Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: iq4f+jPkqy4hdY9FNX1PghRalZXnQMtY//UXIo7+mRk=
Subject key identifier: A7:1C:4C:C9:3A:E0:77:54:5A:A5:A7:7F:2A:0B:64:09:41:A4:6A:2D
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019A7112E49AAAB265DA9864A063185329E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 10C0
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: iwqKBfvpp95jeIFheXhYH/HWGfnrxvC8R5ttUc+1llE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e4:9a:aa:b2:65:da:98:64:a0:63:18:53:29:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=a71c4cc93ae077545aa5a77f2a0b640941a46a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:50:1a:12:36:46:55:5a:a7:19:e6:0a:8f:
c9:f7:65:bf:a4:9e:20:ae:fb:74:32:1f:4e:c3:f0:
60:df:c4:9d:32:90:ff:a7:64:30:37:58:eb:50:a0:
cf:5b:f9:e2:c8:bc:c7:bb:5f:79:b5:17:11:a6:75:
7e:08:59:01:f7:6c:4c:f3:d3:74:45:a8:43:31:4a:
b2:3c:42:57:18:45:c1:82:b5:1c:be:d0:f1:6a:fd:
71:43:02:75:c7:6b:7d:b3:af:8b:b6:7b:77:1c:6a:
d3:2b:32:ff:20:23:40:e1:68:a2:a4:7f:d8:5d:02:
93:92:3f:6a:ba:d6:96:d5:a1:9b:c6:6f:26:ea:bb:
87:80:4b:18:e6:a0:e5:ec:8f:36:e7:2d:50:39:91:
c3:1d:8d:dd:28:f6:b2:99:4c:67:8b:30:c2:06:24:
ed:01:6d:c7:4c:e9:ed:29:a1:09:6f:01:9a:c2:99:
22:da:c0:55:e1:11:dd:a5:d6:6d:fe:58:95:86:a1:
ee:01:d5:c8:1d:80:25:60:16:d9:73:1d:8b:5b:3f:
ce:ba:f1:94:41:c4:58:67:b0:97:8d:73:d1:e2:5d:
1a:ca:c5:4b:d3:32:0f:84:65:b5:b8:80:9b:ca:bb:
72:44:53:ea:f6:78:72:82:df:57:aa:ec:06:76:cf:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:4C:C9:3A:E0:77:54:5A:A5:A7:7F:2A:0B:64:09:41:A4:6A:2D
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ee:01:e2:7c:50:2d:55:2f:e1:6f:f5:9b:ed:21:1d:89:5b:
a1:c6:0f:31:cb:4b:45:1f:b5:fe:26:d6:81:28:36:c8:fa:df:
6d:0e:6f:7c:5d:a6:33:b5:ad:64:5f:2f:bc:f9:61:3b:1a:1b:
00:48:fb:b0:05:1e:33:e9:8e:28:c9:6a:90:d2:2f:62:5f:03:
9a:f3:f2:59:64:b2:a9:bf:67:b3:f3:5e:e8:59:8a:33:e7:20:
b6:b0:85:6b:f6:8b:58:9a:f4:f7:ff:94:af:a4:76:8b:eb:91:
f1:ce:ce:6d:89:ec:79:ff:70:09:67:a0:9e:05:e6:b8:5d:7f:
08:6b:d8:43:91:e4:ac:01:c0:fd:a2:5d:b9:fa:9a:46:e4:9b:
da:c1:3e:b0:09:0f:83:fc:ee:dc:44:90:2e:e1:48:47:78:a4:
11:37:08:72:65:85:8e:ed:e5:a5:d7:14:9c:3e:77:e7:27:6f:
71:48:23:d5:8b:eb:4e:96:35:dd:08:6c:8b:e9:78:6c:a2:23:
fe:00:a8:a6:c1:42:fc:2b:16:91:81:76:3c:02:5b:ee:8d:a0:
22:19:6e:c6:f8:a1:db:b7:10:0e:be:50:b0:61:15:ce:52:34:
bf:11:f4:33:37:15:60:2f:75:1f:1d:f2:01:02:b0:95:be:b6:
74:ae:6d:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEuSaqrJl2phkoGMYUynnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMTAxMmVjODQ1NTAwNzE4Y2FiNzZjOWRkMGFmMDEwODkw
ZGUyNmQwHhcNMjUxMTExMDQwMDU0WhcNMjUxMTEyMDQwMDU0WjAzMTEwLwYDVQQD
EyhhNzFjNGNjOTNhZTA3NzU0NWFhNWE3N2YyYTBiNjQwOTQxYTQ2YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9a1QGhI2RlVapxnmCo/J92W/pJ4g
rvt0Mh9Ow/Bg38SdMpD/p2QwN1jrUKDPW/niyLzHu195tRcRpnV+CFkB92xM89N0
RahDMUqyPEJXGEXBgrUcvtDxav1xQwJ1x2t9s6+Ltnt3HGrTKzL/ICNA4WiipH/Y
XQKTkj9qutaW1aGbxm8m6ruHgEsY5qDl7I825y1QOZHDHY3dKPaymUxnizDCBiTt
AW3HTOntKaEJbwGawpki2sBV4RHdpdZt/liVhqHuAdXIHYAlYBbZcx2LWz/OuvGU
QcRYZ7CXjXPR4l0aysVL0zIPhGW1uICbyrtyRFPq9nhygt9XquwGds8pKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKccTMk64HdUWqWnfyoLZAlBpGotMB8GA1UdIwQY
MBaAFKAQEuyEVQBxjKt2yd0K8BCJDeJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAt
N2FiYTU2OTY1OGQ1LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAtN2FiYTU2OTY1OGQ1
LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVu4B4nxQ
LVUv4W/1m+0hHYlbocYPMctLRR+1/ibWgSg2yPrfbQ5vfF2mM7WtZF8vvPlhOxob
AEj7sAUeM+mOKMlqkNIvYl8DmvPyWWSyqb9ns/Ne6FmKM+cgtrCFa/aLWJr09/+U
r6R2i+uR8c7ObYnsef9wCWegngXmuF1/CGvYQ5HkrAHA/aJdufqaRuSb2sE+sAkP
g/zu3ESQLuFIR3ikETcIcmWFju3lpdcUnD535ydvcUgj1YvrTpY13Qhsi+l4bKIj
/gCopsFC/CsWkYF2PAJb7o2gIhluxvih27cQDr5QsGEVzlI0vxH0MzcVYC91Hx3y
AQKwlb62dK5thQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:42 2025 by rpki-client