Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: II7tdVl4pMeU5jI0ZBrWaVw4V/uV2nBE8P/9G3emX78=
Subject key identifier: 26:3E:DC:B0:AE:90:4D:55:33:D2:51:BD:C5:A5:00:56:93:D6:6D:98
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 019A15A9BBA28DB213D7A7569104FBF590E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 10:00:36 +0000
Manifest this update: Fri 24 Oct 2025 10:00:36 +0000
Manifest next update: Sat 25 Oct 2025 10:00:36 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: AcXvvGULSnIkUtRnXdext1mS+6EA+kDOFqjpuRhQlM4=)
2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:a9:bb:a2:8d:b2:13:d7:a7:56:91:04:fb:f5:90:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Oct 24 10:00:36 2025 GMT
Not After : Oct 25 10:00:36 2025 GMT
Subject: CN=263edcb0ae904d5533d251bdc5a5005693d66d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:69:67:ac:d7:b4:e9:2e:0e:23:4f:e4:01:
0c:af:26:eb:2d:e1:1a:82:85:c0:95:52:55:83:36:
6d:c9:67:8b:ab:96:2e:e6:4b:7d:23:67:c5:64:5b:
49:b9:1e:ad:3c:45:a7:05:77:09:d0:5a:ac:74:ef:
f6:e2:de:9a:8c:ca:bf:2a:11:67:ab:0f:90:94:5e:
19:e0:73:0c:ec:c3:00:55:1b:c0:a7:ff:3f:84:28:
b5:37:8f:c4:44:3c:68:2f:cd:59:31:5c:60:d2:61:
e2:91:4c:72:41:2e:f8:a7:4a:21:1d:63:d7:30:56:
44:4c:85:09:4f:e0:fe:b8:04:89:f8:b2:7a:0c:ea:
67:3d:16:c8:73:da:b4:3d:43:cb:69:48:3c:3d:e9:
fd:e6:b9:c9:99:57:95:bd:4b:fb:24:59:dc:e9:10:
f9:45:8a:8c:81:07:42:e1:0d:50:16:fb:6b:c7:74:
50:b1:90:be:b2:05:9a:92:02:3f:98:8d:7e:de:00:
9d:5f:53:b1:0b:14:3a:ff:62:0d:bb:d7:2d:79:bb:
1b:1e:3b:02:01:3b:72:84:a5:5e:4f:a7:d0:55:9e:
38:4e:7b:bf:80:01:0d:ff:e0:96:c8:3b:ed:50:d7:
10:9d:53:67:60:99:7a:09:0d:85:50:71:cb:f1:2a:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:DC:B0:AE:90:4D:55:33:D2:51:BD:C5:A5:00:56:93:D6:6D:98
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:80:02:7d:d7:55:9c:ec:37:4c:97:79:c5:f4:ca:ae:dd:38:
bd:f8:db:c4:86:ba:8e:0e:9e:0d:44:7a:8b:3b:0f:b2:9d:9a:
4c:89:96:08:e0:04:6c:23:4f:3e:54:8c:65:c2:a0:9a:13:46:
7a:b5:af:1e:ac:7a:df:28:8e:d0:68:84:1c:0a:d1:09:be:44:
67:cc:08:ac:96:97:78:83:17:97:58:86:ed:0f:a9:22:48:03:
1a:e8:6a:64:74:fd:c4:12:1d:26:da:80:e0:b7:0e:a7:ca:84:
0d:d5:f6:64:29:0f:e9:99:86:9a:8b:b3:05:64:11:fa:08:61:
74:d3:86:3e:8e:03:e8:1e:d1:5a:b7:74:d1:42:88:fa:27:bf:
c1:30:2c:70:16:d3:7c:4e:e0:b0:1d:17:d1:76:76:c2:c4:77:
b3:91:29:d5:35:68:7d:1c:f8:a4:bb:ce:76:79:5e:10:1a:7d:
bc:44:30:d7:13:c9:36:cc:3a:5b:d7:1b:88:7a:7f:af:df:0c:
1c:88:c4:8d:61:cb:e3:dd:56:e1:26:5a:1a:36:4e:45:0d:65:
cc:06:ff:8c:92:4e:79:27:14:8a:11:3c:83:a8:fd:4c:13:35:
17:f9:f2:22:8f:ae:45:25:77:ee:7c:82:c8:6f:27:46:58:26:
66:03:63:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoVqbuijbIT16dWkQT79ZDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDNhZWMyMmY4MTljZjAxZjJjNjM2MzAzNWQ5N2Y4ZTBl
MzgyMzMwHhcNMjUxMDI0MTAwMDM2WhcNMjUxMDI1MTAwMDM2WjAzMTEwLwYDVQQD
EygyNjNlZGNiMGFlOTA0ZDU1MzNkMjUxYmRjNWE1MDA1NjkzZDY2ZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum5pZ6zXtOkuDiNP5AEMrybrLeEa
goXAlVJVgzZtyWeLq5Yu5kt9I2fFZFtJuR6tPEWnBXcJ0FqsdO/24t6ajMq/KhFn
qw+QlF4Z4HMM7MMAVRvAp/8/hCi1N4/ERDxoL81ZMVxg0mHikUxyQS74p0ohHWPX
MFZETIUJT+D+uASJ+LJ6DOpnPRbIc9q0PUPLaUg8Pen95rnJmVeVvUv7JFnc6RD5
RYqMgQdC4Q1QFvtrx3RQsZC+sgWakgI/mI1+3gCdX1OxCxQ6/2INu9ctebsbHjsC
ATtyhKVeT6fQVZ44Tnu/gAEN/+CWyDvtUNcQnVNnYJl6CQ2FUHHL8So47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY+3LCukE1VM9JRvcWlAFaT1m2YMB8GA1UdIwQY
MBaAFNZDrsIvgZzwHyxjYwNdl/jg44IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYt
ZjZmMzIzZmQ5NmUwLzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYtZjZmMzIzZmQ5NmUw
LzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4ACfddV
nOw3TJd5xfTKrt04vfjbxIa6jg6eDUR6izsPsp2aTImWCOAEbCNPPlSMZcKgmhNG
erWvHqx63yiO0GiEHArRCb5EZ8wIrJaXeIMXl1iG7Q+pIkgDGuhqZHT9xBIdJtqA
4LcOp8qEDdX2ZCkP6ZmGmouzBWQR+ghhdNOGPo4D6B7RWrd00UKI+ie/wTAscBbT
fE7gsB0X0XZ2wsR3s5Ep1TVofRz4pLvOdnleEBp9vEQw1xPJNsw6W9cbiHp/r98M
HIjEjWHL491W4SZaGjZORQ1lzAb/jJJOeScUihE8g6j9TBM1F/nyIo+uRSV37nyC
yG8nRlgmZgNjrQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:54:09 2025 by rpki-client