Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: mXNrVGSPRaVcLU12PBrTQiABQMrrFrZVydgafGMNWOk=
Subject key identifier: 4A:A2:F5:8C:99:A3:D3:C7:50:1C:75:B3:C0:AB:D1:4B:29:42:16:45
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 0199FB7CAB6CD2CFF8B7E186363064F26545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: 4mfT9/6edLzQ1mkLQOnTZzlUfuiFS0gaUISIVdFt0sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ab:6c:d2:cf:f8:b7:e1:86:36:30:64:f2:65:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=4aa2f58c99a3d3c7501c75b3c0abd14b29421645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:3f:1d:6b:2c:22:25:86:87:78:d7:bc:ee:
6a:ba:e7:b1:cf:bb:42:72:d3:8b:57:4a:ba:c7:a8:
fd:a2:e9:90:5a:45:16:b7:f3:9d:dd:f1:50:c1:a0:
07:b2:47:58:61:62:75:dd:f9:98:f6:9c:1d:c8:b4:
5c:6b:40:2d:d9:37:a6:26:34:f0:38:5a:b0:5e:c8:
64:ea:85:c7:ad:2d:05:36:dd:74:c6:d6:12:49:87:
3e:2d:24:4f:0f:ac:b2:d8:05:ee:43:97:ba:e9:05:
5f:5a:0f:4d:5d:39:aa:b8:94:48:a8:c5:be:aa:c7:
e4:49:ba:22:05:11:ff:9d:ae:46:f3:57:6b:9d:7d:
56:69:0a:ed:f8:6c:e4:dc:79:52:c5:e3:30:ca:c5:
d3:17:a6:05:fa:64:20:8e:47:bd:b7:d6:0a:3a:66:
3c:04:d6:30:bb:ee:b4:1f:91:55:35:74:3a:eb:f3:
4b:fa:0e:15:54:73:50:32:93:fe:e0:7d:fc:14:19:
44:88:54:2e:2e:73:76:4f:40:ab:e6:7d:a6:c6:7a:
23:dd:d4:b1:0d:72:e5:b3:21:34:8a:18:b7:0b:95:
5a:e7:fc:ef:ab:0e:dd:58:f9:61:b1:4e:9c:f1:cc:
ea:0f:c5:70:c4:ba:51:a6:82:3d:0a:d0:7c:cc:47:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:F5:8C:99:A3:D3:C7:50:1C:75:B3:C0:AB:D1:4B:29:42:16:45
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7d:f1:e7:3d:da:df:91:23:fb:09:99:88:c6:ea:5d:01:1e:
6a:17:e5:b2:08:77:bc:77:f8:63:e3:d0:06:66:96:49:66:52:
f6:5c:e1:8e:3d:e0:69:fd:74:74:41:f7:4b:0c:1e:b6:9b:64:
bd:a4:7d:a4:21:34:69:48:6a:25:9c:5e:96:fc:06:0a:b8:32:
3a:19:89:58:ed:4e:c7:1f:b8:66:47:d8:83:37:af:1c:cd:3a:
65:8e:33:c0:a1:d6:d6:f2:a0:9a:41:95:9f:6c:cc:21:69:29:
e2:09:4b:38:77:0b:5d:90:05:9f:25:e7:cd:d2:05:f0:a2:81:
ec:52:53:25:5b:8e:35:41:b1:b4:23:43:4c:7a:25:c4:ea:e2:
86:09:7d:7b:96:c0:5e:8d:de:5d:02:4a:cc:ec:a3:78:92:8b:
f0:48:6b:2d:33:04:d8:e3:ae:40:da:77:12:a7:7c:ff:4a:73:
e6:55:6b:92:c6:0d:62:e9:25:13:a9:6e:85:59:48:7b:a4:71:
f5:fc:6f:aa:10:9d:25:fc:70:d5:d9:b7:3c:9a:d0:c3:11:73:
17:75:5d:99:71:ce:9c:e0:9f:5f:2a:56:76:d8:20:b2:9f:76:
67:e7:d3:a8:dd:1e:b7:3a:37:30:2c:f3:c1:88:fe:c0:c0:71:
ad:37:4f:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKts0s/4t+GGNjBk8mVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMWYyMDU5NzlkMmZiZGU5NTc1NmE0NmEwZjI3MzlkNzgx
NmQ0NTkwHhcNMjUxMDE5MDgwMTE1WhcNMjUxMDIwMDgwMTE1WjAzMTEwLwYDVQQD
Eyg0YWEyZjU4Yzk5YTNkM2M3NTAxYzc1YjNjMGFiZDE0YjI5NDIxNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk0/HWssIiWGh3jXvO5quuexz7tC
ctOLV0q6x6j9oumQWkUWt/Od3fFQwaAHskdYYWJ13fmY9pwdyLRca0At2TemJjTw
OFqwXshk6oXHrS0FNt10xtYSSYc+LSRPD6yy2AXuQ5e66QVfWg9NXTmquJRIqMW+
qsfkSboiBRH/na5G81drnX1WaQrt+Gzk3HlSxeMwysXTF6YF+mQgjke9t9YKOmY8
BNYwu+60H5FVNXQ66/NL+g4VVHNQMpP+4H38FBlEiFQuLnN2T0Cr5n2mxnoj3dSx
DXLlsyE0ihi3C5Va5/zvqw7dWPlhsU6c8czqD8VwxLpRpoI9CtB8zEdSDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqi9YyZo9PHUBx1s8Cr0UspQhZFMB8GA1UdIwQY
MBaAFKEfIFl50vvelXVqRqDyc514FtRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xOWYyMjktYTkwZi00MmM0LTk4MGIt
MTU1MGYyYWM4N2IzLzEvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xOWYyMjktYTkwZi00MmM0LTk4MGItMTU1MGYyYWM4N2Iz
LzEvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeH3x5z3a
35Ej+wmZiMbqXQEeahflsgh3vHf4Y+PQBmaWSWZS9lzhjj3gaf10dEH3Swwetptk
vaR9pCE0aUhqJZxelvwGCrgyOhmJWO1Oxx+4ZkfYgzevHM06ZY4zwKHW1vKgmkGV
n2zMIWkp4glLOHcLXZAFnyXnzdIF8KKB7FJTJVuONUGxtCNDTHolxOrihgl9e5bA
Xo3eXQJKzOyjeJKL8EhrLTME2OOuQNp3Eqd8/0pz5lVrksYNYuklE6luhVlIe6Rx
9fxvqhCdJfxw1dm3PJrQwxFzF3VdmXHOnOCfXypWdtggsp92Z+fTqN0etzo3MCzz
wYj+wMBxrTdPTg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:58 2025 by rpki-client