Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: XciprKb/STFNXYx0AFaNzrPhUrxvq9AnqLNS40NYJ7k=
Subject key identifier: 58:BA:7E:28:24:20:B8:BB:A7:B4:F5:40:1A:FC:B8:CB:0D:A1:2C:88
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 019A722580E6CC22864677169CAACF82D986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 0664
Signing time: Tue 11 Nov 2025 09:00:51 +0000
Manifest this update: Tue 11 Nov 2025 09:00:51 +0000
Manifest next update: Wed 12 Nov 2025 09:00:51 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: /o1hMZjv9Wt+JOUWkkCC3YweoSFW4Iln9iu7Jb90HC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:80:e6:cc:22:86:46:77:16:9c:aa:cf:82:d9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Nov 11 09:00:51 2025 GMT
Not After : Nov 12 09:00:51 2025 GMT
Subject: CN=58ba7e282420b8bba7b4f5401afcb8cb0da12c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:3a:0f:9b:9f:b6:96:f8:e4:e2:55:64:fb:
1a:db:f1:f7:47:a8:92:6e:c3:11:77:4f:2a:9e:c2:
ee:ec:54:67:53:50:3a:68:47:fb:03:ab:cb:3c:fb:
f5:42:80:35:29:3d:86:91:f9:8d:48:f2:6f:9f:fd:
e0:cb:c7:4c:ac:ad:8a:3c:6d:4f:7f:9e:4d:b9:09:
6a:4c:96:4a:68:3b:0a:05:88:2f:78:cd:52:13:1b:
55:fc:29:9e:e5:0a:66:15:75:c8:df:cd:cd:86:86:
39:f4:59:1e:90:11:03:f2:1d:17:d0:c0:0b:cb:6f:
c0:63:0d:7d:1b:a3:22:0a:63:85:e0:fd:87:c2:27:
fb:7c:1f:2f:bd:11:c6:fd:11:d9:a3:3d:8a:2e:30:
fb:10:4b:4c:cb:90:a0:1f:62:44:98:7e:62:66:95:
b7:76:e4:7d:c3:29:16:ad:3c:07:d1:48:e3:a4:60:
be:e2:c5:5e:d4:5c:05:a8:6c:3e:e9:4d:52:21:d0:
85:ee:da:39:44:d7:d1:4e:5e:51:08:43:d2:1a:96:
56:82:d1:3c:2d:39:08:df:99:63:46:ad:8b:3e:f1:
8f:ae:5b:6b:b7:09:40:c8:46:1e:80:23:a2:70:e0:
c2:67:b1:d3:bd:87:47:e4:16:87:41:54:1f:d2:f8:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:7E:28:24:20:B8:BB:A7:B4:F5:40:1A:FC:B8:CB:0D:A1:2C:88
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2e:4f:fd:6c:cb:9f:c8:31:7a:91:4c:76:8d:d6:4a:97:13:
a8:c0:b1:8b:01:7f:f8:69:7c:f5:a4:12:0a:51:46:e7:b6:9e:
97:94:e7:24:5e:03:02:0b:b8:20:d4:cf:06:fc:74:32:c1:c0:
6e:c1:88:74:fd:6a:57:b7:24:3f:ea:e6:f1:59:39:8a:bd:35:
97:e7:7e:07:4d:e3:cd:df:2c:18:97:9e:5d:92:54:d6:fe:0e:
b4:48:35:f8:c2:40:d5:8e:3d:d8:6a:e1:8d:61:61:bc:2b:e6:
33:0e:6b:a3:e6:4e:ef:c7:a8:bd:72:7c:e9:29:89:f7:a3:bc:
0d:b8:55:55:b2:0d:8e:6a:48:5e:63:7f:ff:ac:f4:e3:1e:59:
50:25:ee:82:30:b3:17:e4:d9:0f:b9:f7:25:d6:2e:fc:8e:d8:
99:dc:be:fd:45:4d:8a:46:06:cf:9b:51:f7:6c:7e:12:d9:74:
3a:89:90:f6:6e:a9:41:72:99:7b:91:bd:77:7e:81:85:d0:14:
42:ea:f3:0f:ae:d4:ed:d5:43:dd:59:83:11:4b:e2:03:0b:c3:
c8:01:7d:89:c8:5e:21:35:77:a0:96:b5:f6:8b:2a:18:10:5e:
b8:a0:fb:b3:02:49:54:02:ae:91:e6:30:b3:96:24:1a:ec:49:
fe:8a:25:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJYDmzCKGRncWnKrPgtmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx
NTZjMGEwHhcNMjUxMTExMDkwMDUxWhcNMjUxMTEyMDkwMDUxWjAzMTEwLwYDVQQD
Eyg1OGJhN2UyODI0MjBiOGJiYTdiNGY1NDAxYWZjYjhjYjBkYTEyYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu06D5uftpb45OJVZPsa2/H3R6iS
bsMRd08qnsLu7FRnU1A6aEf7A6vLPPv1QoA1KT2GkfmNSPJvn/3gy8dMrK2KPG1P
f55NuQlqTJZKaDsKBYgveM1SExtV/Cme5QpmFXXI383NhoY59FkekBED8h0X0MAL
y2/AYw19G6MiCmOF4P2Hwif7fB8vvRHG/RHZoz2KLjD7EEtMy5CgH2JEmH5iZpW3
duR9wykWrTwH0UjjpGC+4sVe1FwFqGw+6U1SIdCF7to5RNfRTl5RCEPSGpZWgtE8
LTkI35ljRq2LPvGPrltrtwlAyEYegCOicODCZ7HTvYdH5BaHQVQf0vgZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFi6figkILi7p7T1QBr8uMsNoSyIMB8GA1UdIwQY
MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt
MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4
LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAay5P/WzL
n8gxepFMdo3WSpcTqMCxiwF/+Gl89aQSClFG57ael5TnJF4DAgu4INTPBvx0MsHA
bsGIdP1qV7ckP+rm8Vk5ir01l+d+B03jzd8sGJeeXZJU1v4OtEg1+MJA1Y492Grh
jWFhvCvmMw5ro+ZO78eovXJ86SmJ96O8DbhVVbINjmpIXmN//6z04x5ZUCXugjCz
F+TZD7n3JdYu/I7Ymdy+/UVNikYGz5tR92x+Etl0OomQ9m6pQXKZe5G9d36BhdAU
QurzD67U7dVD3VmDEUviAwvDyAF9icheITV3oJa19osqGBBeuKD7swJJVAKukeYw
s5YkGuxJ/oolrw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:23 2025 by rpki-client