Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: 8v5XOcg44/EAwPyWh6TgKhlYIj2Ciwu1oo9RhUF0x6E=
Subject key identifier: 66:D7:C1:F1:A7:9D:41:98:BA:15:8F:C2:FF:B5:ED:DF:DE:33:49:DD
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019A0DB9BA65D62153D039F35D351D64C808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0D9A
Signing time: Wed 22 Oct 2025 21:01:06 +0000
Manifest this update: Wed 22 Oct 2025 21:01:06 +0000
Manifest next update: Thu 23 Oct 2025 21:01:06 +0000
Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: R4bezxP/3OINkT1lKcOwIkrg+9Xu5RT6lsqhPzlQz2g=)
3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b9:ba:65:d6:21:53:d0:39:f3:5d:35:1d:64:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Oct 22 21:01:06 2025 GMT
Not After : Oct 23 21:01:06 2025 GMT
Subject: CN=66d7c1f1a79d4198ba158fc2ffb5eddfde3349dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:d1:84:a2:7d:67:db:bd:22:72:c2:55:9f:
d4:be:a7:93:13:27:a6:45:60:7c:48:6a:75:9d:b0:
b3:50:4f:a1:a9:29:56:bd:bb:87:8c:46:c4:a4:95:
4f:49:c4:47:e6:23:0c:7a:2f:64:0c:6e:84:83:d2:
81:19:f1:0d:5c:7d:74:11:d4:c7:db:0b:01:aa:69:
54:f5:f9:3f:34:89:bd:aa:77:74:8f:93:c5:51:d8:
82:ac:ac:d1:eb:58:cb:7a:f6:40:dd:d1:bb:ad:c5:
db:34:78:9f:ad:82:20:ff:53:45:a5:dd:d0:03:fb:
19:1b:39:66:4f:d5:68:8f:30:1a:51:0f:c3:b7:a3:
2c:99:e5:87:16:16:7f:9f:4a:53:e6:78:94:45:4e:
9e:4f:2e:9d:30:e7:f1:0d:82:87:14:78:86:68:60:
72:2c:72:ff:e4:de:c5:59:8f:28:d8:6f:2f:77:71:
de:5e:fc:f3:c9:16:f5:6d:7e:7d:d0:83:30:e7:78:
82:38:0e:41:ab:67:dc:08:57:51:5d:95:d5:8e:19:
95:35:b0:9c:79:54:1b:91:5f:5f:66:f2:1e:73:0d:
3b:cc:d9:cb:53:0a:1d:cd:b7:b9:59:28:b1:c6:48:
5e:f3:b3:3e:8d:79:62:0c:5e:aa:6b:d3:60:9b:48:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D7:C1:F1:A7:9D:41:98:BA:15:8F:C2:FF:B5:ED:DF:DE:33:49:DD
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:60:3d:a1:f0:01:e3:d4:53:81:0b:e7:2f:6e:c6:6e:36:1a:
43:13:fc:a4:60:15:0e:bf:93:12:39:86:4c:d4:e0:cb:f9:62:
f8:68:55:8d:10:0c:0f:91:93:de:8d:bc:cd:ea:68:a2:8d:37:
c7:53:32:cd:e1:d5:d3:3a:c4:23:8e:3e:03:a3:d2:ef:38:10:
68:22:8b:df:7a:2f:d9:0d:ca:d4:2c:3c:6c:8d:5b:5e:39:05:
a3:70:d5:58:3a:b4:80:49:01:60:83:02:23:ab:1f:55:56:97:
74:17:73:f7:69:10:71:31:d7:5e:21:4f:05:11:57:dc:ca:cb:
47:81:09:22:48:54:bc:90:ea:2c:2e:aa:db:82:9c:00:9f:b7:
0a:6e:6e:dc:6f:88:db:38:bc:75:df:b0:04:6f:94:7b:33:9d:
75:79:6f:06:77:17:c3:f0:50:d3:50:22:1f:eb:0d:b1:25:74:
76:91:26:7e:52:8f:56:22:d3:30:71:89:54:1e:72:18:b3:50:
8c:8e:e1:0e:e6:d2:3d:58:19:82:1b:94:a6:e4:a7:81:f7:41:
71:52:c1:d8:14:a6:fd:8d:42:ff:11:25:5d:74:4c:cd:1f:33:
29:37:7d:2d:00:0e:03:b2:8a:77:f0:78:5f:df:7f:f5:f8:e5:
6d:2f:29:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoNubpl1iFT0DnzXTUdZMgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTEzM2VhMWU0MGZjMTNlMDc0ZTMyNzcxMGE1MzQ0YTk2
MGI1YzAwHhcNMjUxMDIyMjEwMTA2WhcNMjUxMDIzMjEwMTA2WjAzMTEwLwYDVQQD
Eyg2NmQ3YzFmMWE3OWQ0MTk4YmExNThmYzJmZmI1ZWRkZmRlMzM0OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+3RhKJ9Z9u9InLCVZ/UvqeTEyem
RWB8SGp1nbCzUE+hqSlWvbuHjEbEpJVPScRH5iMMei9kDG6Eg9KBGfENXH10EdTH
2wsBqmlU9fk/NIm9qnd0j5PFUdiCrKzR61jLevZA3dG7rcXbNHifrYIg/1NFpd3Q
A/sZGzlmT9VojzAaUQ/Dt6MsmeWHFhZ/n0pT5niURU6eTy6dMOfxDYKHFHiGaGBy
LHL/5N7FWY8o2G8vd3HeXvzzyRb1bX590IMw53iCOA5Bq2fcCFdRXZXVjhmVNbCc
eVQbkV9fZvIecw07zNnLUwodzbe5WSixxkhe87M+jXliDF6qa9Ngm0gOPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbXwfGnnUGYuhWPwv+17d/eM0ndMB8GA1UdIwQY
MBaAFHThM+oeQPwT4HTjJ3EKU0SpYLXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMt
MmNiOWUyMTcyZjk3LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xZjU1ODctY2I5Mi00OTE3LThjZjMtMmNiOWUyMTcyZjk3
LzEvZE9FejZoNUFfQlBnZE9NbmNRcFRSS2xndGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGA9ofAB
49RTgQvnL27GbjYaQxP8pGAVDr+TEjmGTNTgy/li+GhVjRAMD5GT3o28zepooo03
x1MyzeHV0zrEI44+A6PS7zgQaCKL33ov2Q3K1Cw8bI1bXjkFo3DVWDq0gEkBYIMC
I6sfVVaXdBdz92kQcTHXXiFPBRFX3MrLR4EJIkhUvJDqLC6q24KcAJ+3Cm5u3G+I
2zi8dd+wBG+UezOddXlvBncXw/BQ01AiH+sNsSV0dpEmflKPViLTMHGJVB5yGLNQ
jI7hDubSPVgZghuUpuSngfdBcVLB2BSm/Y1C/xElXXRMzR8zKTd9LQAOA7KKd/B4
X99/9fjlbS8p7A==
-----END CERTIFICATE-----
Generated at Wed Oct 22 23:07:36 2025 by rpki-client