Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: 6ExtB9WZ6sIqs3n4e9WP/e9KVOytqxG6G16s9nA5WVc=
Subject key identifier: 8F:D5:3F:0A:D8:B7:E4:53:7B:D3:57:22:8C:4F:48:C3:A5:EE:B9:A5
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019A24AF2AF26AA93CF9AAA3E7148D719DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0599
Signing time: Mon 27 Oct 2025 08:00:50 +0000
Manifest this update: Mon 27 Oct 2025 08:00:50 +0000
Manifest next update: Tue 28 Oct 2025 08:00:50 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: Uv7Gxdl+jc0leCsjNPPwJ6M+TSbgYc+ExjLTz2A6FLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:2a:f2:6a:a9:3c:f9:aa:a3:e7:14:8d:71:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Oct 27 08:00:50 2025 GMT
Not After : Oct 28 08:00:50 2025 GMT
Subject: CN=8fd53f0ad8b7e4537bd357228c4f48c3a5eeb9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:ce:69:d4:bb:55:f5:36:ef:43:db:ff:69:
80:4e:e9:f5:dd:a9:d2:16:2d:86:81:2f:59:3f:6e:
16:b1:8a:8c:5f:81:15:02:21:16:41:0d:fd:68:6a:
5f:ba:f6:7c:11:42:ee:32:5f:c7:d7:f0:c9:a8:57:
8d:40:b9:ca:be:5a:9a:61:44:e8:4d:43:42:85:f8:
57:34:8d:56:4e:23:68:b0:68:c4:72:2e:99:55:4b:
7c:34:88:a3:91:23:2d:ab:98:92:f0:09:2e:49:da:
39:51:f7:ba:bb:70:8c:dc:65:bd:9e:04:48:9b:6e:
24:b3:8b:c2:17:eb:c0:cd:5c:48:5b:47:15:f4:e2:
b8:85:78:c7:9e:b9:62:36:da:10:a6:86:92:96:f0:
2b:e6:45:c4:d6:72:d6:b6:f6:cf:7d:17:9e:ec:b8:
93:20:3d:6f:64:65:28:11:93:0b:db:82:79:f6:73:
f2:f1:0d:54:61:dc:d5:44:a5:79:93:ca:c5:f7:a3:
1e:68:73:39:2a:61:17:dc:ec:5d:e3:26:e9:5f:c8:
29:b4:b7:c5:b3:cc:49:28:f0:90:24:43:cf:bb:d0:
36:3c:1b:f8:56:b6:be:2a:7a:98:53:06:8d:29:b3:
c3:eb:b6:e5:ff:28:dd:5d:bc:96:c9:0e:a5:e2:14:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:3F:0A:D8:B7:E4:53:7B:D3:57:22:8C:4F:48:C3:A5:EE:B9:A5
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:64:ab:ae:36:fb:a5:88:6b:ce:76:61:ab:ae:d3:22:04:c0:
0b:84:fe:e3:1f:54:61:e4:37:8c:8d:7b:be:65:9c:d4:c3:ce:
b7:b0:fa:d4:6d:97:7b:59:14:ac:05:b8:2a:9c:79:2d:a3:ea:
62:a2:c1:8f:a7:f2:e9:c3:cd:98:b2:10:d9:17:e4:c9:fc:ae:
80:12:6c:ed:d8:2d:3e:76:57:d5:76:7b:9c:65:68:f2:6f:86:
9d:7d:b8:fd:51:64:8d:25:ef:3f:a3:72:88:dd:6a:b7:2b:25:
59:93:bd:a6:07:09:0d:f2:01:4b:5e:18:6b:a9:2f:cb:55:69:
7e:ce:67:bc:97:08:e6:2c:8a:5e:01:79:08:de:0e:f5:40:1f:
a0:38:59:0c:1a:4e:e0:62:7d:9c:c8:6c:8b:dd:32:bd:a2:51:
ea:c1:3f:5c:c7:3b:fc:13:9e:03:5a:97:76:f2:df:2c:cc:62:
84:24:b9:79:93:20:1d:6b:88:d0:b8:6c:67:62:1d:85:25:19:
70:ff:0b:af:42:08:00:c1:64:96:87:77:0d:d1:85:d9:50:a8:
2e:64:a2:29:4b:f2:bd:c6:4a:08:6c:72:8d:ee:c2:42:0a:dc:
59:36:7b:0b:a7:b1:3a:fa:09:4d:6a:c5:45:6f:63:a1:25:71:
76:13:99:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokryryaqk8+aqj5xSNcZ25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi
NmE1YWUwHhcNMjUxMDI3MDgwMDUwWhcNMjUxMDI4MDgwMDUwWjAzMTEwLwYDVQQD
Eyg4ZmQ1M2YwYWQ4YjdlNDUzN2JkMzU3MjI4YzRmNDhjM2E1ZWViOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfzOadS7VfU270Pb/2mATun13anS
Fi2GgS9ZP24WsYqMX4EVAiEWQQ39aGpfuvZ8EULuMl/H1/DJqFeNQLnKvlqaYUTo
TUNChfhXNI1WTiNosGjEci6ZVUt8NIijkSMtq5iS8AkuSdo5Ufe6u3CM3GW9ngRI
m24ks4vCF+vAzVxIW0cV9OK4hXjHnrliNtoQpoaSlvAr5kXE1nLWtvbPfRee7LiT
ID1vZGUoEZML24J59nPy8Q1UYdzVRKV5k8rF96MeaHM5KmEX3Oxd4ybpX8gptLfF
s8xJKPCQJEPPu9A2PBv4Vra+KnqYUwaNKbPD67bl/yjdXbyWyQ6l4hQ7eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/VPwrYt+RTe9NXIoxPSMOl7rmlMB8GA1UdIwQY
MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt
M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1
LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmSrrjb7
pYhrznZhq67TIgTAC4T+4x9UYeQ3jI17vmWc1MPOt7D61G2Xe1kUrAW4Kpx5LaPq
YqLBj6fy6cPNmLIQ2RfkyfyugBJs7dgtPnZX1XZ7nGVo8m+GnX24/VFkjSXvP6Ny
iN1qtyslWZO9pgcJDfIBS14Ya6kvy1Vpfs5nvJcI5iyKXgF5CN4O9UAfoDhZDBpO
4GJ9nMhsi90yvaJR6sE/XMc7/BOeA1qXdvLfLMxihCS5eZMgHWuI0LhsZ2IdhSUZ
cP8Lr0IIAMFklod3DdGF2VCoLmSiKUvyvcZKCGxyje7CQgrcWTZ7C6exOvoJTWrF
RW9joSVxdhOZ1w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:53:29 2025 by rpki-client