Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: hkys2WPruXKN6zFsz+UpsquXZ+uKKD6GTRhstQU4OJE=
Subject key identifier: A9:33:80:B4:D9:86:BB:81:CF:91:41:71:97:19:33:68:81:CF:1A:8D
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 019A7293B393D223A912F7D722F1DE4ED496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 08BB
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: 75LK0aL52naimh1x42NbpBoOy-w.roa (hash: +e/KEGbv2gq7/ZZoiVRRifw/ABGsD3UfOMxXZbs5gMo=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: aoybrQYJKu8MCgklJNh3e2HdG5E7OviX4CY5e/j+THE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b3:93:d2:23:a9:12:f7:d7:22:f1:de:4e:d4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=a93380b4d986bb81cf9141719719336881cf1a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:22:73:e6:d3:9e:18:c1:d4:63:bc:7f:10:
22:5f:66:d1:6a:86:a1:fd:4f:1e:d7:46:b9:15:39:
d2:23:8c:77:10:96:57:9f:cf:f3:db:1a:71:87:3d:
0b:d9:a9:3f:fe:ac:14:03:49:45:ae:4d:b1:b7:09:
c0:7d:75:14:b8:2b:96:45:1c:b7:53:1e:41:6e:8f:
b5:33:a1:49:f3:14:eb:be:54:17:a4:b7:43:04:fa:
ba:3a:1f:3b:3e:34:44:c7:b0:dc:5c:9d:41:91:7b:
12:4d:da:63:09:0c:2a:d4:37:b6:b4:19:44:ce:ec:
b3:79:f6:2a:57:73:2d:c9:3e:5e:88:ed:77:63:f6:
ba:49:c6:60:c4:89:9a:1e:d9:66:58:2e:7e:1b:71:
14:5a:4e:61:40:1c:87:57:2c:53:b6:b6:76:4b:95:
5a:bc:c2:92:e1:cc:d0:c0:04:15:55:08:92:0a:19:
8d:53:f9:bc:c6:75:7a:d5:b5:b0:db:92:27:36:a5:
0a:b4:53:e2:8d:78:98:6b:bf:0c:a5:90:95:4e:72:
a2:5e:f7:4a:88:28:08:66:c8:7a:84:cb:13:e2:4d:
f6:41:9e:ee:20:b7:f7:09:b4:d5:b4:3d:97:dd:99:
f8:31:cf:c8:a3:10:75:11:8f:21:e6:a7:56:3c:e4:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:33:80:B4:D9:86:BB:81:CF:91:41:71:97:19:33:68:81:CF:1A:8D
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3c:a1:75:55:93:ee:05:56:73:9b:e1:37:a9:23:df:51:2f:
97:9d:4f:e4:14:a2:64:3b:46:03:19:ea:79:98:55:57:7c:0f:
63:11:53:10:97:1f:7a:68:b7:27:dd:fc:b8:3f:dd:e0:3c:c0:
aa:47:52:02:d9:0b:22:8e:74:3d:fa:bf:7d:87:0b:55:84:15:
e8:7f:06:c4:33:46:13:4b:b1:cf:71:d0:c8:a6:c4:e5:51:52:
ec:61:98:30:26:76:8a:df:35:27:3e:9a:04:9a:49:f6:ad:8b:
0c:4a:1b:e4:cd:73:a1:ab:9a:3a:e6:2a:53:27:3a:2e:3a:4a:
d1:d4:10:80:0f:ba:d0:f0:9b:5b:e3:b1:e3:65:07:44:81:05:
07:e5:32:19:8f:0c:f8:ba:dc:38:5f:0b:30:d0:4e:b6:68:c0:
38:f6:01:b4:75:7b:9d:1f:d1:c8:65:48:27:3a:c2:e3:29:42:
57:52:d8:e3:4f:21:31:fc:f4:f5:39:a9:d2:0b:fa:b7:4d:f3:
8e:51:21:7a:4d:45:24:16:fb:61:e1:ec:9c:7e:bb:f7:60:21:
5e:9e:94:a2:d2:45:3d:bb:95:4f:58:c9:c5:4a:4b:ba:45:27:
a8:b5:b8:7b:f4:c2:01:9f:72:e0:3f:27:ff:e2:f4:6e:e0:f9:
18:87:01:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk7OT0iOpEvfXIvHeTtSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi
NjNmNWEwHhcNMjUxMTExMTEwMTEzWhcNMjUxMTEyMTEwMTEzWjAzMTEwLwYDVQQD
EyhhOTMzODBiNGQ5ODZiYjgxY2Y5MTQxNzE5NzE5MzM2ODgxY2YxYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNIic+bTnhjB1GO8fxAiX2bRaoah
/U8e10a5FTnSI4x3EJZXn8/z2xpxhz0L2ak//qwUA0lFrk2xtwnAfXUUuCuWRRy3
Ux5Bbo+1M6FJ8xTrvlQXpLdDBPq6Oh87PjREx7DcXJ1BkXsSTdpjCQwq1De2tBlE
zuyzefYqV3MtyT5eiO13Y/a6ScZgxImaHtlmWC5+G3EUWk5hQByHVyxTtrZ2S5Va
vMKS4czQwAQVVQiSChmNU/m8xnV61bWw25InNqUKtFPijXiYa78MpZCVTnKiXvdK
iCgIZsh6hMsT4k32QZ7uILf3CbTVtD2X3Zn4Mc/IoxB1EY8h5qdWPOSJfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkzgLTZhruBz5FBcZcZM2iBzxqNMB8GA1UdIwQY
MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt
M2I3YzEyNjcyNWQ1LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1
LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETyhdVWT
7gVWc5vhN6kj31Evl51P5BSiZDtGAxnqeZhVV3wPYxFTEJcfemi3J938uD/d4DzA
qkdSAtkLIo50Pfq/fYcLVYQV6H8GxDNGE0uxz3HQyKbE5VFS7GGYMCZ2it81Jz6a
BJpJ9q2LDEob5M1zoauaOuYqUyc6LjpK0dQQgA+60PCbW+Ox42UHRIEFB+UyGY8M
+LrcOF8LMNBOtmjAOPYBtHV7nR/RyGVIJzrC4ylCV1LY408hMfz09Tmp0gv6t03z
jlEhek1FJBb7YeHsnH6792AhXp6UotJFPbuVT1jJxUpLukUnqLW4e/TCAZ9y4D8n
/+L0buD5GIcByA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:20 2025 by rpki-client