Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json)
Hash identifier: iPiVq3c4llNbckLfXhRkidT+6cDmCRxZOGT/uog5B/A=
Subject key identifier: FC:91:A6:87:30:4B:A2:C6:FD:4B:FF:26:4E:78:C5:19:09:3E:0D:A8
Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43
Certificate serial: 019A72CA518359ECBD694774381417D514C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
Manifest number: 1460
Signing time: Tue 11 Nov 2025 12:00:52 +0000
Manifest this update: Tue 11 Nov 2025 12:00:52 +0000
Manifest next update: Wed 12 Nov 2025 12:00:52 +0000
Files and hashes: 1: 1qXoS3ZyJIxcOWhfODj10DLjQ_U.roa (hash: GFEaUvVwjsTkY2CZy9se0kItacxeC4v59hUMVKrNWa8=)
2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: D+PCSOwiqOUygwI4hRL3/5S4gv8bYp3R4utKzp5qjEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:51:83:59:ec:bd:69:47:74:38:14:17:d5:14:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43
Validity
Not Before: Nov 11 12:00:52 2025 GMT
Not After : Nov 12 12:00:52 2025 GMT
Subject: CN=fc91a687304ba2c6fd4bff264e78c519093e0da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:14:58:07:80:93:66:f0:34:0d:91:0a:ff:
9c:fd:cb:84:f7:6d:7c:71:05:c8:07:90:0a:a4:25:
d3:95:1b:c3:e9:c6:32:72:da:ec:96:13:81:a2:19:
9e:37:9d:be:2c:22:62:6a:f0:0e:c6:2e:f5:e6:d8:
00:2c:0e:0f:b1:91:26:e8:e6:d8:2a:77:f8:53:5b:
21:e2:5b:81:a5:1e:46:bb:c8:d1:36:f0:c0:42:6a:
21:db:d8:83:05:94:86:bc:3d:7e:73:26:22:b6:5d:
4e:cd:9e:73:46:4b:c4:22:59:5b:a2:7a:2f:cf:13:
46:1f:5c:fa:aa:89:f3:bd:2e:ff:e6:c2:b0:e9:86:
22:32:d8:a7:f5:b0:a7:28:b5:48:cb:10:bc:f4:f8:
e6:17:6d:5c:ee:54:c5:f7:87:09:d7:6b:30:c4:ff:
00:d4:59:96:1b:97:fa:ff:da:d7:cc:c7:03:e1:9a:
b1:5c:09:0b:a0:57:90:41:6e:b6:e7:2a:ae:84:5e:
fc:77:2a:e8:f3:73:d1:5a:c0:fa:33:30:b6:2b:b7:
2d:f1:08:c8:29:c1:cc:f9:3b:d5:eb:86:0b:78:34:
ab:90:19:ad:49:03:22:1c:15:17:62:18:82:86:33:
17:85:bb:2c:28:1b:2e:4e:83:b9:76:7b:24:ab:88:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:A6:87:30:4B:A2:C6:FD:4B:FF:26:4E:78:C5:19:09:3E:0D:A8
X509v3 Authority Key Identifier:
keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:23:09:b7:f8:7b:57:92:e1:6b:5a:6f:3f:8b:9c:0b:f6:43:
29:cb:ba:7a:f6:88:a7:06:49:20:5a:8c:82:29:ba:81:a7:62:
b3:95:79:e9:6a:34:25:c7:a3:c3:06:1a:c8:24:7b:21:51:d6:
6c:24:58:16:2b:a9:b8:e5:d1:6c:0b:5e:51:4d:33:ef:c1:27:
3e:dc:d9:56:c2:52:ad:84:66:9c:64:4a:17:17:16:97:0a:40:
87:37:21:fd:84:a1:2b:aa:a9:22:30:90:bb:4c:54:96:5c:7c:
42:2f:4c:fd:c9:dd:c7:84:12:35:da:59:71:6d:bf:99:af:44:
3b:d2:a9:17:6a:e8:60:dd:e0:41:47:da:c4:18:3e:56:6e:db:
18:0a:00:1d:79:a5:cd:21:79:54:ed:45:93:cf:e5:e8:f2:e8:
31:0c:59:66:d4:55:f5:97:61:db:86:0f:89:c4:cd:79:9d:85:
16:01:1b:20:f6:26:b1:2e:36:c4:ab:11:ef:d5:48:47:bf:85:
75:2b:fa:c9:39:ec:0a:28:9a:e4:42:71:72:9b:4c:b4:f5:82:
a5:f1:6e:e4:8f:1f:f7:95:8c:23:b2:34:16:29:77:3f:00:7f:
b7:de:a1:6e:6c:f8:4b:73:21:71:b0:9a:0b:a4:2e:84:d2:a8:
b0:01:3b:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylGDWey9aUd0OBQX1RTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjVlNjU3NDljYWE1ZmJiNDkxZTkwNjk3N2RiMThkMzU1
OWJmNDMwHhcNMjUxMTExMTIwMDUyWhcNMjUxMTEyMTIwMDUyWjAzMTEwLwYDVQQD
EyhmYzkxYTY4NzMwNGJhMmM2ZmQ0YmZmMjY0ZTc4YzUxOTA5M2UwZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4YUWAeAk2bwNA2RCv+c/cuE9218
cQXIB5AKpCXTlRvD6cYyctrslhOBohmeN52+LCJiavAOxi715tgALA4PsZEm6ObY
Knf4U1sh4luBpR5Gu8jRNvDAQmoh29iDBZSGvD1+cyYitl1OzZ5zRkvEIllbonov
zxNGH1z6qonzvS7/5sKw6YYiMtin9bCnKLVIyxC89PjmF21c7lTF94cJ12swxP8A
1FmWG5f6/9rXzMcD4ZqxXAkLoFeQQW625yquhF78dyro83PRWsD6MzC2K7ct8QjI
KcHM+TvV64YLeDSrkBmtSQMiHBUXYhiChjMXhbssKBsuToO5dnskq4gsuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyRpocwS6LG/Uv/Jk54xRkJPg2oMB8GA1UdIwQY
MBaAFKBl5ldJyqX7tJHpBpd9sY01Wb9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zZTczYTYtMWRhNy00N2Y2LWEzOGMt
MGVlODQ3ZDNmYjc5LzEvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zZTczYTYtMWRhNy00N2Y2LWEzOGMtMGVlODQ3ZDNmYjc5
LzEvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSMJt/h7
V5Lha1pvP4ucC/ZDKcu6evaIpwZJIFqMgim6gadis5V56Wo0JcejwwYayCR7IVHW
bCRYFiupuOXRbAteUU0z78EnPtzZVsJSrYRmnGRKFxcWlwpAhzch/YShK6qpIjCQ
u0xUllx8Qi9M/cndx4QSNdpZcW2/ma9EO9KpF2roYN3gQUfaxBg+Vm7bGAoAHXml
zSF5VO1Fk8/l6PLoMQxZZtRV9Zdh24YPicTNeZ2FFgEbIPYmsS42xKsR79VIR7+F
dSv6yTnsCiia5EJxcptMtPWCpfFu5I8f95WMI7I0Fil3PwB/t96hbmz4S3MhcbCa
C6QuhNKosAE7/g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:43 2025 by rpki-client