Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier: HDYiEDsNiniwruldPnwPilxQrFBT82p44m8674vbgtg=
Subject key identifier: 3E:EE:C1:C3:5D:64:09:0C:78:1D:57:40:A1:F2:6A:F4:14:BB:C4:0F
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial: 019A71EED8F017B98D01CA0ECB116C0DA1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number: 122B
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: HXlRn4ZX7o2mgY9YWEC5JWKZsTbDCKqGOMZEIygZsJo=)
2: oCmBMF8iI8CutVf6sdX1dTs5wPg.roa (hash: TfgX1fiboG0xroG328eMyAxUa0ejT6atD6RIyf61++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d8:f0:17:b9:8d:01:ca:0e:cb:11:6c:0d:a1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=3eeec1c35d64090c781d5740a1f26af414bbc40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:3c:45:51:71:e9:91:8c:34:12:33:0e:30:
37:c5:61:ae:b8:c5:42:fe:9f:16:85:be:a1:51:9a:
03:cf:47:13:a3:c8:c8:ed:82:3f:4f:46:19:b2:53:
16:21:78:e5:71:2b:ac:ee:ba:8c:52:d3:45:97:7a:
ec:d6:2b:0a:06:e3:0c:5b:a4:e5:f9:f7:13:04:76:
71:b6:57:99:a1:0a:ba:2e:f2:a5:18:5e:de:64:b1:
0c:f5:eb:3f:7a:0c:d5:f4:76:85:5f:4d:79:76:07:
6d:fe:c0:76:ed:8b:ff:46:ba:c1:ec:35:4f:fb:e2:
81:1c:77:2d:55:95:ca:f6:a5:5c:ce:8a:c7:9e:5a:
5e:38:d4:b9:a8:43:60:4b:8c:64:78:00:e6:6e:dc:
ca:86:6c:f2:15:c8:02:41:ff:d2:b7:f0:04:d6:60:
3c:7c:25:e0:dc:8d:57:18:32:1a:2b:d1:aa:0a:cc:
4f:3c:4f:5c:93:77:3e:c3:cf:a0:0d:04:b9:11:0e:
0f:3d:a7:14:e9:78:ab:a2:e9:40:37:d1:84:a4:de:
c8:62:22:d7:9a:72:de:e5:9c:76:c3:28:83:2e:52:
c4:8d:1a:15:33:3e:ec:b8:2c:da:5d:79:a6:20:b2:
54:f6:48:60:26:4e:70:df:8a:c1:72:6f:59:0c:2a:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:C1:C3:5D:64:09:0C:78:1D:57:40:A1:F2:6A:F4:14:BB:C4:0F
X509v3 Authority Key Identifier:
keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:da:d1:54:3f:58:59:a0:d1:be:e7:2f:37:e4:2e:a9:92:b5:
7e:ce:21:41:e2:cb:72:c9:c5:b7:46:95:e4:61:18:93:ac:b4:
94:a8:8f:9f:8b:3b:45:41:d2:92:5c:b2:88:12:d7:c3:d7:f8:
0f:35:e4:32:e9:8a:6d:fb:fb:7e:b8:ff:62:1d:24:b3:8f:7f:
0a:0c:84:b9:3e:d8:ea:6b:26:a3:d3:fc:39:5d:fc:4d:48:60:
e3:02:5c:9b:56:cc:e0:4c:b0:e8:ca:ee:d4:26:51:11:f9:d1:
ad:07:36:20:5e:1d:07:42:5b:67:65:a9:b0:6a:20:8a:5e:9e:
2d:69:36:b5:71:57:27:8a:5f:e5:eb:60:42:05:b0:97:45:c0:
09:5c:50:7b:63:87:1f:e1:42:b4:7c:5e:ed:1c:50:d5:f5:a7:
84:90:5e:2d:f2:d5:24:23:5c:32:e1:d0:a9:b8:a1:51:4a:16:
6d:ce:09:54:93:95:94:0b:1b:04:cb:eb:03:f7:0e:e5:9a:5f:
8c:6b:bc:af:0d:13:37:50:e0:16:31:d5:3a:28:4a:dd:ac:33:
33:b3:92:5b:8f:f8:b0:10:28:f4:a1:a1:1d:40:82:b0:7f:1c:
c1:08:74:34:d3:c1:2a:7a:ff:70:3a:a7:1a:cc:82:a6:40:b5:
6d:3d:80:c8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpx7tjwF7mNAcoOyxFsDaH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjM4MGI2Njc1YjljY2Q1ZjgxMmUwNjlmZmYxNzU0Nzhm
YjM4YTQwHhcNMjUxMTExMDgwMTA5WhcNMjUxMTEyMDgwMTA5WjAzMTEwLwYDVQQD
EygzZWVlYzFjMzVkNjQwOTBjNzgxZDU3NDBhMWYyNmFmNDE0YmJjNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaw8RVFx6ZGMNBIzDjA3xWGuuMVC
/p8Whb6hUZoDz0cTo8jI7YI/T0YZslMWIXjlcSus7rqMUtNFl3rs1isKBuMMW6Tl
+fcTBHZxtleZoQq6LvKlGF7eZLEM9es/egzV9HaFX015dgdt/sB27Yv/RrrB7DVP
++KBHHctVZXK9qVczorHnlpeONS5qENgS4xkeADmbtzKhmzyFcgCQf/St/AE1mA8
fCXg3I1XGDIaK9GqCsxPPE9ck3c+w8+gDQS5EQ4PPacU6XiroulAN9GEpN7IYiLX
mnLe5Zx2wyiDLlLEjRoVMz7suCzaXXmmILJU9khgJk5w34rBcm9ZDCr//wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD7uwcNdZAkMeB1XQKHyavQUu8QPMB8GA1UdIwQY
MBaAFPvzgLZnW5zNX4EuBp//F1R4+zikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fT0F0bWRibk0xZmdTNEduXzhYVkhqN09LUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDEwODEzLWZlNjEtNDAzMy1hNDMz
LTVlZTliNjIyNDZkYi8xLzEtX09BdG1kYm5NMWZnUzRHbl84WFZIajdPS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZjL2QxMDgxMy1mZTYxLTQwMzMtYTQzMy01ZWU5YjYyMjQ2
ZGIvMS8xLV9PQXRtZGJuTTFmZ1M0R25fOFhWSGo3T0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNrR
VD9YWaDRvucvN+QuqZK1fs4hQeLLcsnFt0aV5GEYk6y0lKiPn4s7RUHSklyyiBLX
w9f4DzXkMumKbfv7frj/Yh0ks49/CgyEuT7Y6msmo9P8OV38TUhg4wJcm1bM4Eyw
6Mru1CZREfnRrQc2IF4dB0JbZ2WpsGogil6eLWk2tXFXJ4pf5etgQgWwl0XACVxQ
e2OHH+FCtHxe7RxQ1fWnhJBeLfLVJCNcMuHQqbihUUoWbc4JVJOVlAsbBMvrA/cO
5ZpfjGu8rw0TN1DgFjHVOihK3awzM7OSW4/4sBAo9KGhHUCCsH8cwQh0NNPBKnr/
cDqnGsyCpkC1bT2AyA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:23 2025 by rpki-client