Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
File: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft (raw, json)
Hash identifier: cxZQmrN78uDC+BjTeqzqCTIcKPswGXC4t+MqMIHsXtM=
Subject key identifier: 10:09:E4:AD:86:4E:E7:D0:D0:75:C4:8E:A4:A3:4A:42:75:0A:7E:71
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 019A7225C67D4D79955B598235BF1E141557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
Manifest number: 1346
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: O1jkn25qs1-TFBQOkUuo7PUo1bk.roa (hash: G22nJhAbgQNfU91NNPvYIMRUfjCUOYeEUbZcxQsmP2o=)
2: ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl (hash: n9y7AzCfahXfpUiUsfapV6Ynz2ZWoyyDWI27EYLp1mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c6:7d:4d:79:95:5b:59:82:35:bf:1e:14:15:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=1009e4ad864ee7d0d075c48ea4a34a42750a7e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:da:62:4b:41:89:cc:2f:23:c0:cd:df:f8:
d0:0f:9d:34:3f:5b:fa:7c:56:7e:1d:d9:bb:64:8c:
a2:7a:5d:82:fc:63:a4:38:4b:06:ef:5d:42:e4:08:
56:4d:08:cb:3e:1a:ed:fa:5e:eb:3c:3e:97:c2:a3:
2b:4a:18:32:62:44:b3:61:b1:be:d9:12:98:80:57:
70:41:dd:4a:3e:4b:3c:c2:67:46:a2:fe:48:79:6a:
36:83:58:a0:8e:e8:a7:24:7a:ef:eb:b1:92:bb:04:
52:74:a2:f9:f5:b6:6e:41:a9:c9:1c:15:b9:31:35:
40:c7:75:07:1d:98:4b:ed:8e:2a:92:99:2d:74:2e:
06:7f:10:97:de:13:36:bb:10:aa:b8:79:56:82:15:
87:d1:b5:65:76:7f:20:a8:4b:ff:46:ae:65:3d:b7:
61:a0:a0:94:17:01:b4:62:40:51:1a:4b:e8:bd:2b:
3f:e0:df:d6:49:81:0a:95:3a:a9:ed:ee:53:7a:0f:
8f:a7:c0:3a:fa:d5:94:de:3d:fb:19:47:2d:dd:e0:
b0:38:7e:49:38:35:79:ed:b3:50:a0:fa:c8:28:b2:
42:70:ae:a2:54:13:22:06:ca:97:04:db:bc:7d:a8:
d5:cf:1f:d1:66:ed:0f:44:d9:35:b3:e0:37:08:a3:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:E4:AD:86:4E:E7:D0:D0:75:C4:8E:A4:A3:4A:42:75:0A:7E:71
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:5d:f0:61:af:38:ac:8f:d7:89:9a:a5:94:ea:03:67:66:
4e:d2:5a:3f:2f:e8:cc:b2:65:83:13:33:cc:1f:d7:db:0c:0e:
cd:67:15:ad:18:b9:89:30:07:0a:09:00:3b:9c:57:26:ec:03:
c2:98:e0:f1:c4:8b:6d:50:e7:09:ba:d9:03:3a:70:57:f6:9b:
50:8c:e4:05:2c:be:06:bc:a8:11:80:21:3b:b2:13:8d:be:e8:
ef:f8:61:1e:b6:7b:9e:42:cb:5d:fd:98:01:4f:68:9e:b9:f0:
b8:e8:06:e7:0d:2e:1e:a3:35:38:8e:76:9c:9b:f3:99:c8:45:
2e:ab:5f:35:69:53:53:f0:ef:bc:d3:24:23:c8:e4:96:1f:38:
8b:01:48:24:76:ea:0e:4f:6e:dd:ea:cf:7b:d2:e5:72:41:3b:
21:ff:aa:04:1d:08:a6:be:30:6b:9f:4d:50:e4:db:5a:02:d2:
05:e5:98:50:16:f9:50:7e:02:e9:ba:38:48:03:a5:fb:8a:da:
9a:90:d2:85:f4:37:32:7f:86:89:a7:a5:75:98:28:f5:48:01:
6b:2a:cc:e8:7c:07:2a:eb:0e:db:92:e5:09:69:bf:64:82:a8:
e5:d0:67:e9:6b:3b:57:47:87:5c:34:fd:ef:7c:39:bb:a4:dd:
d8:70:12:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcZ9TXmVW1mCNb8eFBVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTNjNGVjN2IzNjExMmZjZTUyMWY1YmVmMjg3M2M3YjRj
Yzg4ZDEwHhcNMjUxMTExMDkwMTA5WhcNMjUxMTEyMDkwMTA5WjAzMTEwLwYDVQQD
EygxMDA5ZTRhZDg2NGVlN2QwZDA3NWM0OGVhNGEzNGE0Mjc1MGE3ZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu13aYktBicwvI8DN3/jQD500P1v6
fFZ+Hdm7ZIyiel2C/GOkOEsG711C5AhWTQjLPhrt+l7rPD6XwqMrShgyYkSzYbG+
2RKYgFdwQd1KPks8wmdGov5IeWo2g1igjuinJHrv67GSuwRSdKL59bZuQanJHBW5
MTVAx3UHHZhL7Y4qkpktdC4GfxCX3hM2uxCquHlWghWH0bVldn8gqEv/Rq5lPbdh
oKCUFwG0YkBRGkvovSs/4N/WSYEKlTqp7e5Teg+Pp8A6+tWU3j37GUct3eCwOH5J
ODV57bNQoPrIKLJCcK6iVBMiBsqXBNu8fajVzx/RZu0PRNk1s+A3CKM9cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAJ5K2GTufQ0HXEjqSjSkJ1Cn5xMB8GA1UdIwQY
MBaAFKLjxOx7NhEvzlIfW+8oc8e0zIjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYt
ZGE1MTNjYzY5ODM5LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNDAzODctMmQ4NC00MDYyLWJlYzYtZGE1MTNjYzY5ODM5
LzEvb3VQRTdIczJFU19PVWg5Yjd5aHp4N1RNaU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXdd8GGv
OKyP14mapZTqA2dmTtJaPy/ozLJlgxMzzB/X2wwOzWcVrRi5iTAHCgkAO5xXJuwD
wpjg8cSLbVDnCbrZAzpwV/abUIzkBSy+BryoEYAhO7ITjb7o7/hhHrZ7nkLLXf2Y
AU9onrnwuOgG5w0uHqM1OI52nJvzmchFLqtfNWlTU/DvvNMkI8jklh84iwFIJHbq
Dk9u3erPe9LlckE7If+qBB0Ipr4wa59NUOTbWgLSBeWYUBb5UH4C6bo4SAOl+4ra
mpDShfQ3Mn+GiaeldZgo9UgBayrM6HwHKusO25LlCWm/ZIKo5dBn6Ws7V0eHXDT9
73w5u6Td2HAS2w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:52 2025 by rpki-client