Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: xhN2k8naW6TYyWw1Dd8KMwJ/FFCb4p1JMLR6CVHuALg=
Subject key identifier: EE:EB:67:4A:58:92:7E:2F:1C:48:89:0C:E7:63:2B:93:5D:78:6E:2F
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019A24E6384F4E5F1E4D43CADE2A5088B85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0C3D
Signing time: Mon 27 Oct 2025 09:00:58 +0000
Manifest this update: Mon 27 Oct 2025 09:00:58 +0000
Manifest next update: Tue 28 Oct 2025 09:00:58 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: WFTFr63hccC+3VTU0A+IgiN+GleYYUMJ1qO3grOkrIQ=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:38:4f:4e:5f:1e:4d:43:ca:de:2a:50:88:b8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Oct 27 09:00:58 2025 GMT
Not After : Oct 28 09:00:58 2025 GMT
Subject: CN=eeeb674a58927e2f1c48890ce7632b935d786e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:0a:61:da:18:b1:52:bc:f4:cd:ff:51:67:
9b:e4:08:99:3c:53:bd:bc:6b:30:69:22:54:5e:50:
a0:2e:57:f2:79:17:b6:7a:47:9c:02:8d:75:a6:ec:
e4:19:bd:ba:28:06:01:da:19:b7:90:3d:b1:00:ce:
8d:a4:b3:81:0d:5e:86:d5:8f:97:9e:74:84:bb:19:
f7:b3:88:24:47:e9:a2:e6:a5:d3:87:d5:c7:5d:c5:
24:0b:98:80:28:b5:fb:c2:73:6a:ef:45:f7:4d:a3:
18:0d:ca:d9:89:c0:54:b0:2a:40:59:6e:ec:f1:00:
47:61:b2:0a:cb:a5:1d:84:2c:6d:cc:0d:95:b4:08:
ff:c9:34:39:54:22:70:95:e0:59:87:89:ed:79:af:
80:a3:48:95:98:5e:35:7f:15:c8:d3:8f:d1:86:80:
38:b7:c6:c6:fe:35:35:84:df:75:39:3f:d8:48:55:
2a:ca:cd:7a:0e:b3:5c:8b:f7:9c:6a:73:37:14:ad:
ad:8a:5e:72:8e:52:33:67:b0:18:77:0c:eb:7e:85:
65:e3:be:71:fb:18:3f:00:22:e9:11:55:88:57:f2:
7c:61:fc:fc:19:45:2d:bc:d7:ed:18:e6:bc:9a:66:
34:82:3d:e0:99:cb:86:8f:bc:da:07:f3:11:be:d6:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:67:4A:58:92:7E:2F:1C:48:89:0C:E7:63:2B:93:5D:78:6E:2F
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a6:36:e2:fc:2c:9d:8b:c1:88:4e:52:6b:c3:aa:81:bb:f1:
e6:39:9f:0a:81:f0:69:b8:5d:8f:55:7d:22:0f:a9:fb:b4:1a:
07:24:31:d3:84:66:f6:7d:60:c7:da:09:82:8c:ed:a1:ee:fb:
93:13:db:91:23:76:44:34:6f:4e:fc:ed:65:39:a8:f8:38:02:
98:e6:1b:78:c8:44:9d:b5:53:e0:76:79:b6:47:a0:7c:f5:9e:
c6:23:95:f0:98:71:b1:f2:d1:a0:0a:d7:48:18:bd:e6:79:c4:
73:7e:44:6e:64:7d:74:19:ed:fb:c9:eb:3c:53:69:8c:42:77:
1c:0d:b6:7b:eb:ea:16:f3:26:91:7c:74:b8:e0:35:33:7f:3e:
38:98:6f:f5:3e:0b:88:30:60:4f:a5:04:2e:58:bf:b2:76:d9:
62:c9:69:86:25:62:7d:13:af:b4:17:46:73:96:27:4a:d8:3d:
73:0a:e5:a0:5c:df:b7:94:30:1d:f8:f2:54:71:71:d4:55:d3:
7f:27:e1:ff:8e:0a:b1:b2:d4:a7:4c:33:6d:34:26:4d:3e:51:
ef:04:ae:71:e3:f0:7a:a8:52:cf:b5:80:43:97:d7:f0:1a:82:
97:1f:3d:bd:f4:d0:9a:23:56:68:ad:f6:d2:88:aa:96:1d:1a:
0a:54:cb:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5jhPTl8eTUPK3ipQiLheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDExZjU2ODc1YjRjYjdhNThjZWU2Y2I2MDdlZTI1MWNi
ZGY5ODAwHhcNMjUxMDI3MDkwMDU4WhcNMjUxMDI4MDkwMDU4WjAzMTEwLwYDVQQD
EyhlZWViNjc0YTU4OTI3ZTJmMWM0ODg5MGNlNzYzMmI5MzVkNzg2ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jQKYdoYsVK89M3/UWeb5AiZPFO9
vGswaSJUXlCgLlfyeRe2ekecAo11puzkGb26KAYB2hm3kD2xAM6NpLOBDV6G1Y+X
nnSEuxn3s4gkR+mi5qXTh9XHXcUkC5iAKLX7wnNq70X3TaMYDcrZicBUsCpAWW7s
8QBHYbIKy6UdhCxtzA2VtAj/yTQ5VCJwleBZh4ntea+Ao0iVmF41fxXI04/RhoA4
t8bG/jU1hN91OT/YSFUqys16DrNci/ecanM3FK2til5yjlIzZ7AYdwzrfoVl475x
+xg/ACLpEVWIV/J8Yfz8GUUtvNftGOa8mmY0gj3gmcuGj7zaB/MRvtYBGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7rZ0pYkn4vHEiJDOdjK5NdeG4vMB8GA1UdIwQY
MBaAFKFBH1aHW0y3pYzubLYH7iUcvfmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMt
NzhkODMzZTQxNDZhLzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMtNzhkODMzZTQxNDZh
LzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqY24vws
nYvBiE5Sa8Oqgbvx5jmfCoHwabhdj1V9Ig+p+7QaByQx04Rm9n1gx9oJgoztoe77
kxPbkSN2RDRvTvztZTmo+DgCmOYbeMhEnbVT4HZ5tkegfPWexiOV8JhxsfLRoArX
SBi95nnEc35EbmR9dBnt+8nrPFNpjEJ3HA22e+vqFvMmkXx0uOA1M38+OJhv9T4L
iDBgT6UELli/snbZYslphiVifROvtBdGc5YnStg9cwrloFzft5QwHfjyVHFx1FXT
fyfh/44KsbLUp0wzbTQmTT5R7wSucePweqhSz7WAQ5fX8BqClx89vfTQmiNWaK32
0oiqlh0aClTLLw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 15:02:58 2025 by rpki-client