Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: R8kP0ADBHFGh/LTn7PBeuqAghlgvIfPeVNkKhtNJEL4=
Subject key identifier: 88:D1:20:74:7F:B1:7C:47:1F:3D:53:E4:60:92:10:0D:BD:79:92:2B
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 0199FCC6D11B2D291828900635C9F2679B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 13DC
Signing time: Sun 19 Oct 2025 14:01:52 +0000
Manifest this update: Sun 19 Oct 2025 14:01:52 +0000
Manifest next update: Mon 20 Oct 2025 14:01:52 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: 0DYGUbEK6nzqIGFSxndoKIFOlIgPofeWAOv8LIp3Xb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:d1:1b:2d:29:18:28:90:06:35:c9:f2:67:9b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Oct 19 14:01:52 2025 GMT
Not After : Oct 20 14:01:52 2025 GMT
Subject: CN=88d120747fb17c471f3d53e46092100dbd79922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d5:05:1f:f7:5d:f4:3a:71:46:ec:3d:fe:a0:
51:1e:45:a2:3d:ae:19:a1:0d:94:b3:e8:f4:22:b7:
bd:3e:de:9b:c3:a3:e6:fd:8f:cc:09:09:8d:bf:5f:
41:17:ce:2b:52:3c:40:90:2a:5c:09:fb:2a:24:5c:
32:13:55:2d:f1:47:77:21:84:bd:97:a3:f9:6b:bc:
d3:b2:87:d1:de:30:02:6c:8b:e6:8a:05:d3:7d:8c:
da:84:35:88:47:d9:90:ef:54:1a:bb:e1:78:f9:7c:
69:84:b3:bc:bd:db:2e:59:0b:14:4b:7c:57:74:55:
23:1b:1c:31:66:01:36:61:a1:94:3f:58:56:fc:8a:
30:ed:c0:db:aa:d0:8f:c4:27:ad:45:1e:52:5b:6e:
7c:35:2f:fe:c5:4f:e8:1a:44:82:5b:09:71:2f:4e:
ef:35:a8:00:09:20:de:d0:33:48:ff:14:12:e8:2a:
25:b9:9c:38:ef:5a:d8:81:d1:81:44:c2:2c:6f:d5:
cd:7e:a9:cf:82:68:30:a9:2b:6e:d0:8e:bd:7d:f7:
a0:94:b7:82:87:d6:34:11:48:64:f1:23:48:65:c7:
81:87:fa:6b:99:79:cd:a1:07:11:4d:28:60:dc:ff:
50:1f:c0:9a:2f:d7:fc:97:56:ee:74:86:b3:fc:d0:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:20:74:7F:B1:7C:47:1F:3D:53:E4:60:92:10:0D:BD:79:92:2B
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:6a:10:e7:5d:fb:19:6a:b0:31:dc:cb:06:1a:65:2d:7f:
04:82:6d:8f:00:5c:dc:5e:d4:05:1b:eb:0e:7c:52:92:74:5c:
63:e4:df:6c:66:6f:80:dc:52:9e:2d:3c:6d:2a:c5:e9:03:ea:
2f:9a:8a:4c:ec:d5:d3:05:67:9d:1c:22:ee:0f:06:66:d9:81:
15:43:f3:b7:75:71:3e:7c:28:22:e3:1c:22:6f:ba:a6:06:96:
54:0e:d9:6e:9e:be:7e:50:39:e0:68:4b:f6:e4:aa:84:f1:54:
87:46:95:87:cd:56:09:b8:ba:c4:c5:ba:ac:88:03:d6:09:07:
3e:01:2d:ca:bb:08:3b:69:5b:ca:bd:55:60:fd:8c:e9:f6:a1:
1f:0c:34:12:05:f1:22:55:d9:34:d0:b4:b8:f5:ff:fb:d9:0c:
8e:f5:01:6a:ac:41:01:a8:1a:07:a0:95:4e:90:78:99:c5:9f:
4b:95:cf:69:21:92:c7:26:71:c8:35:b2:7c:6c:53:82:dd:e9:
fa:91:43:9a:f7:0f:e9:0d:2a:58:07:51:f7:52:f3:12:4a:43:
c5:48:97:e8:ad:62:aa:84:2a:13:38:e1:79:fb:3b:d8:1f:45:
c6:18:bc:e4:2c:e0:a7:a7:05:6e:a0:1c:3e:6f:a3:d9:81:ef:
5e:f9:03:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xtEbLSkYKJAGNcnyZ5sPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTJmNGFiYTBiYzliM2UzYWIxODU2NDk3YTQwMDcxOTcx
YjcwNGEwHhcNMjUxMDE5MTQwMTUyWhcNMjUxMDIwMTQwMTUyWjAzMTEwLwYDVQQD
Eyg4OGQxMjA3NDdmYjE3YzQ3MWYzZDUzZTQ2MDkyMTAwZGJkNzk5MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dUFH/dd9DpxRuw9/qBRHkWiPa4Z
oQ2Us+j0Ire9Pt6bw6Pm/Y/MCQmNv19BF84rUjxAkCpcCfsqJFwyE1Ut8Ud3IYS9
l6P5a7zTsofR3jACbIvmigXTfYzahDWIR9mQ71Qau+F4+XxphLO8vdsuWQsUS3xX
dFUjGxwxZgE2YaGUP1hW/Iow7cDbqtCPxCetRR5SW258NS/+xU/oGkSCWwlxL07v
NagACSDe0DNI/xQS6ColuZw471rYgdGBRMIsb9XNfqnPgmgwqStu0I69ffeglLeC
h9Y0EUhk8SNIZceBh/prmXnNoQcRTShg3P9QH8CaL9f8l1budIaz/NBurwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjRIHR/sXxHHz1T5GCSEA29eZIrMB8GA1UdIwQY
MBaAFJji9KugvJs+OrGFZJekAHGXG3BKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS85MmQ1NjQtNWQwOS00MjhlLWFmODAt
ODg4MjE5OWJjY2I0LzEvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS85MmQ1NjQtNWQwOS00MjhlLWFmODAtODg4MjE5OWJjY2I0
LzEvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6VqEOdd
+xlqsDHcywYaZS1/BIJtjwBc3F7UBRvrDnxSknRcY+TfbGZvgNxSni08bSrF6QPq
L5qKTOzV0wVnnRwi7g8GZtmBFUPzt3VxPnwoIuMcIm+6pgaWVA7Zbp6+flA54GhL
9uSqhPFUh0aVh81WCbi6xMW6rIgD1gkHPgEtyrsIO2lbyr1VYP2M6fahHww0EgXx
IlXZNNC0uPX/+9kMjvUBaqxBAagaB6CVTpB4mcWfS5XPaSGSxyZxyDWyfGxTgt3p
+pFDmvcP6Q0qWAdR91LzEkpDxUiX6K1iqoQqEzjhefs72B9Fxhi85Czgp6cFbqAc
Pm+j2YHvXvkD3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:22 2025 by rpki-client