Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: tTcQXtKQfkwlt+ohOQY6pN/hmafNfjDcHpst7wjEzhU=
Subject key identifier: 0E:C7:60:AC:EB:30:6F:47:A7:FA:A5:5E:11:88:AB:D0:C3:80:C5:D6
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 019A33EC431081108A9B6ED9DE82992356CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0C58
Signing time: Thu 30 Oct 2025 07:01:52 +0000
Manifest this update: Thu 30 Oct 2025 07:01:52 +0000
Manifest next update: Fri 31 Oct 2025 07:01:52 +0000
Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: DJSMMzpX8jZ24mLqUW+6I1QmGU2M3U6EDPTMmr07zLY=)
2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:ec:43:10:81:10:8a:9b:6e:d9:de:82:99:23:56:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Oct 30 07:01:52 2025 GMT
Not After : Oct 31 07:01:52 2025 GMT
Subject: CN=0ec760aceb306f47a7faa55e1188abd0c380c5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:3f:ec:0a:4a:5b:74:d5:3e:1a:5f:00:d7:
14:51:2c:c0:d8:08:3c:63:5e:f2:e8:ec:3f:a9:71:
46:d7:7b:12:1a:e8:73:3e:a6:07:18:d7:87:57:5a:
d2:2c:1c:81:20:95:28:27:e8:88:61:04:48:d2:fb:
a1:63:6c:bf:87:79:77:6e:ca:da:7a:23:6e:b0:71:
34:57:76:3b:f5:ad:64:03:d4:c8:86:9f:b3:36:e0:
ba:24:e1:93:dc:d2:81:d1:9b:a8:d1:fb:fa:83:64:
40:ad:2f:15:16:d4:8b:19:f1:40:32:55:41:a3:69:
48:9e:1f:d6:3a:5a:9c:ee:8e:22:f2:2d:db:c4:f3:
c6:b9:96:fe:6c:ba:e9:11:7c:d8:09:06:ea:a0:59:
fb:8c:14:6f:29:f2:c0:d9:e8:e8:14:2a:39:d7:de:
7f:97:92:23:6b:ec:29:0e:ae:07:3d:a3:21:89:35:
ab:82:b1:50:15:f1:b7:d9:1e:96:7f:5d:54:8b:f0:
66:0b:d8:43:71:e4:32:77:0a:de:b7:6e:2b:8a:eb:
c4:32:b2:b7:71:f8:42:9c:99:55:f8:72:b6:83:57:
55:a7:a3:b4:03:2a:22:2d:48:4d:fa:73:85:69:08:
45:cf:14:c6:bd:42:af:8e:35:ff:13:13:01:84:12:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:60:AC:EB:30:6F:47:A7:FA:A5:5E:11:88:AB:D0:C3:80:C5:D6
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:ff:4c:75:8d:7b:37:d0:b0:23:e6:1d:1f:5e:60:51:ee:
fc:fc:51:c5:19:8a:96:2a:c5:6b:29:ae:df:7a:17:d9:53:ae:
15:63:9b:fa:66:e6:0c:7b:fe:9b:f6:ae:8c:77:04:88:e8:83:
af:36:47:e7:02:dc:45:01:c1:21:1c:a6:27:f8:9b:44:f5:de:
8d:92:fb:4f:d0:6e:57:19:24:4c:73:b0:68:ca:bd:81:ce:c0:
25:4b:8f:6d:ca:79:ba:0e:cf:78:7a:fa:6f:d1:25:ac:39:a5:
c4:38:05:c8:9d:62:97:77:30:02:c0:95:c5:9c:9b:8a:ca:00:
9c:0a:7d:ec:f9:5a:2d:59:2a:10:19:6d:18:b0:52:2c:36:5f:
21:1c:05:e5:0f:58:28:de:de:e8:72:58:86:24:1a:9a:5a:96:
d7:45:66:bd:56:36:7a:44:2a:3a:36:5d:5b:34:f5:f2:26:b1:
31:d0:98:cd:3b:52:e3:68:be:63:c1:3e:59:a9:ac:12:ab:27:
60:3b:66:e2:b9:46:0a:e0:07:a8:c9:b4:2d:f1:e2:79:12:45:
76:76:a3:4b:db:b9:96:45:71:2b:03:bc:0a:ce:f0:70:b9:9c:
d5:bc:31:a5:46:79:a5:fa:0d:30:fe:0e:a6:20:0d:27:e4:1b:
5a:8f:7d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoz7EMQgRCKm27Z3oKZI1bOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh
MGZmNDMwHhcNMjUxMDMwMDcwMTUyWhcNMjUxMDMxMDcwMTUyWjAzMTEwLwYDVQQD
EygwZWM3NjBhY2ViMzA2ZjQ3YTdmYWE1NWUxMTg4YWJkMGMzODBjNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApco/7ApKW3TVPhpfANcUUSzA2Ag8
Y17y6Ow/qXFG13sSGuhzPqYHGNeHV1rSLByBIJUoJ+iIYQRI0vuhY2y/h3l3bsra
eiNusHE0V3Y79a1kA9TIhp+zNuC6JOGT3NKB0Zuo0fv6g2RArS8VFtSLGfFAMlVB
o2lInh/WOlqc7o4i8i3bxPPGuZb+bLrpEXzYCQbqoFn7jBRvKfLA2ejoFCo5195/
l5Ija+wpDq4HPaMhiTWrgrFQFfG32R6Wf11Ui/BmC9hDceQydwret24riuvEMrK3
cfhCnJlV+HK2g1dVp6O0AyoiLUhN+nOFaQhFzxTGvUKvjjX/ExMBhBINfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7HYKzrMG9Hp/qlXhGIq9DDgMXWMB8GA1UdIwQY
MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt
NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm
LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI27/THWN
ezfQsCPmHR9eYFHu/PxRxRmKlirFaymu33oX2VOuFWOb+mbmDHv+m/aujHcEiOiD
rzZH5wLcRQHBIRymJ/ibRPXejZL7T9BuVxkkTHOwaMq9gc7AJUuPbcp5ug7PeHr6
b9ElrDmlxDgFyJ1il3cwAsCVxZybisoAnAp97PlaLVkqEBltGLBSLDZfIRwF5Q9Y
KN7e6HJYhiQamlqW10VmvVY2ekQqOjZdWzT18iaxMdCYzTtS42i+Y8E+WamsEqsn
YDtm4rlGCuAHqMm0LfHieRJFdnajS9u5lkVxKwO8Cs7wcLmc1bwxpUZ5pfoNMP4O
piANJ+QbWo999A==
-----END CERTIFICATE-----
Generated at Thu Oct 30 08:21:46 2025 by rpki-client