Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: QmLOiCdDJDCMzlP7YjBrLflK2hnmPlht1VGGfYqJQzQ=
Subject key identifier: 15:E2:C0:7E:D1:F4:3A:C4:60:7D:48:7A:31:DD:29:3F:38:8C:06:C4
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 019A72CA4E0C17D178C01E344426BA57F3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:52 +0000
Manifest this update: Tue 11 Nov 2025 12:00:52 +0000
Manifest next update: Wed 12 Nov 2025 12:00:52 +0000
Files and hashes: 1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=)
2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: Ae5GTxqzOD/Y5nHAVHN3T1fD6ZPgtYMMjkrrwF7fHMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:4e:0c:17:d1:78:c0:1e:34:44:26:ba:57:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Nov 11 12:00:52 2025 GMT
Not After : Nov 12 12:00:52 2025 GMT
Subject: CN=15e2c07ed1f43ac4607d487a31dd293f388c06c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:d1:55:bf:16:78:e0:03:91:7d:4b:cb:34:
57:9a:04:18:0e:26:f8:58:89:fd:a8:b0:e6:65:8c:
80:a6:c0:4d:be:66:97:ea:01:8f:d1:cb:f8:e9:0f:
e9:fb:71:8a:6a:03:ec:21:60:2c:5d:6a:9d:76:8f:
ca:3d:01:f8:c8:5f:2c:eb:d0:a0:61:a4:84:97:af:
a9:d4:30:34:c0:11:e5:c4:6a:07:97:17:ba:58:a3:
ab:4e:dc:40:f7:8d:8f:1d:bc:bc:b4:fa:97:4e:65:
80:f3:49:65:ae:9e:ae:9f:3e:5a:99:4d:70:b1:ab:
30:7d:c5:1a:9a:6e:44:7d:d7:fa:b4:21:87:b8:a5:
47:42:d1:52:bb:30:75:3c:21:5b:84:67:6b:86:a5:
7b:d9:20:62:2f:85:40:a8:70:f8:9b:00:c9:e7:f3:
93:8c:9b:e9:c2:10:f5:f0:28:01:a6:d9:23:5c:e7:
eb:b0:b9:61:dc:e6:e5:6c:8d:00:41:10:ad:46:dc:
36:87:88:d0:ee:72:9a:3d:9f:9d:05:f7:03:e5:b6:
f1:89:49:0a:7a:3f:3e:cc:46:a2:53:63:07:b4:50:
49:17:f4:50:60:ff:a0:2b:c3:6e:a7:33:45:b1:20:
a8:a7:62:9d:76:89:e7:b1:e6:d6:09:53:3d:b3:68:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E2:C0:7E:D1:F4:3A:C4:60:7D:48:7A:31:DD:29:3F:38:8C:06:C4
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9c:22:21:7a:f1:2a:65:0d:36:e2:ee:e7:4a:ce:92:07:83:
89:10:b9:fc:d4:90:6d:2f:ae:51:43:9e:28:67:07:0c:2d:a9:
1f:09:ed:8b:93:3b:53:00:b1:b5:08:70:b7:5e:8e:29:73:2f:
5e:ea:5b:19:0f:9b:e3:42:b0:b4:ff:9b:01:62:c1:54:83:0b:
e9:b4:5b:4b:68:74:4d:7d:22:50:dd:2d:9e:73:cf:cf:0e:0b:
0f:32:64:e0:52:52:cb:c6:de:7a:b6:83:57:09:09:41:f8:88:
31:18:1e:71:26:8c:a9:5b:c3:32:ae:da:30:55:08:4a:a5:fb:
4f:9c:6e:4b:04:90:e2:cc:96:97:83:52:54:da:c0:51:88:08:
84:95:5d:b0:80:ad:bd:76:63:40:7d:ad:0d:cb:eb:b0:15:c7:
e2:28:ab:13:4d:47:20:5a:99:02:78:0f:cd:bd:8a:88:0a:e8:
6c:7c:bd:8f:14:6b:21:ce:62:50:8d:4e:8f:49:2e:e0:3f:47:
df:72:03:1f:73:aa:e6:d9:c5:8f:e6:a2:03:27:8c:85:aa:62:
46:e2:8a:87:9c:52:44:05:78:06:ad:48:34:4a:97:12:ef:d2:
ee:1f:f9:50:60:44:73:1d:05:4b:5b:59:70:4a:3d:f2:b9:1d:
f4:2b:e2:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyk4MF9F4wB40RCa6V/P/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZWQwYmE4YjQ2ZWYyNTFlNWEwNThhNjRhMjFiMzA3ZDM2
NTBkZGMwHhcNMjUxMTExMTIwMDUyWhcNMjUxMTEyMTIwMDUyWjAzMTEwLwYDVQQD
EygxNWUyYzA3ZWQxZjQzYWM0NjA3ZDQ4N2EzMWRkMjkzZjM4OGMwNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gTRVb8WeOADkX1LyzRXmgQYDib4
WIn9qLDmZYyApsBNvmaX6gGP0cv46Q/p+3GKagPsIWAsXWqddo/KPQH4yF8s69Cg
YaSEl6+p1DA0wBHlxGoHlxe6WKOrTtxA942PHby8tPqXTmWA80llrp6unz5amU1w
saswfcUamm5Efdf6tCGHuKVHQtFSuzB1PCFbhGdrhqV72SBiL4VAqHD4mwDJ5/OT
jJvpwhD18CgBptkjXOfrsLlh3OblbI0AQRCtRtw2h4jQ7nKaPZ+dBfcD5bbxiUkK
ej8+zEaiU2MHtFBJF/RQYP+gK8NupzNFsSCop2KddonnsebWCVM9s2ip3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXiwH7R9DrEYH1IejHdKT84jAbEMB8GA1UdIwQY
MBaAFKLtC6i0bvJR5aBYpkohswfTZQ3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut
NzkxYzVhODUzOTBkLzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk
LzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZwiIXrx
KmUNNuLu50rOkgeDiRC5/NSQbS+uUUOeKGcHDC2pHwnti5M7UwCxtQhwt16OKXMv
XupbGQ+b40KwtP+bAWLBVIML6bRbS2h0TX0iUN0tnnPPzw4LDzJk4FJSy8beeraD
VwkJQfiIMRgecSaMqVvDMq7aMFUISqX7T5xuSwSQ4syWl4NSVNrAUYgIhJVdsICt
vXZjQH2tDcvrsBXH4iirE01HIFqZAngPzb2KiArobHy9jxRrIc5iUI1Oj0ku4D9H
33IDH3Oq5tnFj+aiAyeMhapiRuKKh5xSRAV4Bq1INEqXEu/S7h/5UGBEcx0FS1tZ
cEo98rkd9Cvi0A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:57 2025 by rpki-client