Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: tq0pik2LvHUhkR3yu2G2dO+T/74kzqpvHygmSZ3FVJI=
Subject key identifier: 79:B3:8E:60:9A:39:19:1E:72:92:C9:5A:17:88:B5:CA:A1:8C:0F:16
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 019A01EBCD67070DF57D1DEA2B64D531D866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 14:00:22 +0000
Manifest this update: Mon 20 Oct 2025 14:00:22 +0000
Manifest next update: Tue 21 Oct 2025 14:00:22 +0000
Files and hashes: 1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: WDoTWqe1wy5TVbnO9PsSQy1bLZYBi8SoxiIdszqi/Zg=)
2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:cd:67:07:0d:f5:7d:1d:ea:2b:64:d5:31:d8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Oct 20 14:00:22 2025 GMT
Not After : Oct 21 14:00:22 2025 GMT
Subject: CN=79b38e609a39191e7292c95a1788b5caa18c0f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:06:4d:4c:58:72:c4:1c:c9:55:b0:05:29:
93:01:a0:97:f2:18:4c:02:a2:a4:20:4b:c9:a3:f2:
d3:fe:5b:1e:88:9c:bc:f2:54:8d:23:9b:f7:93:64:
e8:6a:17:f1:35:fc:8b:32:8c:b9:68:09:c8:ed:27:
8a:66:f1:03:86:b1:7f:6d:51:29:57:25:79:7c:09:
43:cc:c6:bd:cd:54:9f:9e:07:5c:57:05:01:89:ea:
6b:09:8b:7e:b1:33:33:f8:0b:3a:cd:d2:bf:b3:f6:
3f:6f:76:2d:66:39:91:f3:52:99:96:15:b9:ac:44:
4e:7c:3f:f5:11:26:08:63:3c:b0:77:6d:3b:0a:3c:
94:7b:f0:c6:fb:89:b3:80:c5:fb:7d:81:f0:3b:f6:
1a:aa:da:5f:8d:c4:a2:ee:96:ac:2f:18:50:de:ef:
fc:56:a0:61:2c:fa:95:c1:f8:c3:08:26:02:50:26:
cc:d4:28:a8:f8:c8:28:94:d1:b4:8b:cb:93:26:8a:
8e:ec:02:ac:ec:84:7b:15:37:30:7a:a3:cc:7b:13:
78:94:47:31:fb:2f:d8:10:ca:5a:66:d4:4c:4a:83:
da:5d:97:a4:64:80:33:a6:15:91:c8:7d:ba:16:78:
5d:d3:06:2b:86:94:2e:da:d9:27:21:0b:7e:3f:7e:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:8E:60:9A:39:19:1E:72:92:C9:5A:17:88:B5:CA:A1:8C:0F:16
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9f:04:ef:2a:60:b1:29:da:c8:64:13:f2:96:40:96:2e:11:
0b:75:c3:aa:ca:bb:a3:f0:fe:24:32:2b:c6:65:68:bb:2b:83:
6f:64:a3:0b:15:a3:1c:49:59:c7:cc:a9:88:b8:52:0b:f6:0d:
25:12:d7:07:62:fd:55:9b:cc:8f:8a:26:b5:3f:ec:90:a1:9e:
a3:93:5f:08:35:3f:07:93:09:0e:7f:87:67:aa:b1:87:e5:a6:
17:d5:4e:fd:8f:c8:29:67:bf:b9:ec:8a:e5:14:85:31:b4:b3:
d9:6d:fe:f6:fe:69:24:dd:3c:9c:cc:5b:9a:a1:a7:0d:6e:69:
e3:d2:02:9c:80:a9:9d:83:df:87:62:40:b4:bb:26:3e:99:2a:
96:30:0a:ec:7a:c9:70:2d:25:8b:e5:cc:7c:44:ff:27:09:13:
84:cd:64:6d:6d:3b:20:27:7d:b8:73:b8:92:99:9d:9a:92:7d:
54:ef:e7:9b:a7:40:5c:62:a2:cb:89:92:4d:e9:c4:e0:50:3b:
82:e9:fd:e8:c7:11:d0:89:38:e6:cc:9d:e8:62:0d:da:7c:b9:
d4:39:a8:e5:55:4f:71:b0:2a:c1:ec:1f:fc:6a:2a:9a:be:7e:
90:b4:09:97:85:f6:71:c1:2e:41:f3:c7:a6:a9:e9:a8:b5:94:
2f:21:20:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB681nBw31fR3qK2TVMdhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMjcyOTAyNjU4ZTE1Y2IzNGJkNTA5YzM5NTBiYWRlMjFh
Nzk2ZDIwHhcNMjUxMDIwMTQwMDIyWhcNMjUxMDIxMTQwMDIyWjAzMTEwLwYDVQQD
Eyg3OWIzOGU2MDlhMzkxOTFlNzI5MmM5NWExNzg4YjVjYWExOGMwZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2UGTUxYcsQcyVWwBSmTAaCX8hhM
AqKkIEvJo/LT/lseiJy88lSNI5v3k2ToahfxNfyLMoy5aAnI7SeKZvEDhrF/bVEp
VyV5fAlDzMa9zVSfngdcVwUBieprCYt+sTMz+As6zdK/s/Y/b3YtZjmR81KZlhW5
rEROfD/1ESYIYzywd207CjyUe/DG+4mzgMX7fYHwO/YaqtpfjcSi7pasLxhQ3u/8
VqBhLPqVwfjDCCYCUCbM1Cio+MgolNG0i8uTJoqO7AKs7IR7FTcweqPMexN4lEcx
+y/YEMpaZtRMSoPaXZekZIAzphWRyH26Fnhd0wYrhpQu2tknIQt+P36MIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmzjmCaORkecpLJWheItcqhjA8WMB8GA1UdIwQY
MBaAFKAnKQJljhXLNL1QnDlQut4hp5bSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgt
OTI3NTI2ZTZmMmQ5LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgtOTI3NTI2ZTZmMmQ5
LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZ8E7ypg
sSnayGQT8pZAli4RC3XDqsq7o/D+JDIrxmVouyuDb2SjCxWjHElZx8ypiLhSC/YN
JRLXB2L9VZvMj4omtT/skKGeo5NfCDU/B5MJDn+HZ6qxh+WmF9VO/Y/IKWe/ueyK
5RSFMbSz2W3+9v5pJN08nMxbmqGnDW5p49ICnICpnYPfh2JAtLsmPpkqljAK7HrJ
cC0li+XMfET/JwkThM1kbW07ICd9uHO4kpmdmpJ9VO/nm6dAXGKiy4mSTenE4FA7
gun96McR0Ik45syd6GIN2ny51Dmo5VVPcbAqwewf/Goqmr5+kLQJl4X2ccEuQfPH
pqnpqLWULyEgDg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:20 2025 by rpki-client