Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: FIzP2edxlL8Jl6oDqAUyF2fXpz2eNLNux8cUg9WXunQ=
Subject key identifier: B0:F8:39:7F:EB:60:F9:E1:4C:67:C3:26:CE:B1:14:AB:0F:D1:4B:C0
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 019A25535AD1DFF13EA1AC2ECB0FE1F2EF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 0D34
Signing time: Mon 27 Oct 2025 11:00:10 +0000
Manifest this update: Mon 27 Oct 2025 11:00:10 +0000
Manifest next update: Tue 28 Oct 2025 11:00:10 +0000
Files and hashes: 1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: Nsi3MXyKQUgPR/Oj3NRLiepV8Vab/srRG5YEncSsGRA=)
2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:5a:d1:df:f1:3e:a1:ac:2e:cb:0f:e1:f2:ef:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Oct 27 11:00:10 2025 GMT
Not After : Oct 28 11:00:10 2025 GMT
Subject: CN=b0f8397feb60f9e14c67c326ceb114ab0fd14bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:3b:5d:54:9b:40:ca:f2:0a:3f:e9:6c:e3:
90:28:48:b6:08:b2:56:ce:b5:76:d7:31:80:49:1c:
4c:0b:be:83:eb:43:fb:da:1e:c5:68:bb:8c:01:6a:
ad:1b:3d:f8:53:75:75:de:c2:b7:d6:3a:98:16:ab:
9f:f8:61:23:38:83:b3:ca:7e:13:fd:d5:b4:52:30:
96:ff:22:39:6d:d1:42:1c:df:56:ad:aa:fe:fa:72:
44:97:e8:fa:02:32:b8:13:b7:14:c6:5d:e8:f1:84:
3a:7f:35:8b:db:ea:83:b7:2a:36:68:b9:af:07:40:
11:48:fb:5f:20:c7:98:cf:d2:09:05:e0:e5:36:bc:
4d:5c:07:f8:2c:52:ed:54:b6:dd:b3:d6:8a:c9:05:
fc:1f:17:9d:d8:6f:a0:73:0b:a9:7d:5e:2c:40:87:
39:ae:8f:4f:6f:89:84:17:6d:96:e9:b5:a4:57:b5:
82:67:48:fc:4a:81:3b:cd:cc:27:39:7d:d3:ae:c8:
44:46:7f:09:23:6b:00:1f:46:e7:b6:d8:90:66:b7:
f2:9b:c5:c4:b1:9a:d2:e0:b7:32:b1:72:14:9e:da:
38:32:fc:37:39:10:08:b9:ca:3d:28:41:56:cb:6e:
75:96:31:af:17:5b:8a:c2:41:5e:08:72:05:85:e6:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:39:7F:EB:60:F9:E1:4C:67:C3:26:CE:B1:14:AB:0F:D1:4B:C0
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:43:fb:f4:76:40:2e:44:74:bc:22:70:05:85:54:10:27:b0:
56:76:18:39:f2:a2:84:61:3f:3a:f2:02:5a:58:34:2b:b2:51:
ee:0e:23:c0:c0:47:9d:b5:84:c1:04:dc:29:25:28:a6:79:94:
f7:6d:92:6f:46:9e:53:2f:b8:27:de:1f:bc:04:34:94:b1:c5:
ad:8a:9f:01:98:8d:cd:10:02:f6:56:15:43:7c:08:93:ff:33:
dc:48:2e:f3:ac:ea:05:60:29:5b:c3:43:aa:2a:71:00:e7:02:
36:31:85:94:51:3e:be:d9:ec:e9:8a:cb:7e:1d:90:93:d6:a8:
bf:fd:fd:70:bb:aa:0d:7c:54:58:a1:c0:15:46:a3:20:44:12:
2c:de:45:c0:4b:94:a0:da:a8:28:6c:78:8a:5f:49:35:51:72:
36:a6:54:77:d6:6d:03:c6:60:e2:31:ae:aa:1b:2e:8b:7c:1e:
6c:b1:1f:9e:b4:34:16:28:f2:f6:d8:b2:2d:f6:de:93:28:ac:
7b:46:65:dd:d8:80:a3:d1:d0:86:99:94:46:c3:97:88:14:b3:
ac:39:54:dc:13:a3:a5:05:96:07:d7:39:af:68:90:67:2e:6f:
cb:2e:0b:c0:1d:9c:b0:63:93:0d:a4:2c:a9:22:2e:61:5a:5b:
e2:b9:1c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU1rR3/E+oawuyw/h8u96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZWFkNWRlYjUzNTAwZjI1NDhhZTE4MTJjMDg3ZTMyYTQ3
ZmM4YjQwHhcNMjUxMDI3MTEwMDEwWhcNMjUxMDI4MTEwMDEwWjAzMTEwLwYDVQQD
EyhiMGY4Mzk3ZmViNjBmOWUxNGM2N2MzMjZjZWIxMTRhYjBmZDE0YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v07XVSbQMryCj/pbOOQKEi2CLJW
zrV21zGASRxMC76D60P72h7FaLuMAWqtGz34U3V13sK31jqYFquf+GEjOIOzyn4T
/dW0UjCW/yI5bdFCHN9Wrar++nJEl+j6AjK4E7cUxl3o8YQ6fzWL2+qDtyo2aLmv
B0ARSPtfIMeYz9IJBeDlNrxNXAf4LFLtVLbds9aKyQX8Hxed2G+gcwupfV4sQIc5
ro9Pb4mEF22W6bWkV7WCZ0j8SoE7zcwnOX3TrshERn8JI2sAH0bnttiQZrfym8XE
sZrS4LcysXIUnto4Mvw3ORAIuco9KEFWy251ljGvF1uKwkFeCHIFheYevQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD4OX/rYPnhTGfDJs6xFKsP0UvAMB8GA1UdIwQY
MBaAFDjq1d61NQDyVIrhgSwIfjKkf8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMt
ZDQ0NmYxZjgzYWU5LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMtZDQ0NmYxZjgzYWU5
LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1UP79HZA
LkR0vCJwBYVUECewVnYYOfKihGE/OvICWlg0K7JR7g4jwMBHnbWEwQTcKSUopnmU
922Sb0aeUy+4J94fvAQ0lLHFrYqfAZiNzRAC9lYVQ3wIk/8z3Egu86zqBWApW8ND
qipxAOcCNjGFlFE+vtns6YrLfh2Qk9aov/39cLuqDXxUWKHAFUajIEQSLN5FwEuU
oNqoKGx4il9JNVFyNqZUd9ZtA8Zg4jGuqhsui3webLEfnrQ0Fijy9tiyLfbekyis
e0Zl3diAo9HQhpmURsOXiBSzrDlU3BOjpQWWB9c5r2iQZy5vyy4LwB2csGOTDaQs
qSIuYVpb4rkcbg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:31:44 2025 by rpki-client