Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
File: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft (raw, json)
Hash identifier: B0ggrig2y5kYkOEZtlm2HCM8yuek5CChVOc4xbE4uaQ=
Subject key identifier: 60:0B:22:33:A5:46:49:2A:87:CC:B1:DB:6F:2D:6C:B0:91:B3:95:92
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019A202D79F000732322BD702F8E9B2A3CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
Manifest number: 0F23
Signing time: Sun 26 Oct 2025 11:00:42 +0000
Manifest this update: Sun 26 Oct 2025 11:00:42 +0000
Manifest next update: Mon 27 Oct 2025 11:00:42 +0000
Files and hashes: 1: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (hash: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=)
2: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (hash: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=)
3: Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl (hash: jGimYyxPq3+A7YDCgNdUVcDHSDK7mbjWUe4RaLcQdfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:79:f0:00:73:23:22:bd:70:2f:8e:9b:2a:3c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Oct 26 11:00:42 2025 GMT
Not After : Oct 27 11:00:42 2025 GMT
Subject: CN=600b2233a546492a87ccb1db6f2d6cb091b39592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d0:2d:47:48:30:fc:fe:19:0f:e8:47:db:eb:
26:36:7e:7b:53:ac:49:3a:d2:d9:da:b4:95:21:12:
df:e1:68:40:15:2f:e3:df:08:4e:e9:0e:ad:4b:5d:
fb:1e:92:a6:f3:8f:cd:32:bb:7c:1d:31:86:13:8e:
06:96:63:a1:85:fc:7d:81:b8:c4:4f:14:e5:f2:b2:
7d:dc:b1:42:cb:7f:2d:65:5e:dc:48:e0:08:7f:26:
f2:76:b5:a2:19:a1:47:f5:b2:d3:ad:81:f3:b6:9f:
73:c2:9b:e2:41:2c:e8:02:42:5d:1c:59:e7:fa:ef:
7a:60:49:cc:77:ae:73:bc:46:ff:1e:5f:3e:71:c7:
e1:b2:3a:79:90:55:07:65:c7:57:c0:9d:5d:77:e4:
ca:78:02:a9:4a:96:2e:14:17:1f:7e:18:80:51:99:
1c:0e:f5:c8:84:b7:aa:b7:60:ac:09:03:cb:a6:e7:
d4:18:d5:4a:a1:e9:03:ca:fc:60:1d:d7:60:8c:39:
d3:51:91:0f:a9:90:f1:b7:a0:37:6c:5e:ec:43:40:
e8:a5:d6:5f:45:c6:cf:74:78:85:d5:4e:c0:65:86:
73:e2:f6:32:11:b9:3c:b8:73:bb:78:90:fc:4e:46:
32:60:ff:d7:45:8d:78:55:b8:65:d0:d9:9e:84:a1:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:22:33:A5:46:49:2A:87:CC:B1:DB:6F:2D:6C:B0:91:B3:95:92
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a9:35:df:2f:e5:1b:68:65:a3:23:37:49:18:7b:48:70:8d:
e9:9d:e4:46:99:82:5f:a9:96:f4:5d:3b:6f:38:b3:9b:ac:6e:
1b:f1:b6:49:9e:06:c5:2f:f1:f4:8e:d4:4e:2a:c4:ff:57:4e:
52:80:99:9c:a0:74:ce:d7:09:dd:e2:83:8a:bb:32:2d:bf:0c:
ad:04:2b:3b:91:53:bb:38:aa:9c:35:f1:47:4f:04:b7:76:4a:
d1:54:4e:78:c9:c2:f7:2a:26:ba:8a:fc:5b:35:e2:39:98:e8:
f3:27:e7:a6:08:f3:9c:b3:82:ab:02:96:1a:34:c4:a3:fc:5a:
d4:8f:2a:5b:fb:3c:1e:0d:13:8e:2e:25:aa:a3:81:a2:54:3c:
89:98:9c:50:32:1b:e4:e4:b9:ae:fd:0d:d0:e6:5e:b6:37:ab:
c1:52:91:a2:43:11:38:88:44:15:dc:c1:d9:2c:46:4e:57:84:
22:25:bd:64:b3:2c:88:70:60:ea:cc:53:a7:dc:d8:7e:dc:aa:
74:17:ad:bb:de:d2:11:74:31:1e:72:87:d9:8b:ce:55:23:6e:
52:b0:d5:a6:f4:b0:f1:70:07:f7:ac:fd:39:8b:71:d8:4c:7f:
ae:60:64:6b:9a:c4:1b:6f:4e:9b:a5:f2:9f:2a:f4:c7:1a:36:
ce:af:f1:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogLXnwAHMjIr1wL46bKjzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Y2U0YzBhYmUyNzg1ZDQ2YTU1NzE4NTIxNzAzNzA0MjNi
NWM1OWEwHhcNMjUxMDI2MTEwMDQyWhcNMjUxMDI3MTEwMDQyWjAzMTEwLwYDVQQD
Eyg2MDBiMjIzM2E1NDY0OTJhODdjY2IxZGI2ZjJkNmNiMDkxYjM5NTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tAtR0gw/P4ZD+hH2+smNn57U6xJ
OtLZ2rSVIRLf4WhAFS/j3whO6Q6tS137HpKm84/NMrt8HTGGE44GlmOhhfx9gbjE
TxTl8rJ93LFCy38tZV7cSOAIfybydrWiGaFH9bLTrYHztp9zwpviQSzoAkJdHFnn
+u96YEnMd65zvEb/Hl8+ccfhsjp5kFUHZcdXwJ1dd+TKeAKpSpYuFBcffhiAUZkc
DvXIhLeqt2CsCQPLpufUGNVKoekDyvxgHddgjDnTUZEPqZDxt6A3bF7sQ0DopdZf
RcbPdHiF1U7AZYZz4vYyEbk8uHO7eJD8TkYyYP/XRY14Vbhl0NmehKHhawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGALIjOlRkkqh8yx228tbLCRs5WSMB8GA1UdIwQY
MBaAFDnOTAq+J4XUalVxhSFwNwQjtcWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYt
OWY0NDI5ZjMzODFlLzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC80OTIzZTktNDc2NC00MTFjLTg1OTYtOWY0NDI5ZjMzODFl
LzEvT2M1TUNyNG5oZFJxVlhHRklYQTNCQ08xeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6k13y/l
G2hloyM3SRh7SHCN6Z3kRpmCX6mW9F07bzizm6xuG/G2SZ4GxS/x9I7UTirE/1dO
UoCZnKB0ztcJ3eKDirsyLb8MrQQrO5FTuziqnDXxR08Et3ZK0VROeMnC9yomuor8
WzXiOZjo8yfnpgjznLOCqwKWGjTEo/xa1I8qW/s8Hg0Tji4lqqOBolQ8iZicUDIb
5OS5rv0N0OZetjerwVKRokMROIhEFdzB2SxGTleEIiW9ZLMsiHBg6sxTp9zYftyq
dBetu97SEXQxHnKH2YvOVSNuUrDVpvSw8XAH96z9OYtx2Ex/rmBka5rEG29Om6Xy
nyr0xxo2zq/xgg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:24:48 2025 by rpki-client