Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: W+jGAHcxW0rmAgFv/hzzVHtzp4lDsolE3fQTxOpnAPY=
Subject key identifier: 73:0A:EE:50:E1:C9:F7:83:2F:4D:A9:16:CB:E6:94:47:52:78:65:F7
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 0199FFC7A2BEA12875D681A045C01D3CB8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 10C0
Signing time: Mon 20 Oct 2025 04:01:37 +0000
Manifest this update: Mon 20 Oct 2025 04:01:37 +0000
Manifest next update: Tue 21 Oct 2025 04:01:37 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: shKJtVsBwcwiC5+OgTwt/mJhOv3TMExlQq6aAJwG0k4=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:a2:be:a1:28:75:d6:81:a0:45:c0:1d:3c:b8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Oct 20 04:01:37 2025 GMT
Not After : Oct 21 04:01:37 2025 GMT
Subject: CN=730aee50e1c9f7832f4da916cbe69447527865f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:74:b8:68:e7:87:eb:35:1b:df:c0:67:83:
9a:0d:f8:25:07:eb:4a:33:b5:c3:34:61:01:33:9d:
c8:5b:9e:11:a5:81:2d:bd:db:93:67:f7:f4:84:dd:
6b:c6:50:88:cd:c8:96:32:30:76:7e:3b:a8:29:3f:
91:47:00:d6:57:fe:82:b8:20:30:f9:dd:34:af:e9:
6d:b9:7a:2f:3e:f4:20:ed:a2:03:58:46:25:d7:6b:
0e:cf:26:fb:0e:15:fb:f5:5a:04:99:61:4a:c5:5a:
a5:b3:d1:1a:22:61:73:51:23:bf:48:34:49:28:60:
ee:bb:1b:70:1f:e0:ed:e5:a2:f5:eb:6e:d9:81:3e:
4c:d7:99:95:44:d2:1b:c5:5d:68:97:bf:fd:97:8a:
d5:12:0c:4f:e5:82:78:17:64:65:a7:aa:4f:32:a6:
29:65:e6:4f:03:95:18:de:a9:61:aa:09:78:85:43:
9d:c9:ed:83:d5:89:5d:9f:5a:34:8d:f3:55:a3:3b:
c2:89:25:21:87:6e:aa:06:a7:fa:2c:6c:19:9d:86:
55:ec:14:e6:3d:36:33:a3:22:04:2d:c4:82:dc:bf:
f2:84:e2:21:c1:b1:5f:c2:63:e4:ba:0b:64:43:d2:
5f:52:c9:5a:a6:3e:94:f9:de:48:a0:0d:23:a0:97:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0A:EE:50:E1:C9:F7:83:2F:4D:A9:16:CB:E6:94:47:52:78:65:F7
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:53:a5:49:00:69:57:4b:f5:d9:c2:34:df:b8:f6:2e:97:09:
fb:e1:40:64:95:b2:fc:66:ef:35:6a:44:ae:24:44:de:37:ea:
76:9b:78:f5:12:b8:d0:fc:77:da:39:af:4b:8d:15:db:24:fb:
a6:69:c1:ca:cf:26:53:8f:b0:ba:ed:db:72:1a:cf:75:b0:d5:
c6:0b:db:dc:be:af:92:ce:cd:c9:e9:f9:ac:68:88:d2:00:c1:
0e:fb:da:01:cd:5e:fa:50:78:37:8c:cb:33:bc:da:db:77:fd:
ef:7b:55:e7:0e:d1:1b:11:45:ba:de:50:e3:7a:31:a6:a8:59:
a7:59:66:37:96:c8:0a:92:a1:2d:bf:18:f5:e6:a7:c9:ba:41:
a5:6b:ad:94:c1:98:21:ae:1a:7c:30:1a:4d:72:44:1e:9d:1a:
9f:ae:70:b8:21:0d:20:ac:1c:2f:9b:d5:69:bb:67:d5:b2:81:
8c:35:20:5f:0f:07:f9:41:58:4e:43:cf:6e:ce:7e:ac:e4:80:
ee:88:e2:d2:35:3c:24:1e:cd:dd:7b:ea:03:ac:90:e7:ee:3b:
2f:7e:c5:0f:8e:0b:65:46:34:10:26:5b:b1:0b:1b:d7:d5:fd:
1c:5a:5f:46:cd:b1:3c:1f:91:80:7b:60:7f:43:33:67:c1:98:
fa:46:8d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x6K+oSh11oGgRcAdPLjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm
NzMyN2UwHhcNMjUxMDIwMDQwMTM3WhcNMjUxMDIxMDQwMTM3WjAzMTEwLwYDVQQD
Eyg3MzBhZWU1MGUxYzlmNzgzMmY0ZGE5MTZjYmU2OTQ0NzUyNzg2NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfd0uGjnh+s1G9/AZ4OaDfglB+tK
M7XDNGEBM53IW54RpYEtvduTZ/f0hN1rxlCIzciWMjB2fjuoKT+RRwDWV/6CuCAw
+d00r+ltuXovPvQg7aIDWEYl12sOzyb7DhX79VoEmWFKxVqls9EaImFzUSO/SDRJ
KGDuuxtwH+Dt5aL1627ZgT5M15mVRNIbxV1ol7/9l4rVEgxP5YJ4F2Rlp6pPMqYp
ZeZPA5UY3qlhqgl4hUOdye2D1Yldn1o0jfNVozvCiSUhh26qBqf6LGwZnYZV7BTm
PTYzoyIELcSC3L/yhOIhwbFfwmPkugtkQ9JfUslapj6U+d5IoA0joJecUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMK7lDhyfeDL02pFsvmlEdSeGX3MB8GA1UdIwQY
MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt
YmRmYTdjNGY4YjBhLzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh
LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlOlSQBp
V0v12cI037j2LpcJ++FAZJWy/GbvNWpEriRE3jfqdpt49RK40Px32jmvS40V2yT7
pmnBys8mU4+wuu3bchrPdbDVxgvb3L6vks7Nyen5rGiI0gDBDvvaAc1e+lB4N4zL
M7za23f973tV5w7RGxFFut5Q43oxpqhZp1lmN5bICpKhLb8Y9eanybpBpWutlMGY
Ia4afDAaTXJEHp0an65wuCENIKwcL5vVabtn1bKBjDUgXw8H+UFYTkPPbs5+rOSA
7oji0jU8JB7N3XvqA6yQ5+47L37FD44LZUY0ECZbsQsb19X9HFpfRs2xPB+RgHtg
f0MzZ8GY+kaNmA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:26 2025 by rpki-client