Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: GLRywCIuL9QvOc69yAiwkmKJcz8SHBWmaayFaZGT0xI=
Subject key identifier: B8:7F:83:0A:DB:26:10:21:8B:2F:99:70:3A:C7:A1:5E:12:DB:DC:C1
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 019A72258D0CF4D891984550FD724BE09956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 028F
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: XO9k3rb5BmU0rU1mJuDN8thBKceN0XS26N/YYuMmya0=)
2: vvhtwRxSkAUJ1c-M3BxUohEySzg.roa (hash: 5peLctB/1NoUxBRjWB/Eva3roqPmaT0WkPw4865m1uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8d:0c:f4:d8:91:98:45:50:fd:72:4b:e0:99:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=b87f830adb2610218b2f99703ac7a15e12dbdcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:a4:ed:bb:a6:89:5d:62:72:0b:68:a3:80:
c7:ea:20:97:a8:0c:5b:3f:c2:00:a1:b1:59:2e:0f:
95:7a:8c:09:6e:af:e1:81:eb:c3:d5:c6:42:1a:b4:
d5:ff:ab:1c:c3:84:7f:96:ff:c6:5b:3b:1b:09:01:
68:ab:d5:1a:d5:b8:c9:a0:c5:cb:db:62:7d:08:80:
85:95:27:80:af:e6:12:57:ec:1d:6b:c6:d2:3f:79:
56:bb:05:a9:0f:8e:b2:07:54:45:29:fd:61:11:c6:
20:6e:36:1d:bf:59:c3:ea:f2:d7:36:53:18:98:a6:
8c:a5:28:f1:a1:59:0d:6b:cf:e6:71:a8:25:f4:01:
e4:bc:25:0c:9b:3f:26:1e:a6:da:f3:4e:51:8e:78:
98:3e:94:f2:c8:75:59:f7:8d:a1:81:22:bd:1c:e5:
48:91:8d:c4:3e:1d:17:4b:ae:d8:a2:18:27:da:42:
cd:08:81:34:71:b7:b6:89:49:66:5c:4a:7d:97:97:
dd:ef:d0:0a:8a:8d:52:58:dc:27:d9:bd:e1:e9:7e:
89:36:68:48:89:bc:f0:8d:6d:b0:e3:83:62:9c:d4:
b0:10:d5:e2:8e:99:d6:f9:06:d7:8e:7d:8d:87:4e:
13:e2:65:27:ab:d7:cc:0c:4d:a0:bc:29:a2:26:07:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:83:0A:DB:26:10:21:8B:2F:99:70:3A:C7:A1:5E:12:DB:DC:C1
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2e:21:b8:4a:03:78:c2:bd:d4:a8:af:76:46:b2:7f:4a:71:
59:44:db:32:ca:24:50:01:b9:f5:9b:a6:3a:d7:46:b8:41:bf:
01:d5:33:c9:af:52:98:05:ff:b9:c1:c0:69:77:33:f1:68:b5:
fd:31:d7:8b:5f:dd:d0:73:bf:41:f1:04:14:f3:20:21:48:a3:
93:79:6f:e1:0b:bd:35:4e:e8:6b:14:69:cb:ff:77:8e:94:86:
8d:45:30:9c:ed:3f:3b:e0:5c:d0:40:bd:f0:45:59:e4:4b:f3:
d7:f0:f1:f8:6d:26:ef:b0:9e:40:51:72:05:8d:50:e2:d7:b1:
3e:ab:b0:79:79:af:30:53:6d:ab:ea:f1:a3:81:c0:8d:73:17:
a0:73:63:e9:33:2e:22:15:bb:8f:4e:66:86:bf:0c:d8:21:d7:
03:52:d4:49:53:f0:ff:d1:54:8f:a4:e8:1f:4c:e2:11:10:bd:
fc:a3:f6:af:32:85:0d:cd:4d:03:28:88:59:f0:93:0a:0b:bc:
76:82:3b:6b:ae:a8:c6:07:56:b0:8b:e0:ab:18:8f:4f:49:fe:
d2:f1:3a:03:70:e3:55:5f:3f:7a:d5:76:f9:5e:f5:90:69:87:
c7:4a:e1:53:c5:2b:38:e2:fb:92:57:23:d1:f1:c1:b1:d3:fe:
a5:2f:d3:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJY0M9NiRmEVQ/XJL4JlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZjM4NmQ0YThkMmUxODgzMmNmMjNmYmYzNWY2MjQwZGI4
ZWEyNDIwHhcNMjUxMTExMDkwMDU0WhcNMjUxMTEyMDkwMDU0WjAzMTEwLwYDVQQD
EyhiODdmODMwYWRiMjYxMDIxOGIyZjk5NzAzYWM3YTE1ZTEyZGJkY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN2k7bumiV1icgtoo4DH6iCXqAxb
P8IAobFZLg+VeowJbq/hgevD1cZCGrTV/6scw4R/lv/GWzsbCQFoq9Ua1bjJoMXL
22J9CICFlSeAr+YSV+wda8bSP3lWuwWpD46yB1RFKf1hEcYgbjYdv1nD6vLXNlMY
mKaMpSjxoVkNa8/mcagl9AHkvCUMmz8mHqba805RjniYPpTyyHVZ942hgSK9HOVI
kY3EPh0XS67Yohgn2kLNCIE0cbe2iUlmXEp9l5fd79AKio1SWNwn2b3h6X6JNmhI
ibzwjW2w44NinNSwENXijpnW+QbXjn2Nh04T4mUnq9fMDE2gvCmiJgcIZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh/gwrbJhAhiy+ZcDrHoV4S29zBMB8GA1UdIwQY
MBaAFJvzhtSo0uGIMs8j+/NfYkDbjqJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NDhiY2MtMDkxMS00ZjY0LWI2ZDEt
MGEyZjI5YWVjZGIzLzEvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82NDhiY2MtMDkxMS00ZjY0LWI2ZDEtMGEyZjI5YWVjZGIz
LzEvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky4huEoD
eMK91Kivdkayf0pxWUTbMsokUAG59ZumOtdGuEG/AdUzya9SmAX/ucHAaXcz8Wi1
/THXi1/d0HO/QfEEFPMgIUijk3lv4Qu9NU7oaxRpy/93jpSGjUUwnO0/O+Bc0EC9
8EVZ5Evz1/Dx+G0m77CeQFFyBY1Q4texPquweXmvMFNtq+rxo4HAjXMXoHNj6TMu
IhW7j05mhr8M2CHXA1LUSVPw/9FUj6ToH0ziERC9/KP2rzKFDc1NAyiIWfCTCgu8
doI7a66oxgdWsIvgqxiPT0n+0vE6A3DjVV8/etV2+V71kGmHx0rhU8UrOOL7klcj
0fHBsdP+pS/Tsw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:59 2025 by rpki-client