Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: yJ+WthpaxZvJjioxLvijMRawbsNMMlgHJbcy+DzRaXs=
Subject key identifier: EA:A9:A4:3D:1F:2C:9D:98:15:53:CA:B2:E6:D6:7D:CD:08:5B:2E:B1
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019A029127EC003E3AEDDE6F52AA1397BE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 17:00:58 +0000
Manifest this update: Mon 20 Oct 2025 17:00:58 +0000
Manifest next update: Tue 21 Oct 2025 17:00:58 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: JTH1I1TMlwY6FSBn7ogjiOmkYZYFRI92ybZDnaPbyGs=)
2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:27:ec:00:3e:3a:ed:de:6f:52:aa:13:97:be:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Oct 20 17:00:58 2025 GMT
Not After : Oct 21 17:00:58 2025 GMT
Subject: CN=eaa9a43d1f2c9d981553cab2e6d67dcd085b2eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f9:b8:29:d2:73:98:f7:8b:d5:7e:00:57:32:
76:e2:0b:00:29:93:6a:05:cf:e3:d2:5e:b9:db:77:
41:c6:a5:43:c4:8b:7d:1c:e6:79:86:2a:08:f1:f9:
e3:48:b4:8a:de:8c:ba:d3:ab:0f:a8:6f:5c:3a:88:
05:2d:1d:4c:b6:23:41:78:ad:e2:c5:d9:00:a0:f6:
10:af:c3:2b:3e:08:6d:0d:37:c4:2e:02:8c:1e:d1:
cf:3b:be:7b:69:e2:63:e0:4a:a0:e9:67:4c:1b:ed:
de:85:5c:8d:05:bd:ad:84:4d:6d:44:87:cb:8d:f8:
2c:07:02:3a:f0:2e:9b:c0:7f:4b:47:ce:bf:a6:0e:
4d:c2:90:09:d8:ab:49:84:82:3e:45:5d:d8:20:2b:
8a:7e:36:8e:d4:66:9e:a8:8b:ec:02:35:9b:be:a9:
10:66:5e:a6:30:80:4b:2d:db:24:d5:ac:32:11:2c:
16:5d:f4:19:45:40:7e:65:6d:83:d0:e2:18:1d:0f:
af:78:7d:9a:dd:6d:57:3f:66:3c:d3:39:61:93:b7:
43:cd:1d:49:46:d6:ca:e2:8a:9d:6a:2d:62:1e:30:
e9:f9:a3:30:b3:3c:4b:f6:81:e5:da:50:76:53:05:
21:30:54:47:fd:07:48:91:29:ac:e1:fe:80:2c:5e:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A9:A4:3D:1F:2C:9D:98:15:53:CA:B2:E6:D6:7D:CD:08:5B:2E:B1
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fe:fe:b8:14:9f:00:66:32:4c:da:72:fe:1b:a5:1c:97:4a:
e1:08:e1:16:cf:a6:4a:7a:66:b8:ea:70:bd:21:ac:b5:9e:9a:
e1:5b:46:e9:d6:4b:c5:50:b2:47:38:90:a4:26:dd:6b:81:a3:
06:bc:9a:69:41:5c:27:62:82:26:6c:2e:0e:1d:54:64:2c:fc:
88:8b:06:b6:ff:30:7c:8c:4d:80:5a:38:89:69:0b:ce:be:a5:
79:53:36:4e:6f:0f:bb:9f:3e:0c:93:64:d9:03:d6:d7:b3:9b:
be:6e:55:44:f0:1f:59:26:e3:ba:2a:bb:0e:25:58:75:70:cc:
12:94:ea:5c:c2:9c:fe:64:b3:ac:84:36:c1:fd:09:8d:0e:82:
88:a1:39:9f:0b:8f:5e:1e:50:39:5f:3f:2f:d3:35:31:b5:c2:
0b:8a:d4:de:37:9d:15:8c:83:7f:5b:c0:5a:f9:94:d1:23:47:
25:ed:5e:6a:2d:b1:a9:52:fe:e9:54:c2:b9:d3:18:ad:4f:74:
d4:6b:b0:a0:75:dc:d6:29:e8:06:6a:2b:71:f4:9e:06:f9:78:
b6:2c:56:4c:1c:c9:1a:bd:17:55:ed:d8:cc:f6:bf:48:6b:31:
21:4f:02:39:b2:8a:9d:ad:e8:97:97:12:4c:6b:b7:04:48:6d:
2a:e0:b0:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCkSfsAD467d5vUqoTl76MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTZlZDg3YjY2OWQwNWI0MjBkZjVhYTlhNjEzMmVhNmZi
NTFhNWEwHhcNMjUxMDIwMTcwMDU4WhcNMjUxMDIxMTcwMDU4WjAzMTEwLwYDVQQD
EyhlYWE5YTQzZDFmMmM5ZDk4MTU1M2NhYjJlNmQ2N2RjZDA4NWIyZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/m4KdJzmPeL1X4AVzJ24gsAKZNq
Bc/j0l6523dBxqVDxIt9HOZ5hioI8fnjSLSK3oy606sPqG9cOogFLR1MtiNBeK3i
xdkAoPYQr8MrPghtDTfELgKMHtHPO757aeJj4Eqg6WdMG+3ehVyNBb2thE1tRIfL
jfgsBwI68C6bwH9LR86/pg5NwpAJ2KtJhII+RV3YICuKfjaO1GaeqIvsAjWbvqkQ
Zl6mMIBLLdsk1awyESwWXfQZRUB+ZW2D0OIYHQ+veH2a3W1XP2Y80zlhk7dDzR1J
RtbK4oqdai1iHjDp+aMwszxL9oHl2lB2UwUhMFRH/QdIkSms4f6ALF5TXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqppD0fLJ2YFVPKsubWfc0IWy6xMB8GA1UdIwQY
MBaAFKPm7Ye2adBbQg31qpphMupvtRpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMt
N2I4ZWEwZjgzMDgxLzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMtN2I4ZWEwZjgzMDgx
LzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOf7+uBSf
AGYyTNpy/hulHJdK4QjhFs+mSnpmuOpwvSGstZ6a4VtG6dZLxVCyRziQpCbda4Gj
BryaaUFcJ2KCJmwuDh1UZCz8iIsGtv8wfIxNgFo4iWkLzr6leVM2Tm8Pu58+DJNk
2QPW17Obvm5VRPAfWSbjuiq7DiVYdXDMEpTqXMKc/mSzrIQ2wf0JjQ6CiKE5nwuP
Xh5QOV8/L9M1MbXCC4rU3jedFYyDf1vAWvmU0SNHJe1eai2xqVL+6VTCudMYrU90
1GuwoHXc1inoBmorcfSeBvl4tixWTBzJGr0XVe3YzPa/SGsxIU8CObKKna3ol5cS
TGu3BEhtKuCwnQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:36:00 2025 by rpki-client