Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: lKKxRHcRqHo1OyfUJXHeEsIDrOYlQ0/nxcOMZUVMua4=
Subject key identifier: 77:46:1F:9F:DA:8C:98:F3:69:CA:02:8E:5D:BE:9E:75:43:B4:AF:32
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019A71EEB84C7D719901B007DDA8DF85A64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: m1e4LgMVnImXnUfncV/8x3W/0oAjj2g2FDd9qK0J+bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b8:4c:7d:71:99:01:b0:07:dd:a8:df:85:a6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=77461f9fda8c98f369ca028e5dbe9e7543b4af32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:19:94:6d:4a:5d:7e:d3:ed:af:39:a7:63:
ff:e0:df:76:c5:5c:01:af:8a:f3:73:70:1b:e4:90:
b4:69:68:11:14:7e:e6:19:30:64:22:af:a1:45:87:
fe:17:98:07:0a:e3:26:85:9e:ff:60:db:58:7f:e2:
72:c5:8f:71:fd:49:5e:f4:3e:fd:e1:9f:28:cb:28:
3d:dd:19:27:ce:7a:7c:91:ef:21:10:4e:e1:12:ea:
b6:f8:04:e4:1a:47:9e:f5:f1:28:1f:72:82:5a:aa:
fc:c0:4c:6b:91:24:3e:de:8d:bb:9d:90:38:54:bb:
1b:87:2f:32:63:a5:f3:e7:a2:78:24:3f:19:b1:f7:
85:c6:16:8e:2f:d4:e6:81:ca:10:c1:de:c8:18:24:
df:1a:20:dd:a8:ed:91:88:14:68:7b:d3:04:25:e6:
08:10:0f:d2:46:2d:da:49:b1:26:b3:1d:3b:f7:ca:
88:cb:d3:86:e5:d4:54:12:68:a2:f3:a3:43:9b:f9:
d6:b3:8c:2d:05:a0:54:a2:bd:08:b9:47:43:c5:14:
05:36:d5:33:b0:a8:8f:b7:37:57:99:05:3b:70:49:
8b:6f:d6:ad:86:c3:b1:a1:49:ad:4a:9a:a7:60:70:
52:54:31:eb:18:16:9b:1b:f6:88:59:34:45:2c:f6:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:1F:9F:DA:8C:98:F3:69:CA:02:8E:5D:BE:9E:75:43:B4:AF:32
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e4:c1:ab:61:01:cf:29:82:fa:87:23:6b:6c:65:bc:40:1c:
6e:2c:26:4d:6d:72:0b:52:9f:5c:52:36:a8:5f:87:98:53:be:
d9:9c:52:98:a0:92:58:20:16:2d:8f:74:12:ec:bb:04:c8:01:
39:1f:ad:bd:a0:2c:d8:73:28:32:aa:7e:3e:32:55:84:d2:4b:
aa:b4:85:6c:25:4f:1d:f9:72:ce:5c:1d:4c:04:d2:db:f7:a7:
ec:0f:a5:6b:43:ec:47:15:e8:00:2d:7a:2e:be:b3:91:af:fd:
a8:24:76:41:00:55:38:47:54:6b:a2:f1:fc:c8:8b:bf:ea:f8:
1d:5e:f5:29:ae:67:84:24:9d:3e:47:fe:c7:c9:99:ea:f8:20:
61:bf:f6:4e:21:5a:00:87:82:66:ca:44:89:ec:c5:61:cc:a4:
5f:f3:b2:82:97:ca:f9:e5:96:e2:02:4b:f3:7e:68:c9:b4:7b:
50:a6:89:cc:14:29:49:31:0e:ff:c2:88:1d:68:e3:b5:02:ed:
8d:54:eb:08:e9:90:5a:4d:7c:e3:31:d7:17:b8:66:0d:92:11:
64:62:01:64:06:cd:81:25:1c:b6:df:6e:11:75:53:06:ae:d3:
23:1f:b3:ef:83:85:a7:95:a8:f7:09:87:37:df:14:82:79:20:
97:7f:3c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rhMfXGZAbAH3ajfhaZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMGI0MjYwNGIzZjhlOWU1YjcyZjIzMjkzODlhZjE4ZmZi
ZDIwYjgwHhcNMjUxMTExMDgwMTAxWhcNMjUxMTEyMDgwMTAxWjAzMTEwLwYDVQQD
Eyg3NzQ2MWY5ZmRhOGM5OGYzNjljYTAyOGU1ZGJlOWU3NTQzYjRhZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP8ZlG1KXX7T7a85p2P/4N92xVwB
r4rzc3Ab5JC0aWgRFH7mGTBkIq+hRYf+F5gHCuMmhZ7/YNtYf+JyxY9x/Ule9D79
4Z8oyyg93Rknznp8ke8hEE7hEuq2+ATkGkee9fEoH3KCWqr8wExrkSQ+3o27nZA4
VLsbhy8yY6Xz56J4JD8ZsfeFxhaOL9TmgcoQwd7IGCTfGiDdqO2RiBRoe9MEJeYI
EA/SRi3aSbEmsx0798qIy9OG5dRUEmii86NDm/nWs4wtBaBUor0IuUdDxRQFNtUz
sKiPtzdXmQU7cEmLb9athsOxoUmtSpqnYHBSVDHrGBabG/aIWTRFLPb0tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdGH5/ajJjzacoCjl2+nnVDtK8yMB8GA1UdIwQY
MBaAFKALQmBLP46eW3LyMpOJrxj/vSC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQt
NzM5NmQ4YjY0MGFkLzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQtNzM5NmQ4YjY0MGFk
LzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeTBq2EB
zymC+ocja2xlvEAcbiwmTW1yC1KfXFI2qF+HmFO+2ZxSmKCSWCAWLY90Euy7BMgB
OR+tvaAs2HMoMqp+PjJVhNJLqrSFbCVPHflyzlwdTATS2/en7A+la0PsRxXoAC16
Lr6zka/9qCR2QQBVOEdUa6Lx/MiLv+r4HV71Ka5nhCSdPkf+x8mZ6vggYb/2TiFa
AIeCZspEiezFYcykX/OygpfK+eWW4gJL835oybR7UKaJzBQpSTEO/8KIHWjjtQLt
jVTrCOmQWk184zHXF7hmDZIRZGIBZAbNgSUctt9uEXVTBq7TIx+z74OFp5Wo9wmH
N98Ugnkgl3886Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:08 2025 by rpki-client