Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier: ZYHnx0TyUN05kwooj2QqeZQQaRFRAOzJzBDZ981rZS0=
Subject key identifier: 01:F7:D8:61:D1:B8:C7:C5:15:EA:F5:3B:D6:6F:14:38:FC:E9:44:5B
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 019A1D9A4798554A65B2F2A53097505BB661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 23:00:41 +0000
Manifest this update: Sat 25 Oct 2025 23:00:41 +0000
Manifest next update: Sun 26 Oct 2025 23:00:41 +0000
Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: kcwFq1ySvZOoHc1h1xoOL8UWQ0B2R1FCise4YoDtdHY=)
2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:9a:47:98:55:4a:65:b2:f2:a5:30:97:50:5b:b6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Oct 25 23:00:41 2025 GMT
Not After : Oct 26 23:00:41 2025 GMT
Subject: CN=01f7d861d1b8c7c515eaf53bd66f1438fce9445b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:e6:10:36:77:ff:5a:d3:67:66:ef:4d:b8:
b2:05:10:83:0f:9c:bf:82:3e:51:0c:76:2d:f5:51:
33:2a:a6:82:a7:46:64:22:47:aa:7c:a1:2a:22:62:
67:a4:e3:c4:4b:ee:3a:23:ab:58:f6:fa:97:1c:e6:
37:bb:f9:b1:0d:e5:3a:ff:28:cc:68:aa:24:5c:61:
7d:e8:7f:1e:87:f9:67:05:44:c3:dc:6c:46:73:9d:
3f:55:92:2e:d0:1a:bf:1f:64:91:6c:03:0a:b9:73:
db:8a:a1:08:b4:f4:a3:f9:72:c5:94:29:18:45:2c:
3f:84:29:3d:a9:76:97:d2:f8:54:13:67:dc:cd:e4:
82:0f:a6:1d:94:03:a8:09:8a:b7:1b:c1:d4:70:cb:
57:96:8c:7c:78:bd:4f:9b:6a:9c:2b:00:5e:c4:92:
74:45:61:3c:ef:a1:57:96:f2:7a:81:3c:f6:a3:68:
03:43:de:e0:59:78:86:8b:d4:50:e2:e0:9b:ed:9c:
19:72:60:98:51:df:3c:30:2c:c2:72:44:3a:06:15:
7b:49:7e:ef:9f:36:3c:c3:6d:e8:f0:57:06:f8:20:
ed:5d:fc:cd:0a:c7:e4:26:c0:3a:31:21:5a:cf:53:
20:3e:1b:8f:9e:b8:6e:45:b8:4a:91:e5:c4:07:8e:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:D8:61:D1:B8:C7:C5:15:EA:F5:3B:D6:6F:14:38:FC:E9:44:5B
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cf:26:9b:81:4c:ab:46:46:d1:a4:4e:f3:c2:69:50:e3:a5:
41:77:b3:6c:cc:51:91:5c:a9:c0:ec:69:62:d4:fa:b8:46:28:
b7:61:5b:20:65:cb:df:02:f6:c3:e8:e2:c0:cc:e8:16:c4:51:
ce:a1:7e:18:04:b1:44:c9:77:6c:75:48:5c:d7:0e:d5:d5:28:
5a:44:ac:9c:7c:cc:b1:57:92:21:71:7a:8f:ca:cf:e7:82:f6:
f1:03:01:c6:4e:d0:c8:73:e1:4e:6e:54:21:44:18:e5:58:4c:
b8:29:dd:d1:63:8f:be:13:f6:02:c3:3c:24:38:19:80:92:87:
85:ca:dc:2b:5a:89:c1:dd:c9:87:d5:53:43:dc:9c:7e:ba:a4:
d4:59:be:c8:8d:d3:9c:69:1a:00:95:bb:4d:6a:be:de:a8:a9:
8c:0b:f3:6a:53:04:a7:e2:82:74:b1:77:c3:ae:50:e2:8b:08:
36:4f:95:79:eb:4d:92:84:3e:d2:81:42:aa:0c:a1:71:5d:a3:
fc:1a:bd:b4:e5:9c:20:89:9b:80:73:e8:38:3d:90:c9:c0:8f:
06:c2:74:1c:13:5d:9f:87:31:7c:f9:95:01:d0:f3:df:46:65:
4d:fb:08:7d:3a:86:72:3d:37:1d:06:73:41:47:eb:37:5e:37:
b1:74:fa:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodmkeYVUplsvKlMJdQW7ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTk3NWFkNTdjZWI3NjVhZDk0OGJlNWViNGMzODJkYzc0
ODQ0YzAwHhcNMjUxMDI1MjMwMDQxWhcNMjUxMDI2MjMwMDQxWjAzMTEwLwYDVQQD
EygwMWY3ZDg2MWQxYjhjN2M1MTVlYWY1M2JkNjZmMTQzOGZjZTk0NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznPmEDZ3/1rTZ2bvTbiyBRCDD5y/
gj5RDHYt9VEzKqaCp0ZkIkeqfKEqImJnpOPES+46I6tY9vqXHOY3u/mxDeU6/yjM
aKokXGF96H8eh/lnBUTD3GxGc50/VZIu0Bq/H2SRbAMKuXPbiqEItPSj+XLFlCkY
RSw/hCk9qXaX0vhUE2fczeSCD6YdlAOoCYq3G8HUcMtXlox8eL1Pm2qcKwBexJJ0
RWE876FXlvJ6gTz2o2gDQ97gWXiGi9RQ4uCb7ZwZcmCYUd88MCzCckQ6BhV7SX7v
nzY8w23o8FcG+CDtXfzNCsfkJsA6MSFaz1MgPhuPnrhuRbhKkeXEB47t0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH32GHRuMfFFer1O9ZvFDj86URbMB8GA1UdIwQY
MBaAFDkZda1XzrdlrZSL5etMOC3HSETAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQt
MDUwMjA0NTMyMjg2LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQtMDUwMjA0NTMyMjg2
LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOs8mm4FM
q0ZG0aRO88JpUOOlQXezbMxRkVypwOxpYtT6uEYot2FbIGXL3wL2w+jiwMzoFsRR
zqF+GASxRMl3bHVIXNcO1dUoWkSsnHzMsVeSIXF6j8rP54L28QMBxk7QyHPhTm5U
IUQY5VhMuCnd0WOPvhP2AsM8JDgZgJKHhcrcK1qJwd3Jh9VTQ9ycfrqk1Fm+yI3T
nGkaAJW7TWq+3qipjAvzalMEp+KCdLF3w65Q4osINk+VeetNkoQ+0oFCqgyhcV2j
/Bq9tOWcIImbgHPoOD2QycCPBsJ0HBNdn4cxfPmVAdDz30ZlTfsIfTqGcj03HQZz
QUfrN143sXT6YA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 03:22:39 2025 by rpki-client