Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
File: owVfB71HqGR4w79HOSVzrNU9Y24.mft (raw, json)
Hash identifier: skh6o4kMY3dSohFxaAM4zt6MFe5shsWmN7s+SGTyTCQ=
Subject key identifier: 58:B5:72:2C:87:38:C3:D2:5D:15:36:07:B2:8E:7A:F6:28:9A:42:FC
Authority key identifier: A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
Certificate issuer: /CN=a3055f07bd47a86478c3bf47392573acd53d636e
Certificate serial: 0199FC59112D2BA2B8722C17D184C5307863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: owVfB71HqGR4w79HOSVzrNU9Y24.crl (hash: gXjI1pHPGPRI5VXJoYn+K/oRfC/V75rMr1kYuOBnFbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:11:2d:2b:a2:b8:72:2c:17:d1:84:c5:30:78:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3055f07bd47a86478c3bf47392573acd53d636e
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=58b5722c8738c3d25d153607b28e7af6289a42fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:99:b2:ea:5b:21:03:a9:68:9e:50:ae:07:
91:63:bd:30:7d:b0:39:8f:ac:ab:11:db:8c:03:a2:
6c:af:be:61:5c:c9:d7:43:b5:f9:00:e8:0b:ab:49:
53:8c:0a:45:a3:79:f4:21:78:0a:f3:0c:77:c7:21:
3b:13:e1:93:5a:30:c4:78:9f:11:07:0e:91:5b:36:
93:bc:27:7f:d2:9f:e5:80:66:e7:a7:ef:71:c3:9f:
5f:c6:d1:20:0e:c6:ea:8f:fc:b6:73:64:dc:22:cd:
4f:33:48:54:82:8d:fb:d0:c9:9a:42:88:51:38:1e:
ad:8b:f5:b9:9a:29:39:04:e5:33:67:6c:e6:35:45:
ed:d0:6b:d0:43:f4:4e:53:80:cc:37:dc:32:26:7d:
26:a9:65:f3:99:21:7d:6e:92:5d:ce:c7:70:7d:a1:
ba:0e:e4:77:5a:c0:14:28:96:b4:5a:96:27:f2:a8:
9c:18:8f:4e:3f:bf:a2:02:d4:2c:f4:28:26:30:9e:
4d:ca:9e:35:75:a4:f2:61:95:22:7e:11:39:00:31:
92:98:a6:16:48:f8:83:b3:2c:22:e9:7e:d7:49:09:
42:21:88:c8:a2:02:b6:79:52:32:24:30:c5:6d:cf:
ae:4a:ab:9c:09:31:be:66:d3:ba:8e:17:b0:a2:95:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B5:72:2C:87:38:C3:D2:5D:15:36:07:B2:8E:7A:F6:28:9A:42:FC
X509v3 Authority Key Identifier:
keyid:A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:f3:64:fa:7c:f4:cf:e1:63:51:a8:11:50:0b:a4:69:0c:
3d:2c:7c:79:c7:97:37:fa:a3:8b:3a:1a:37:65:ab:fc:85:56:
ec:30:95:11:53:88:ef:85:e5:02:dc:4e:94:21:dd:e9:48:3d:
4b:8e:52:ec:e8:d6:dc:36:04:4a:c0:8d:37:ae:53:0a:44:f9:
59:ef:b6:8a:67:64:29:ae:b6:b2:ee:6f:fd:d9:96:31:be:d4:
a6:62:f3:d1:dc:6a:83:5c:39:5c:42:14:1e:13:9b:2b:d2:3d:
8c:a0:9c:89:92:c3:9b:3c:cf:f6:93:dc:f3:79:d3:77:0c:78:
cf:1a:b7:b7:05:ce:2a:46:8c:9f:a9:b7:b7:3e:0f:c5:6f:4b:
3e:49:76:76:81:c2:35:d2:53:6c:0d:08:88:d4:54:47:b8:0a:
49:45:17:59:dd:7d:59:dd:4d:92:6f:78:a4:f1:57:c0:7f:db:
93:2d:63:e6:7c:27:0d:54:64:84:84:e9:99:a6:88:1d:70:8b:
01:fd:b7:76:f6:e5:cb:fe:cd:45:03:d6:3b:58:01:b5:82:a2:
da:3c:e6:d5:7d:49:a1:62:4c:f1:0a:cf:cb:26:72:21:6e:da:
eb:09:75:ed:d5:cc:7e:0e:9f:58:5d:87:5e:97:e8:34:e2:b8:
22:fc:b8:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WREtK6K4ciwX0YTFMHhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMDU1ZjA3YmQ0N2E4NjQ3OGMzYmY0NzM5MjU3M2FjZDUz
ZDYzNmUwHhcNMjUxMDE5MTIwMTU5WhcNMjUxMDIwMTIwMTU5WjAzMTEwLwYDVQQD
Eyg1OGI1NzIyYzg3MzhjM2QyNWQxNTM2MDdiMjhlN2FmNjI4OWE0MmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IyZsupbIQOpaJ5QrgeRY70wfbA5
j6yrEduMA6Jsr75hXMnXQ7X5AOgLq0lTjApFo3n0IXgK8wx3xyE7E+GTWjDEeJ8R
Bw6RWzaTvCd/0p/lgGbnp+9xw59fxtEgDsbqj/y2c2TcIs1PM0hUgo370MmaQohR
OB6ti/W5mik5BOUzZ2zmNUXt0GvQQ/ROU4DMN9wyJn0mqWXzmSF9bpJdzsdwfaG6
DuR3WsAUKJa0WpYn8qicGI9OP7+iAtQs9CgmMJ5Nyp41daTyYZUifhE5ADGSmKYW
SPiDsywi6X7XSQlCIYjIogK2eVIyJDDFbc+uSqucCTG+ZtO6jhewopVo6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFi1ciyHOMPSXRU2B7KOevYomkL8MB8GA1UdIwQY
MBaAFKMFXwe9R6hkeMO/Rzklc6zVPWNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3dWZkI3MUhxR1I0dzc5SE9TVnpyTlU5WTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWQwYmYtNmQ1MS00MDhmLWI3YWUt
YTNhYWQxMTc4Y2Q0LzEvb3dWZkI3MUhxR1I0dzc5SE9TVnpyTlU5WTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOWQwYmYtNmQ1MS00MDhmLWI3YWUtYTNhYWQxMTc4Y2Q0
LzEvb3dWZkI3MUhxR1I0dzc5SE9TVnpyTlU5WTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZnzZPp8
9M/hY1GoEVALpGkMPSx8eceXN/qjizoaN2Wr/IVW7DCVEVOI74XlAtxOlCHd6Ug9
S45S7OjW3DYESsCNN65TCkT5We+2imdkKa62su5v/dmWMb7UpmLz0dxqg1w5XEIU
HhObK9I9jKCciZLDmzzP9pPc83nTdwx4zxq3twXOKkaMn6m3tz4PxW9LPkl2doHC
NdJTbA0IiNRUR7gKSUUXWd19Wd1Nkm94pPFXwH/bky1j5nwnDVRkhITpmaaIHXCL
Af23dvbly/7NRQPWO1gBtYKi2jzm1X1JoWJM8QrPyyZyIW7a6wl17dXMfg6fWF2H
XpfoNOK4Ivy4Vg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:38 2025 by rpki-client