Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: TwmLyf8ELh9ztESiwRaPIwZbVqcGZZOt0+uubmyJeso=
Subject key identifier: C9:73:CB:81:80:64:B8:35:E0:89:C5:A0:0C:CC:41:AA:4C:E8:DB:32
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019A066D63EDFA60680D6EF0BA7C9203F2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 16EE
Signing time: Tue 21 Oct 2025 11:00:23 +0000
Manifest this update: Tue 21 Oct 2025 11:00:23 +0000
Manifest next update: Wed 22 Oct 2025 11:00:23 +0000
Files and hashes: 1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=)
2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: 0Gqe3BgX/Poz2TAofYR5YWRcKcr3qOjK80sySrGttOM=)
3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:6d:63:ed:fa:60:68:0d:6e:f0:ba:7c:92:03:f2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Oct 21 11:00:23 2025 GMT
Not After : Oct 22 11:00:23 2025 GMT
Subject: CN=c973cb818064b835e089c5a00ccc41aa4ce8db32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:cc:3a:90:d6:93:3c:a3:97:a7:56:fe:3d:
3d:66:eb:ca:e6:00:0c:40:0f:79:f9:fa:96:55:a9:
e7:bb:4f:e2:2a:9b:7d:65:52:74:3f:fd:d1:00:70:
40:6e:60:ac:b2:4d:91:14:17:d6:02:07:d5:a1:aa:
45:36:1c:21:9e:da:fd:3b:7f:5b:08:af:d1:27:b6:
68:e6:70:d2:7f:ec:73:c0:c9:6f:7a:c6:06:84:ed:
fb:82:bb:66:cf:04:88:fc:fd:fd:9a:c5:a2:fd:74:
5b:f0:d9:b1:a0:4d:8d:37:c8:62:52:91:7a:2e:9b:
9b:c7:a6:a3:81:90:b3:26:70:bb:88:ae:ca:44:bd:
b6:6e:68:f2:a6:27:77:42:51:82:86:e1:40:59:ee:
63:29:9f:f4:e8:ba:a8:4f:a1:7b:66:63:18:29:7c:
6d:d0:e1:be:f8:37:a9:38:03:8d:e9:e9:5d:7a:f3:
b1:f8:85:1e:c6:36:ff:81:ef:cc:9d:8b:97:fa:56:
f8:b9:7a:37:f4:13:ff:e7:50:5e:11:8e:7e:7d:a6:
bb:3f:f0:d4:98:f6:b0:6d:61:cf:6a:5a:4b:d0:a1:
ce:5b:a1:1a:1d:45:0e:54:33:ea:13:4b:f4:9e:a6:
cf:5d:87:2e:49:db:76:ad:4a:f4:2b:fd:df:d1:d9:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:CB:81:80:64:B8:35:E0:89:C5:A0:0C:CC:41:AA:4C:E8:DB:32
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a7:fa:d8:75:49:b8:97:b9:9b:6b:d3:ed:32:15:18:d4:ae:
22:d5:05:d0:d0:e8:c8:b2:69:2a:61:68:98:fe:5e:4c:f8:5b:
f7:ac:81:6b:8b:56:6f:76:10:cb:86:00:09:9b:c6:ae:2c:6e:
ae:f0:d3:16:9d:85:bf:9e:c0:f2:a4:4b:4b:05:f2:b3:a3:2b:
bf:08:b3:6a:fc:8c:9d:1f:6a:f2:55:c5:c9:d4:4c:f3:fc:78:
09:61:dc:3a:8b:e6:06:e3:4b:72:1b:05:02:0a:f1:89:73:95:
c5:99:ca:b6:7c:61:cd:46:36:d0:f8:8e:c1:46:c4:73:3a:48:
d4:38:e1:f4:c3:84:8d:32:51:79:b9:03:60:5d:3c:64:6e:6c:
b8:c9:99:55:b8:cd:f8:ae:00:ab:14:68:a8:8f:cb:99:89:3b:
95:db:36:4a:33:5a:72:00:5b:dc:98:4b:d0:9d:f3:cc:ad:0d:
48:7d:92:56:a0:1d:24:9e:91:c5:57:aa:a1:0f:b1:22:ca:ad:
56:7a:bc:b4:51:9a:f6:6a:d0:4f:10:ef:d6:60:fc:75:cc:ad:
b0:56:eb:c5:29:e4:0e:4a:54:a1:6f:a2:50:7b:ba:2d:41:9d:
29:29:41:6d:34:1a:a6:a6:e2:ff:28:50:e5:2a:3b:ec:c5:8c:
da:3b:6d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoGbWPt+mBoDW7wunySA/LqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGVmN2ZmNWI1NGY1M2ZjZjIzMTJhYmUyZWMzZjU5NThi
YTE0MjUwHhcNMjUxMDIxMTEwMDIzWhcNMjUxMDIyMTEwMDIzWjAzMTEwLwYDVQQD
EyhjOTczY2I4MTgwNjRiODM1ZTA4OWM1YTAwY2NjNDFhYTRjZThkYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN7MOpDWkzyjl6dW/j09ZuvK5gAM
QA95+fqWVannu0/iKpt9ZVJ0P/3RAHBAbmCssk2RFBfWAgfVoapFNhwhntr9O39b
CK/RJ7Zo5nDSf+xzwMlvesYGhO37grtmzwSI/P39msWi/XRb8NmxoE2NN8hiUpF6
Lpubx6ajgZCzJnC7iK7KRL22bmjypid3QlGChuFAWe5jKZ/06LqoT6F7ZmMYKXxt
0OG++DepOAON6eldevOx+IUexjb/ge/MnYuX+lb4uXo39BP/51BeEY5+faa7P/DU
mPawbWHPalpL0KHOW6EaHUUOVDPqE0v0nqbPXYcuSdt2rUr0K/3f0dnLVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlzy4GAZLg14InFoAzMQapM6NsyMB8GA1UdIwQY
MBaAFDgO9/9bVPU/zyMSq+LsP1lYuhQlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEt
ZjA0Y2MxYzIzMGNmLzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEtZjA0Y2MxYzIzMGNm
LzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKf62HVJ
uJe5m2vT7TIVGNSuItUF0NDoyLJpKmFomP5eTPhb96yBa4tWb3YQy4YACZvGrixu
rvDTFp2Fv57A8qRLSwXys6MrvwizavyMnR9q8lXFydRM8/x4CWHcOovmBuNLchsF
AgrxiXOVxZnKtnxhzUY20PiOwUbEczpI1Djh9MOEjTJRebkDYF08ZG5suMmZVbjN
+K4AqxRoqI/LmYk7lds2SjNacgBb3JhL0J3zzK0NSH2SVqAdJJ6RxVeqoQ+xIsqt
Vnq8tFGa9mrQTxDv1mD8dcytsFbrxSnkDkpUoW+iUHu6LUGdKSlBbTQapqbi/yhQ
5So77MWM2jtt7w==
-----END CERTIFICATE-----
Generated at Tue Oct 21 17:32:07 2025 by rpki-client