Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: OV/1dpsf8kucLRDqFffxWOH+cbazCVTcnkpxtLrH0Q4=
Subject key identifier: C9:5D:D0:C1:7B:D1:A7:D2:44:38:E2:BF:88:A4:2A:3B:F7:7A:24:8C
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 0199C48D990797CAF32610CB7BB1CF37AD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 13FC
Signing time: Wed 08 Oct 2025 16:00:38 +0000
Manifest this update: Wed 08 Oct 2025 16:00:38 +0000
Manifest next update: Thu 09 Oct 2025 16:00:38 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: eb6pO0O1hs1lRBNrZ7yLfN46aeY56mh6Jt1/uBj2uVY=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8d:99:07:97:ca:f3:26:10:cb:7b:b1:cf:37:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Oct 8 16:00:38 2025 GMT
Not After : Oct 9 16:00:38 2025 GMT
Subject: CN=c95dd0c17bd1a7d24438e2bf88a42a3bf77a248c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:69:eb:5a:6c:49:04:e0:58:e4:d1:94:43:
75:95:6e:bc:b0:79:00:6a:98:00:58:70:be:b4:93:
61:c1:f6:62:d8:54:a0:05:99:77:e3:56:d7:a3:08:
e5:c6:6f:41:e3:a6:15:0a:63:31:02:31:9e:a8:56:
ad:c1:8b:54:c9:28:ae:38:a5:51:80:c7:96:cf:1a:
f7:5d:eb:f8:f9:d3:10:24:bf:63:a9:1e:e4:c7:91:
83:24:a4:39:ae:a1:18:40:11:8f:57:88:fe:ce:9b:
20:33:f8:cb:a3:15:16:4d:de:f4:c9:33:4b:87:e4:
05:8f:d9:6e:38:b7:d4:7e:5c:e0:44:8f:ca:2a:c4:
fa:35:d0:68:21:82:99:93:91:e8:65:ac:73:6c:de:
00:49:6e:e8:44:4c:7d:aa:82:d2:14:98:04:b1:1f:
8d:6f:f7:3a:32:a6:52:22:5a:6c:5f:2e:4a:6e:7c:
02:97:ba:ea:e3:b8:5e:34:fa:ac:67:6a:c9:a2:3d:
8e:67:02:3b:e5:66:bb:22:a3:05:ba:ef:1e:97:c2:
cf:fc:68:e3:24:e9:39:9b:12:56:2d:62:07:2a:eb:
ec:cd:ef:b7:cf:c5:b5:2e:e9:29:a4:fe:01:50:22:
51:b6:6e:92:72:05:63:cc:a7:d6:24:74:64:55:46:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:D0:C1:7B:D1:A7:D2:44:38:E2:BF:88:A4:2A:3B:F7:7A:24:8C
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a6:47:e8:75:1f:b3:2c:3e:68:be:c6:f6:77:83:52:21:a7:
5b:4c:07:83:68:4d:af:ea:62:eb:ac:49:d2:81:60:d2:b8:79:
e2:24:1e:cb:19:e1:f9:78:47:e6:b1:66:ec:de:58:83:72:ad:
6e:d9:bc:de:b3:dd:d6:95:e8:55:be:8f:00:a1:96:89:1f:f5:
2b:20:6b:bb:e3:3c:26:ba:f3:38:e7:fb:b6:cd:91:d3:4f:a0:
30:87:5d:60:78:8e:0d:f9:a2:eb:bc:ad:0a:b0:50:f9:1c:52:
81:3f:da:23:e4:ba:51:94:0c:ee:81:94:0f:36:82:bf:0c:86:
1f:ca:2a:97:ba:28:c9:ab:a1:0f:1a:31:ca:75:1b:23:8b:c8:
90:ca:7e:44:9a:ff:3a:09:f3:2b:82:fe:33:cf:d9:85:e3:4f:
83:47:a2:10:22:fe:a4:01:b0:50:a3:8e:61:d5:31:93:87:cf:
f9:ac:1f:06:5e:b1:24:c8:f6:74:25:4e:62:0a:17:22:7d:b4:
89:f0:8e:d7:b5:ea:05:89:34:06:7a:87:ed:20:34:dd:be:64:
e3:78:93:10:73:1c:68:73:eb:c6:9e:e7:ed:c0:8d:ae:4e:d2:
7d:5a:f5:f7:d6:56:a0:4a:f0:07:32:cb:93:00:16:12:3c:d1:
55:23:df:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEjZkHl8rzJhDLe7HPN62XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi
MTE5N2YwHhcNMjUxMDA4MTYwMDM4WhcNMjUxMDA5MTYwMDM4WjAzMTEwLwYDVQQD
EyhjOTVkZDBjMTdiZDFhN2QyNDQzOGUyYmY4OGE0MmEzYmY3N2EyNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5hp61psSQTgWOTRlEN1lW68sHkA
apgAWHC+tJNhwfZi2FSgBZl341bXowjlxm9B46YVCmMxAjGeqFatwYtUySiuOKVR
gMeWzxr3Xev4+dMQJL9jqR7kx5GDJKQ5rqEYQBGPV4j+zpsgM/jLoxUWTd70yTNL
h+QFj9luOLfUflzgRI/KKsT6NdBoIYKZk5HoZaxzbN4ASW7oREx9qoLSFJgEsR+N
b/c6MqZSIlpsXy5KbnwCl7rq47heNPqsZ2rJoj2OZwI75Wa7IqMFuu8el8LP/Gjj
JOk5mxJWLWIHKuvsze+3z8W1LukppP4BUCJRtm6ScgVjzKfWJHRkVUbmhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMld0MF70afSRDjiv4ikKjv3eiSMMB8GA1UdIwQY
MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt
YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4
LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKZH6HUf
syw+aL7G9neDUiGnW0wHg2hNr+pi66xJ0oFg0rh54iQeyxnh+XhH5rFm7N5Yg3Kt
btm83rPd1pXoVb6PAKGWiR/1KyBru+M8JrrzOOf7ts2R00+gMIddYHiODfmi67yt
CrBQ+RxSgT/aI+S6UZQM7oGUDzaCvwyGH8oql7ooyauhDxoxynUbI4vIkMp+RJr/
OgnzK4L+M8/ZheNPg0eiECL+pAGwUKOOYdUxk4fP+awfBl6xJMj2dCVOYgoXIn20
ifCO17XqBYk0BnqH7SA03b5k43iTEHMcaHPrxp7n7cCNrk7SfVr199ZWoErwBzLL
kwAWEjzRVSPfMA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:27:12 2025 by rpki-client