Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: OrkPme7iVmArUcL298JOipi/JScWxatvRtDRqJldoyc=
Subject key identifier: D3:38:8A:DC:21:73:F3:B4:5A:04:81:B5:9F:90:B7:95:F2:38:ED:E9
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 019A71B87F72DB0CC9A7916E84A41B379F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: aqX_aHr9DYDlihdIMBv6LMwHePY.roa (hash: CPN85FZ7OPhT7PlAx5nBT6Pw1xOtIkDQK0zxfnvB/+M=)
2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: ZnBZnOocpsOGA8tEbMv9KxNVZkh1gFfR0k0DE/QaU+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7f:72:db:0c:c9:a7:91:6e:84:a4:1b:37:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=d3388adc2173f3b45a0481b59f90b795f238ede9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:cc:0f:3a:fd:00:06:46:d8:b3:0d:15:38:
93:1c:45:6c:5d:71:37:de:54:bc:78:2a:7b:0d:46:
8d:bd:88:99:91:21:16:0d:7f:80:a9:14:e0:e4:a9:
05:46:27:86:d4:33:61:0e:96:bf:de:01:15:0a:1d:
48:6e:48:56:e9:ea:39:2c:0c:08:4a:bc:91:38:bb:
4b:c7:17:80:ed:f7:95:4f:f1:81:a0:65:9d:f7:84:
8e:d7:43:70:55:0e:ee:f6:dc:03:66:4c:7e:9f:70:
00:86:0a:a3:ca:97:7f:f8:12:a6:6a:dd:e4:1d:86:
63:6d:c2:b5:d6:60:eb:3b:ea:a6:d0:39:ff:f9:f1:
a9:f0:6e:1a:60:32:9a:da:37:b4:c0:42:e5:b6:c8:
89:e9:3b:b2:d7:f7:6a:a7:02:c9:3b:c7:87:50:25:
a6:64:69:17:c9:96:2d:4b:a9:b0:9c:0d:d8:8d:48:
d9:23:f3:11:4e:6c:e5:13:ab:42:03:5a:14:d8:95:
b0:13:30:73:ad:c6:93:cc:b4:0f:c8:19:f7:09:35:
73:7e:65:b3:82:af:ee:04:dd:c8:c1:43:f4:27:fc:
19:52:99:6c:e6:f9:22:c5:50:1e:af:82:6d:ac:1b:
1a:01:b8:77:56:50:c5:bd:5e:7a:43:f5:e6:f7:a0:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:8A:DC:21:73:F3:B4:5A:04:81:B5:9F:90:B7:95:F2:38:ED:E9
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c8:1b:de:96:a4:4f:ac:19:15:9f:08:ae:84:60:24:c9:b2:
12:9e:55:7d:65:2e:cf:43:7e:1a:0a:21:5a:86:7d:24:97:db:
a4:dc:04:96:5d:c3:e7:5f:0e:a1:62:b1:5b:62:8f:fe:2e:ef:
09:5c:10:80:26:8a:c0:c1:a7:83:ef:82:6a:85:f6:9c:5e:9e:
91:fc:c7:1f:94:f8:76:14:02:15:51:ab:67:18:c8:3a:6b:f3:
00:a7:7f:fd:54:1a:10:38:6f:e7:9e:58:b4:9f:a7:7c:29:40:
23:45:c2:67:fb:6a:d7:9e:86:55:0f:dd:67:fe:61:70:4b:32:
c5:a1:da:c7:50:53:ed:e1:5a:71:6b:7f:14:d4:dd:e3:0e:81:
d0:ae:d6:d9:7f:d2:b7:61:17:d7:ec:d6:c6:f5:85:22:b4:f8:
c6:22:f4:07:a2:30:16:0b:bd:11:22:be:00:d4:8e:e9:a3:cc:
a9:8c:b2:d6:f0:9b:fc:52:c6:2b:79:1f:13:61:f5:b8:22:90:
59:d1:ee:7b:d5:4e:cb:c0:dc:48:e3:d6:a7:f3:f5:c4:fd:98:
27:54:86:45:e2:6f:18:83:d8:34:f0:83:2e:b7:b8:b0:50:de:
2e:e0:82:35:7c:ac:de:ab:24:fe:94:2f:c6:38:4e:47:df:8e:
4a:a9:35:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuH9y2wzJp5FuhKQbN59vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTA0OWQwMGJhODQyMWU0YzQ1YTk0ODQ5Mjk0NWM3OGZk
OWUxNmQwHhcNMjUxMTExMDcwMTQ3WhcNMjUxMTEyMDcwMTQ3WjAzMTEwLwYDVQQD
EyhkMzM4OGFkYzIxNzNmM2I0NWEwNDgxYjU5ZjkwYjc5NWYyMzhlZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGjMDzr9AAZG2LMNFTiTHEVsXXE3
3lS8eCp7DUaNvYiZkSEWDX+AqRTg5KkFRieG1DNhDpa/3gEVCh1IbkhW6eo5LAwI
SryROLtLxxeA7feVT/GBoGWd94SO10NwVQ7u9twDZkx+n3AAhgqjypd/+BKmat3k
HYZjbcK11mDrO+qm0Dn/+fGp8G4aYDKa2je0wELltsiJ6Tuy1/dqpwLJO8eHUCWm
ZGkXyZYtS6mwnA3YjUjZI/MRTmzlE6tCA1oU2JWwEzBzrcaTzLQPyBn3CTVzfmWz
gq/uBN3IwUP0J/wZUpls5vkixVAer4JtrBsaAbh3VlDFvV56Q/Xm96BuVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM4itwhc/O0WgSBtZ+Qt5XyOO3pMB8GA1UdIwQY
MBaAFKDgSdALqEIeTEWpSEkpRceP2eFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NTYwZTktNzE3My00MjljLWI2ZjEt
NWY0YTE1Y2I5MDU0LzEvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80NTYwZTktNzE3My00MjljLWI2ZjEtNWY0YTE1Y2I5MDU0
LzEvb09CSjBBdW9RaDVNUmFsSVNTbEZ4NF9aNFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMgb3pak
T6wZFZ8IroRgJMmyEp5VfWUuz0N+GgohWoZ9JJfbpNwEll3D518OoWKxW2KP/i7v
CVwQgCaKwMGng++CaoX2nF6ekfzHH5T4dhQCFVGrZxjIOmvzAKd//VQaEDhv555Y
tJ+nfClAI0XCZ/tq156GVQ/dZ/5hcEsyxaHax1BT7eFacWt/FNTd4w6B0K7W2X/S
t2EX1+zWxvWFIrT4xiL0B6IwFgu9ESK+ANSO6aPMqYyy1vCb/FLGK3kfE2H1uCKQ
WdHue9VOy8DcSOPWp/P1xP2YJ1SGReJvGIPYNPCDLre4sFDeLuCCNXys3qsk/pQv
xjhOR9+OSqk1cw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:05 2025 by rpki-client