Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: yOnLgySE0f7D9ogX1mNd3HI4vpDWocGxoIm9ayWLhis=
Subject key identifier: DE:7F:9A:6E:F2:8C:03:A2:64:FC:EA:C9:0F:B8:27:24:27:14:A6:76
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 019A1EAD6828BA7B3AF439473BA15E19FC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0692
Signing time: Sun 26 Oct 2025 04:01:11 +0000
Manifest this update: Sun 26 Oct 2025 04:01:11 +0000
Manifest next update: Mon 27 Oct 2025 04:01:11 +0000
Files and hashes: 1: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (hash: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: 3UUq9k5DWovdvL/WtxwdAJCXT3tClFu4+zbUDm05rUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:68:28:ba:7b:3a:f4:39:47:3b:a1:5e:19:fc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Oct 26 04:01:11 2025 GMT
Not After : Oct 27 04:01:11 2025 GMT
Subject: CN=de7f9a6ef28c03a264fceac90fb827242714a676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:fb:35:a3:50:94:67:67:fe:21:3b:5e:f8:
20:73:c0:cf:60:26:23:cb:08:5c:cd:48:9e:3f:83:
61:bd:ac:d1:7b:34:18:30:82:f0:9b:87:df:27:1c:
2d:30:e4:02:71:b9:a9:06:c5:45:d9:f9:db:88:60:
84:96:f7:c4:5c:8d:52:00:4b:28:ad:ad:75:b6:05:
1e:b6:a8:bd:9e:21:81:4a:23:88:b7:2d:43:0e:78:
c4:ad:85:57:5b:12:7e:c3:eb:0a:aa:7b:e6:d7:17:
7a:3d:fc:2f:df:6d:be:ad:9f:e1:d3:40:96:c8:55:
05:e1:68:a0:0d:d1:3e:5a:bc:c7:b2:59:73:16:c1:
a4:3f:0f:37:4e:f3:b1:b1:7b:c2:e5:0e:2b:46:14:
68:48:6a:d3:ba:e1:f6:d5:e9:89:b2:d2:d7:89:78:
d9:6f:32:40:1d:d7:cd:cc:47:b1:03:c0:29:65:ed:
f8:5c:70:4b:92:5a:c3:c9:a2:32:d9:c7:f0:7a:ca:
37:9d:a3:fb:0e:ad:0b:9c:32:31:71:26:3f:76:fa:
0a:30:3e:74:a7:26:71:78:0e:fd:0a:87:13:f5:8b:
bb:ae:ba:50:05:e0:1c:4c:bd:36:97:24:e0:9e:44:
b4:9f:f7:96:62:40:8f:0f:94:a9:d3:ab:ff:87:16:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7F:9A:6E:F2:8C:03:A2:64:FC:EA:C9:0F:B8:27:24:27:14:A6:76
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a9:10:51:86:0a:9b:96:b3:72:80:61:f1:11:8a:6f:a8:1f:
34:13:87:d9:a3:d4:57:d3:16:75:15:47:da:59:0b:f8:ac:cb:
8c:0d:73:02:7a:e0:60:eb:fa:3d:63:9f:c3:5a:c7:47:51:61:
00:3e:03:11:62:4a:90:c8:a0:32:a2:b9:e4:27:a7:ed:f1:73:
22:02:10:90:ad:62:1a:47:c9:17:54:e0:c7:72:6c:7e:1e:4e:
d3:31:82:5d:68:f9:49:63:5a:ac:84:07:6d:bc:c5:7d:d4:9f:
2c:78:55:55:f6:62:15:65:31:2c:c0:12:d9:c0:e6:95:18:88:
b5:40:24:8b:9f:7c:ae:83:9d:d4:b3:fd:d5:43:8d:bd:dd:f3:
f0:ad:b1:cc:71:af:48:fd:ed:75:0e:88:0b:de:db:3b:15:a7:
64:4f:66:48:bc:cd:28:23:04:5b:20:ca:90:3d:ae:7d:9e:66:
31:63:2d:8c:b8:12:31:d6:b5:31:cc:d0:c8:1a:dd:46:bb:2c:
a0:4f:49:de:f6:de:58:30:bf:ab:26:c2:63:fd:e5:d9:f5:1a:
3e:61:f6:a9:ae:c6:e6:3f:2b:a5:1d:b1:b6:c3:06:84:aa:83:
51:09:40:1e:6a:5e:01:1a:67:74:c2:07:7d:75:49:5d:3a:0e:
61:a9:ff:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerWgouns69DlHO6FeGfwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3
NDkxOWUwHhcNMjUxMDI2MDQwMTExWhcNMjUxMDI3MDQwMTExWjAzMTEwLwYDVQQD
EyhkZTdmOWE2ZWYyOGMwM2EyNjRmY2VhYzkwZmI4MjcyNDI3MTRhNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRb7NaNQlGdn/iE7Xvggc8DPYCYj
ywhczUieP4NhvazRezQYMILwm4ffJxwtMOQCcbmpBsVF2fnbiGCElvfEXI1SAEso
ra11tgUetqi9niGBSiOIty1DDnjErYVXWxJ+w+sKqnvm1xd6Pfwv322+rZ/h00CW
yFUF4WigDdE+WrzHsllzFsGkPw83TvOxsXvC5Q4rRhRoSGrTuuH21emJstLXiXjZ
bzJAHdfNzEexA8ApZe34XHBLklrDyaIy2cfweso3naP7Dq0LnDIxcSY/dvoKMD50
pyZxeA79CocT9Yu7rrpQBeAcTL02lyTgnkS0n/eWYkCPD5Sp06v/hxZhCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5/mm7yjAOiZPzqyQ+4JyQnFKZ2MB8GA1UdIwQY
MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt
MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz
LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6kQUYYK
m5azcoBh8RGKb6gfNBOH2aPUV9MWdRVH2lkL+KzLjA1zAnrgYOv6PWOfw1rHR1Fh
AD4DEWJKkMigMqK55Cen7fFzIgIQkK1iGkfJF1Tgx3Jsfh5O0zGCXWj5SWNarIQH
bbzFfdSfLHhVVfZiFWUxLMAS2cDmlRiItUAki598roOd1LP91UONvd3z8K2xzHGv
SP3tdQ6IC97bOxWnZE9mSLzNKCMEWyDKkD2ufZ5mMWMtjLgSMda1MczQyBrdRrss
oE9J3vbeWDC/qybCY/3l2fUaPmH2qa7G5j8rpR2xtsMGhKqDUQlAHmpeARpndMIH
fXVJXToOYan/Nw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 11:47:29 2025 by rpki-client