Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: T9JjAvs+U7/zZeSb9UqgytLD7LXAVFdEhAwTfHklOS0=
Subject key identifier: C0:5A:A6:D2:40:55:51:D2:FD:B6:E2:A3:45:AA:C6:A3:63:B9:3A:3C
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 019A71B77239F984C9E659A84B46D00E02D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: sDiFz1zoqlzQYD/FaJ81iPTZIaond6nB716qvr+FEC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:72:39:f9:84:c9:e6:59:a8:4b:46:d0:0e:02:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=c05aa6d2405551d2fdb6e2a345aac6a363b93a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:06:d9:25:03:97:24:2d:b1:fa:82:1c:c8:
3a:dd:7f:65:3f:ac:b0:9e:02:18:08:bb:dd:51:cc:
a6:85:5c:ef:95:0a:66:11:ea:73:27:fd:2a:6c:79:
7a:cf:a6:33:af:46:6d:a7:e3:6c:16:e9:d7:b1:97:
ed:00:d4:e2:8c:80:ab:f7:33:05:77:09:94:6b:6c:
4e:30:51:cd:06:24:20:c2:14:68:2c:52:62:45:61:
50:30:e1:8f:13:a8:8f:57:a3:3d:c8:01:4c:04:50:
d8:58:3c:a5:56:30:30:c9:67:b2:a5:40:9d:f0:c8:
42:2a:62:19:2f:43:6a:7a:99:62:a1:7a:7e:63:3d:
0c:8f:93:02:dd:69:0c:b1:8d:f0:f2:71:18:9c:34:
51:58:f1:cf:df:d8:b7:61:e6:d2:c2:a3:c6:9d:79:
e7:69:93:17:ea:32:74:7a:e4:0d:39:66:55:54:fb:
70:7d:a4:62:38:87:46:ce:2a:64:04:d4:92:8d:18:
f3:58:e3:fd:18:f6:1a:40:43:f2:7a:ea:88:58:db:
ea:49:f1:b4:84:ad:fb:6e:ea:0b:f2:76:5c:bd:17:
7d:08:f7:85:94:17:c1:80:61:f7:3a:a6:a8:99:10:
e4:2a:fd:a3:44:99:8d:54:be:19:14:67:9e:f3:f8:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:A6:D2:40:55:51:D2:FD:B6:E2:A3:45:AA:C6:A3:63:B9:3A:3C
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:d8:c3:07:e7:ba:13:e4:41:7b:19:0c:d8:62:db:19:16:
e0:72:17:a7:45:3b:df:a0:fa:b6:aa:dd:72:0f:54:40:61:8b:
2c:8a:97:2c:ab:e6:e5:22:e6:ad:78:7c:89:bf:14:ee:47:5c:
5a:2e:4c:af:c1:08:a6:8b:a3:b0:29:9b:d8:81:3c:8f:a6:52:
9b:1c:b0:ff:2a:95:a9:a9:9d:1b:39:bc:1a:a7:72:d8:9e:aa:
3a:82:61:d9:1c:53:ba:4f:dc:e8:59:d0:a0:71:24:ff:8e:52:
f2:b9:36:9c:7d:e8:ee:fc:64:9a:20:26:61:6d:dd:ed:0c:d0:
db:96:09:c7:70:78:f1:ab:40:5d:2f:62:7c:47:c9:2f:8c:8d:
ec:be:32:28:fb:7e:dd:f8:8a:e6:dd:a6:1c:86:2f:39:5f:1a:
71:86:15:0f:ba:89:55:7c:40:3b:30:69:0a:cf:ef:65:d0:dc:
57:47:f3:e0:f3:ee:81:36:38:89:f9:f2:73:42:54:8b:77:f6:
10:fb:3c:c9:74:29:63:79:b9:b2:ea:ca:e3:6a:1f:cc:35:7c:
7e:d9:b2:b9:02:87:09:cc:0a:1f:f8:4d:98:51:41:fd:fc:52:
a9:69:c8:ae:69:98:6a:ca:36:1c:52:05:c6:bf:d4:48:98:1c:
be:16:02:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3I5+YTJ5lmoS0bQDgLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTliYmIyZGMzNjFmMTQ4YjUxYTc1MDgwZDhlMGI0Zjc4
YTFmODIwHhcNMjUxMTExMDcwMDM4WhcNMjUxMTEyMDcwMDM4WjAzMTEwLwYDVQQD
EyhjMDVhYTZkMjQwNTU1MWQyZmRiNmUyYTM0NWFhYzZhMzYzYjkzYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+sG2SUDlyQtsfqCHMg63X9lP6yw
ngIYCLvdUcymhVzvlQpmEepzJ/0qbHl6z6Yzr0Ztp+NsFunXsZftANTijICr9zMF
dwmUa2xOMFHNBiQgwhRoLFJiRWFQMOGPE6iPV6M9yAFMBFDYWDylVjAwyWeypUCd
8MhCKmIZL0NqeplioXp+Yz0Mj5MC3WkMsY3w8nEYnDRRWPHP39i3YebSwqPGnXnn
aZMX6jJ0euQNOWZVVPtwfaRiOIdGzipkBNSSjRjzWOP9GPYaQEPyeuqIWNvqSfG0
hK37buoL8nZcvRd9CPeFlBfBgGH3OqaomRDkKv2jRJmNVL4ZFGee8/hftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBaptJAVVHS/bbio0WqxqNjuTo8MB8GA1UdIwQY
MBaAFKLpu7LcNh8Ui1GnUIDY4LT3ih+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUt
MDQwMTI5YWViMGJmLzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYTk5MjItZTkyYy00MTA1LTgzNjUtMDQwMTI5YWViMGJm
LzEvb3VtN3N0dzJIeFNMVWFkUWdOamd0UGVLSDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC/Ywwfn
uhPkQXsZDNhi2xkW4HIXp0U736D6tqrdcg9UQGGLLIqXLKvm5SLmrXh8ib8U7kdc
Wi5Mr8EIpoujsCmb2IE8j6ZSmxyw/yqVqamdGzm8Gqdy2J6qOoJh2RxTuk/c6FnQ
oHEk/45S8rk2nH3o7vxkmiAmYW3d7QzQ25YJx3B48atAXS9ifEfJL4yN7L4yKPt+
3fiK5t2mHIYvOV8acYYVD7qJVXxAOzBpCs/vZdDcV0fz4PPugTY4ifnyc0JUi3f2
EPs8yXQpY3m5surK42ofzDV8ftmyuQKHCcwKH/hNmFFB/fxSqWnIrmmYaso2HFIF
xr/USJgcvhYCnA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client