Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
File: OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft (raw, json)
Hash identifier: wngYAcwVzgCAfLRAcpLfLv3QEpsDUs2Mgw2FiuvKqRE=
Subject key identifier: B9:F9:1D:25:BE:C4:D8:24:09:B4:E8:29:FD:94:52:B5:34:0E:7E:D0
Authority key identifier: 39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
Certificate issuer: /CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Certificate serial: 019A725C78C7E552CCC1E026B0ABA7EC0041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
Manifest number: 0D99
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl (hash: gyg53eWD71Wo96WqUUqGjryZ9VwPbc0PYsD7390KSBk=)
2: dZUPSlz29pGWYByW6oVfuTbfNRM.roa (hash: kjVkTTaEOvl+OY2K3zGyDyZOzxn/+zfixfXEwc09htQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:78:c7:e5:52:cc:c1:e0:26:b0:ab:a7:ec:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391e994a95012d92fb51a28c8a650ed9f97737b8
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=b9f91d25bec4d82409b4e829fd9452b5340e7ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:99:25:8f:e0:a0:87:bf:38:36:85:ff:3d:
f3:48:09:a0:63:64:19:40:31:c6:83:7d:86:f7:bb:
85:cf:37:b3:c2:70:13:8f:85:05:bb:74:fc:20:88:
1e:db:f7:71:1b:cf:54:0a:60:5f:6c:96:6b:aa:7c:
6d:17:1a:0c:52:73:3d:6f:35:4d:8a:b8:56:ff:7c:
a0:91:89:eb:a3:fb:db:e1:29:ee:f6:ab:16:4f:5f:
98:23:5a:cb:b6:9e:93:85:74:f3:da:6a:62:3f:c3:
44:02:55:bc:4a:83:50:b0:98:fa:f9:e1:24:df:34:
10:61:a7:33:3e:d8:b6:38:35:a2:eb:9c:2a:be:ce:
db:5f:ff:f0:ed:13:2c:81:2f:78:a4:d9:df:0f:36:
31:a2:3d:8a:29:d7:99:ff:cc:8c:eb:01:27:95:26:
3c:0c:3c:75:ed:03:a3:c2:8b:ff:2a:e7:a0:eb:9f:
27:87:14:c5:49:b5:de:6f:1c:f5:5e:60:29:b2:ce:
be:8a:ed:6a:f0:5e:84:bb:56:c0:14:1c:23:5c:7f:
f2:32:5f:62:2f:18:62:d8:3c:c0:aa:fc:3a:83:a5:
52:43:97:2d:a1:17:cb:24:c7:92:d2:25:2d:e0:59:
af:98:6b:cd:ae:53:20:f3:bc:1b:e7:68:dc:a5:5a:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:1D:25:BE:C4:D8:24:09:B4:E8:29:FD:94:52:B5:34:0E:7E:D0
X509v3 Authority Key Identifier:
keyid:39:1E:99:4A:95:01:2D:92:FB:51:A2:8C:8A:65:0E:D9:F9:77:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR6ZSpUBLZL7UaKMimUO2fl3N7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e346e4-5831-40cf-a4dc-42fb3677df77/1/OR6ZSpUBLZL7UaKMimUO2fl3N7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f2:22:80:48:32:8b:da:56:53:0d:b3:f6:99:28:6b:b5:ac:
3e:d9:08:db:c7:90:d2:63:3b:a8:ac:8b:4d:f5:ba:66:f2:4d:
c1:01:ec:e0:ad:65:50:dd:52:cd:2f:d1:a5:42:7f:88:97:3f:
ab:e9:c2:5a:63:40:bb:bc:ce:43:63:bd:ca:e5:32:4b:30:57:
64:32:99:30:64:c2:92:29:dd:dd:2f:7a:d9:c0:7d:41:7d:07:
dc:8a:3e:9c:e7:94:fe:2f:d7:b7:f0:e8:82:4c:0d:5d:53:27:
84:99:fd:a5:83:5f:b0:15:58:7c:e5:65:6c:2d:84:0e:01:4d:
40:03:58:37:9a:f3:aa:8a:4a:b6:aa:68:d8:fd:b0:46:f3:ea:
01:0c:a0:e0:09:3b:31:89:4c:14:83:dd:68:2b:db:2d:50:fe:
86:90:15:06:5a:08:95:86:2c:b6:f2:75:82:c7:7a:8d:86:1d:
eb:df:12:07:8a:a5:72:c3:c0:eb:bc:e9:a1:28:b6:2d:c8:e6:
12:e5:bf:08:58:63:58:4c:2f:98:af:52:7b:70:a5:49:aa:c1:
df:27:d5:af:6b:f5:b9:f0:98:b1:12:ba:45:37:ee:b2:1f:11:
e4:22:53:2d:6a:a8:93:d5:40:cf:7d:3f:2d:8f:da:e8:47:91:
da:8a:55:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXHjH5VLMweAmsKun7ABBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWU5OTRhOTUwMTJkOTJmYjUxYTI4YzhhNjUwZWQ5Zjk3
NzM3YjgwHhcNMjUxMTExMTAwMDU0WhcNMjUxMTEyMTAwMDU0WjAzMTEwLwYDVQQD
EyhiOWY5MWQyNWJlYzRkODI0MDliNGU4MjlmZDk0NTJiNTM0MGU3ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksaZJY/goIe/ODaF/z3zSAmgY2QZ
QDHGg32G97uFzzezwnATj4UFu3T8IIge2/dxG89UCmBfbJZrqnxtFxoMUnM9bzVN
irhW/3ygkYnro/vb4Snu9qsWT1+YI1rLtp6ThXTz2mpiP8NEAlW8SoNQsJj6+eEk
3zQQYaczPti2ODWi65wqvs7bX//w7RMsgS94pNnfDzYxoj2KKdeZ/8yM6wEnlSY8
DDx17QOjwov/Kueg658nhxTFSbXebxz1XmApss6+iu1q8F6Eu1bAFBwjXH/yMl9i
Lxhi2DzAqvw6g6VSQ5ctoRfLJMeS0iUt4FmvmGvNrlMg87wb52jcpVq1ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn5HSW+xNgkCbToKf2UUrU0Dn7QMB8GA1UdIwQY
MBaAFDkemUqVAS2S+1GijIplDtn5dze4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMt
NDJmYjM2NzdkZjc3LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lMzQ2ZTQtNTgzMS00MGNmLWE0ZGMtNDJmYjM2NzdkZjc3
LzEvT1I2WlNwVUJMWkw3VWFLTWltVU8yZmwzTjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPIigEgy
i9pWUw2z9pkoa7WsPtkI28eQ0mM7qKyLTfW6ZvJNwQHs4K1lUN1SzS/RpUJ/iJc/
q+nCWmNAu7zOQ2O9yuUySzBXZDKZMGTCkind3S962cB9QX0H3Io+nOeU/i/Xt/Do
gkwNXVMnhJn9pYNfsBVYfOVlbC2EDgFNQANYN5rzqopKtqpo2P2wRvPqAQyg4Ak7
MYlMFIPdaCvbLVD+hpAVBloIlYYstvJ1gsd6jYYd698SB4qlcsPA67zpoSi2Lcjm
EuW/CFhjWEwvmK9Se3ClSarB3yfVr2v1ufCYsRK6RTfush8R5CJTLWqok9VAz30/
LY/a6EeR2opV+g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:45 2025 by rpki-client