Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: otOu3QDy54tj9LaIQ0Gx+hOAaOraOLcteW+FW/l3+iw=
Subject key identifier: B6:FF:38:F8:96:CD:93:44:0A:2F:8B:5B:87:08:9B:FD:39:CA:1C:EA
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 0199E0E22AEEF6432F833FD76204DF5FFDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 16D6
Signing time: Tue 14 Oct 2025 04:02:22 +0000
Manifest this update: Tue 14 Oct 2025 04:02:22 +0000
Manifest next update: Wed 15 Oct 2025 04:02:22 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: CDcElATrZH0ZaRP8EB5MZ8oVMfoSD955o9MOA7G7KSE=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 04:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e0:e2:2a:ee:f6:43:2f:83:3f:d7:62:04:df:5f:fd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Oct 14 04:02:22 2025 GMT
Not After : Oct 15 04:02:22 2025 GMT
Subject: CN=b6ff38f896cd93440a2f8b5b87089bfd39ca1cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:20:6c:23:b3:7a:68:d7:e2:5c:17:2e:0d:
19:05:20:26:c4:9d:79:4e:97:56:d5:42:51:7a:ee:
81:13:75:8f:e6:6b:2d:ac:41:8b:1e:5c:f0:c0:f3:
6b:57:4b:c5:b6:37:cc:57:1f:96:c2:8e:2b:97:27:
b7:cc:7c:53:3b:05:13:32:35:e8:ac:b0:6b:ae:55:
50:ce:00:bb:b1:b6:8d:c4:96:4a:41:e5:42:f8:02:
54:af:a8:bc:32:48:a9:fe:53:3b:21:6d:d2:a3:80:
56:2d:a3:62:46:9b:f4:f0:84:7d:d4:00:d6:91:f6:
f2:9c:63:ab:82:17:45:53:22:12:de:94:70:13:fb:
9d:4f:7b:01:e4:9e:1a:e2:a8:da:cd:d8:c7:00:64:
95:66:dd:53:7c:1c:c3:79:12:de:78:30:fb:92:15:
37:b3:d0:9a:b4:7e:bd:e9:ac:71:ff:9f:18:01:1c:
37:2c:63:1a:3e:c9:c2:4a:99:54:55:b1:86:be:fd:
af:40:31:98:c1:cb:76:2a:bc:57:cd:3a:6a:9f:6d:
d6:74:1c:24:81:34:4b:5a:46:07:d6:9b:02:36:f7:
60:c5:a5:70:bc:2c:f5:07:ab:e0:e6:51:70:c0:37:
7f:0f:71:98:19:15:7a:e9:a3:18:74:a5:32:54:a0:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:38:F8:96:CD:93:44:0A:2F:8B:5B:87:08:9B:FD:39:CA:1C:EA
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:06:65:9a:ad:be:f8:0c:d0:ee:9a:08:87:17:4b:71:99:57:
d6:91:ae:76:a4:15:05:8e:b2:ae:f9:0f:2d:21:fd:7d:89:7f:
f2:03:44:de:ca:54:9d:71:1d:09:cb:d8:d5:38:15:85:2d:b2:
40:05:ae:bc:f7:ca:d9:ed:51:f3:d5:b6:9c:fe:5a:9b:ac:e5:
37:8b:33:36:85:86:5c:77:63:3e:f8:39:7a:f8:6a:b2:11:2e:
ff:26:b3:7f:e6:bf:5f:37:94:7f:8b:af:70:0e:14:d7:c1:a0:
f2:ab:ba:bd:fd:a8:b6:67:79:10:45:f2:ef:ea:19:17:bb:74:
21:98:f7:ea:ac:61:37:64:1a:7a:c4:e1:3b:c6:92:b6:15:02:
df:c3:08:41:c3:8f:2d:87:c7:4e:f3:32:01:30:36:2f:58:b0:
48:5a:b6:dd:44:a3:54:0c:0f:a9:eb:de:5b:76:00:ee:37:e4:
a0:a0:ef:0b:65:51:5b:e9:b2:8c:a4:f7:1d:5f:52:9d:fb:5f:
dd:70:f8:32:41:59:ca:d0:38:d4:eb:c7:67:b5:b6:1f:37:7c:
39:80:68:e7:46:89:ce:fe:64:6c:66:fe:4a:a7:b2:e1:11:36:
0f:d5:b5:65:f9:f4:1f:4a:19:93:b6:54:62:bd:d8:21:50:8e:
0b:24:8d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZng4iru9kMvgz/XYgTfX/3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4
YmRhY2YwHhcNMjUxMDE0MDQwMjIyWhcNMjUxMDE1MDQwMjIyWjAzMTEwLwYDVQQD
EyhiNmZmMzhmODk2Y2Q5MzQ0MGEyZjhiNWI4NzA4OWJmZDM5Y2ExY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK0gbCOzemjX4lwXLg0ZBSAmxJ15
TpdW1UJReu6BE3WP5mstrEGLHlzwwPNrV0vFtjfMVx+Wwo4rlye3zHxTOwUTMjXo
rLBrrlVQzgC7sbaNxJZKQeVC+AJUr6i8Mkip/lM7IW3So4BWLaNiRpv08IR91ADW
kfbynGOrghdFUyIS3pRwE/udT3sB5J4a4qjazdjHAGSVZt1TfBzDeRLeeDD7khU3
s9CatH696axx/58YARw3LGMaPsnCSplUVbGGvv2vQDGYwct2KrxXzTpqn23WdBwk
gTRLWkYH1psCNvdgxaVwvCz1B6vg5lFwwDd/D3GYGRV66aMYdKUyVKCbSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb/OPiWzZNECi+LW4cIm/05yhzqMB8GA1UdIwQY
MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt
NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm
LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAZlmq2+
+AzQ7poIhxdLcZlX1pGudqQVBY6yrvkPLSH9fYl/8gNE3spUnXEdCcvY1TgVhS2y
QAWuvPfK2e1R89W2nP5am6zlN4szNoWGXHdjPvg5evhqshEu/yazf+a/XzeUf4uv
cA4U18Gg8qu6vf2otmd5EEXy7+oZF7t0IZj36qxhN2QaesThO8aSthUC38MIQcOP
LYfHTvMyATA2L1iwSFq23USjVAwPqeveW3YA7jfkoKDvC2VRW+myjKT3HV9Snftf
3XD4MkFZytA41OvHZ7W2Hzd8OYBo50aJzv5kbGb+Sqey4RE2D9W1Zfn0H0oZk7ZU
Yr3YIVCOCySNVA==
-----END CERTIFICATE-----
Generated at Tue Oct 14 11:26:02 2025 by rpki-client