Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json)
Hash identifier: VKh0bbeXuYEuFVX0DLEfSCUNmK75NCZDuACOP7A/lvw=
Subject key identifier: B7:65:C5:66:61:89:52:D1:BA:2B:D1:06:1E:7F:53:4E:6E:AD:F7:14
Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Certificate serial: 019A1C5024D2C6CC4EAB4EEB97D8163BC5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
Manifest number: 1687
Signing time: Sat 25 Oct 2025 17:00:04 +0000
Manifest this update: Sat 25 Oct 2025 17:00:04 +0000
Manifest next update: Sun 26 Oct 2025 17:00:04 +0000
Files and hashes: 1: APsUsrAn96ow-lwQ45SmC1gQegc.roa (hash: t3tVyfgAERiYm7/hAZrrvXacDVWFUchPqKdL2GXQLe4=)
2: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: c5PiletGeBxq/FKClWrDASS0btW6JsZYRufhJvLN5yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:24:d2:c6:cc:4e:ab:4e:eb:97:d8:16:3b:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1
Validity
Not Before: Oct 25 17:00:04 2025 GMT
Not After : Oct 26 17:00:04 2025 GMT
Subject: CN=b765c566618952d1ba2bd1061e7f534e6eadf714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:c5:65:15:5a:c6:48:a1:99:05:ba:c0:4e:
6a:b5:d3:ff:bd:03:22:00:5d:f2:a7:f1:ff:47:9b:
d8:a1:43:3a:53:e3:06:72:8c:a9:3a:6e:ef:4a:eb:
bb:7d:94:d2:6e:6a:74:6f:22:53:75:9e:8d:c2:5e:
75:d6:a1:03:04:0a:f5:2a:01:15:94:4c:c1:20:7c:
c9:e4:5e:0a:f9:58:70:36:91:2f:67:d0:02:44:a0:
79:d6:06:82:0a:af:19:26:81:82:f8:8a:64:ec:d8:
9f:58:32:2f:cc:ac:1a:6f:4e:26:34:c3:6a:c8:1f:
5a:ab:ed:7a:95:da:9a:13:34:aa:b3:1b:85:d7:38:
7f:79:fc:10:e3:ec:0c:52:24:b2:9d:1e:db:6b:42:
29:63:21:4d:a1:5c:f4:69:ae:37:89:39:f0:47:54:
e6:f5:75:f6:a8:62:58:e5:ff:29:bc:9e:20:44:48:
86:2c:a1:50:3c:ec:9e:62:43:8c:88:11:27:05:94:
42:ae:f7:53:2f:94:92:f5:a9:d0:e8:c9:c5:eb:e4:
2b:71:80:a0:32:20:22:55:92:ea:66:6f:59:3b:b3:
4a:f5:db:9f:09:d6:ea:fa:bb:57:0d:ff:a5:45:4e:
ab:11:6a:fa:11:0f:99:61:01:27:3e:80:be:9d:ab:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:65:C5:66:61:89:52:D1:BA:2B:D1:06:1E:7F:53:4E:6E:AD:F7:14
X509v3 Authority Key Identifier:
keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bf:93:61:68:af:20:be:38:a4:21:ab:2e:54:18:89:db:53:
1e:1c:f0:98:c4:78:98:3d:1b:d4:d6:f7:97:be:62:23:ea:70:
1b:ce:e2:28:78:10:da:c5:b4:a6:b1:16:13:98:77:0d:28:15:
f8:99:63:3c:72:de:63:1b:e3:60:03:3f:67:0f:92:f2:05:19:
68:bc:9e:38:1b:82:f0:95:8b:b3:88:59:a2:a6:b0:50:c5:3f:
ca:fb:e3:7e:03:ac:a1:5f:06:0d:9c:93:ca:69:1a:74:ee:26:
17:ef:a8:c2:18:59:29:a9:e4:39:62:bc:4e:b2:fd:96:51:40:
8d:26:4d:94:39:35:d3:63:51:8c:ba:06:2c:03:38:9f:12:46:
47:4d:45:b7:42:e6:18:42:ce:26:34:d1:6e:94:0a:9c:d4:f5:
be:ba:10:4f:bd:78:95:01:4b:8f:68:94:67:b2:5a:85:8f:cf:
5f:12:f0:dc:0d:58:38:e9:f6:29:ae:fa:5c:ae:14:e0:01:25:
ca:8e:7a:1e:18:68:70:4d:91:50:cd:49:49:88:cb:30:bd:b2:
8f:3a:cc:b0:8c:6d:f8:f5:42:bd:1b:b0:05:71:73:41:9a:ac:
99:b8:8c:37:74:65:cb:59:84:6b:7c:b2:9f:87:b4:5a:de:75:
94:94:d3:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocUCTSxsxOq07rl9gWO8W6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmMyMDQ5ZjIxOGI2ZmRhYmNhZDc1OTRjMjUyM2IyOGRh
NDc3YzEwHhcNMjUxMDI1MTcwMDA0WhcNMjUxMDI2MTcwMDA0WjAzMTEwLwYDVQQD
EyhiNzY1YzU2NjYxODk1MmQxYmEyYmQxMDYxZTdmNTM0ZTZlYWRmNzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ/FZRVaxkihmQW6wE5qtdP/vQMi
AF3yp/H/R5vYoUM6U+MGcoypOm7vSuu7fZTSbmp0byJTdZ6Nwl511qEDBAr1KgEV
lEzBIHzJ5F4K+VhwNpEvZ9ACRKB51gaCCq8ZJoGC+Ipk7NifWDIvzKwab04mNMNq
yB9aq+16ldqaEzSqsxuF1zh/efwQ4+wMUiSynR7ba0IpYyFNoVz0aa43iTnwR1Tm
9XX2qGJY5f8pvJ4gREiGLKFQPOyeYkOMiBEnBZRCrvdTL5SS9anQ6MnF6+QrcYCg
MiAiVZLqZm9ZO7NK9dufCdbq+rtXDf+lRU6rEWr6EQ+ZYQEnPoC+nati+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdlxWZhiVLRuivRBh5/U05urfcUMB8GA1UdIwQY
MBaAFKC8IEnyGLb9q8rXWUwlI7KNpHfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDIt
MTk5MTJhMGU0OTE4LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDItMTk5MTJhMGU0OTE4
LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr+TYWiv
IL44pCGrLlQYidtTHhzwmMR4mD0b1Nb3l75iI+pwG87iKHgQ2sW0prEWE5h3DSgV
+JljPHLeYxvjYAM/Zw+S8gUZaLyeOBuC8JWLs4hZoqawUMU/yvvjfgOsoV8GDZyT
ymkadO4mF++owhhZKankOWK8TrL9llFAjSZNlDk102NRjLoGLAM4nxJGR01Ft0Lm
GELOJjTRbpQKnNT1vroQT714lQFLj2iUZ7JahY/PXxLw3A1YOOn2Ka76XK4U4AEl
yo56HhhocE2RUM1JSYjLML2yjzrMsIxt+PVCvRuwBXFzQZqsmbiMN3Rly1mEa3yy
n4e0Wt51lJTTWA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 02:59:36 2025 by rpki-client