArME/vEHD5W85sIkI5Z2/pplQGTvDU8
023+DxRH565biV0E152otqnFTUWsKtlUyrHCCaCYuYok+o31eKMAYgmFu2sTiNmC
ahDN+9vTaJ70fYW1x6US+oi3HLry8AnqQxtdLTYMToHxQFjKhkG+u+oS8nZS6iA/
ijOLQZYdfac1QQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:39 2025 by rpki-client