Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: RzDdfFt4dkuFvHatVcEdtiIQjsAFoq8ZZOcSapanX6A=
Subject key identifier: B9:79:3B:8B:84:70:12:96:D5:BD:48:42:67:C6:E0:DC:8B:03:F6:A3
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 019A251C9F5CB5A242A2656F3E841F027C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1701
Signing time: Mon 27 Oct 2025 10:00:24 +0000
Manifest this update: Mon 27 Oct 2025 10:00:24 +0000
Manifest next update: Tue 28 Oct 2025 10:00:24 +0000
Files and hashes: 1: Ao4f98uIFcgkhdxyPOpQgAuwN9w.roa (hash: ttNIa0Xruypw+Nr5sYx69ADzUxbcLDOTo777VDuXgok=)
2: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: TtZrhgBKW1xQr/SZGUDsTh/ucu4u66p0/28ZA0D59Gc=)
3: bf5JniBkyKbSSiSrUK6PpsjkA_o.roa (hash: G/EVvuIiKK3u39WnHajT6FKjkBStN9/ciaxEIQanbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:9f:5c:b5:a2:42:a2:65:6f:3e:84:1f:02:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Oct 27 10:00:24 2025 GMT
Not After : Oct 28 10:00:24 2025 GMT
Subject: CN=b9793b8b84701296d5bd484267c6e0dc8b03f6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:5f:56:b2:67:2a:6f:63:f2:6c:f0:f4:62:
4e:fa:08:ae:8c:8c:76:0c:3d:33:7f:62:10:4e:0b:
a5:96:43:3c:8e:33:52:b3:48:14:5f:8a:f5:2f:95:
79:26:59:f1:85:d5:51:81:fb:2b:4d:92:0f:fc:71:
3f:2e:f0:e0:54:63:43:fa:92:39:2f:f2:d0:16:6b:
0f:fa:c4:8c:7c:29:6c:3a:b0:06:9e:64:5b:87:a8:
0b:41:52:85:f6:39:71:84:7f:98:6c:0c:8d:1c:be:
35:9d:40:01:a6:cf:3b:00:25:43:ab:35:52:22:ce:
cc:82:51:69:f1:bc:8d:da:8f:34:38:71:ad:87:40:
cf:6d:2a:a4:83:91:af:92:a1:04:7f:3d:e5:39:a2:
24:07:16:0e:19:08:d4:db:50:11:8b:80:21:10:90:
38:ac:8e:2c:e6:a3:2a:67:fb:2f:8d:77:aa:72:a4:
28:32:f8:71:1a:c2:55:93:bc:cb:e4:96:29:ea:c9:
fa:68:4d:f4:7c:8e:66:69:b7:bd:ba:d0:9f:35:8b:
ba:45:13:52:28:b7:d2:02:76:e9:b6:07:fe:c3:10:
99:bf:d3:1f:ce:00:3f:fd:d3:a4:19:e8:6f:ce:08:
56:63:1c:fa:5e:7f:16:8c:77:f0:94:3b:d8:15:6c:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:3B:8B:84:70:12:96:D5:BD:48:42:67:C6:E0:DC:8B:03:F6:A3
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e5:4c:80:2c:a4:74:5d:eb:8f:c0:24:d7:75:0d:4e:30:5c:
5b:dc:2f:68:f0:0d:71:c6:dc:b4:ef:a1:3c:6b:7b:8d:e2:5f:
99:36:91:4d:84:0c:89:84:59:36:c8:1c:ed:10:31:7d:8e:12:
15:3d:ae:43:3e:aa:f9:75:9c:b6:a7:10:d9:aa:1b:fd:3a:cd:
d8:47:2d:46:6c:8e:d0:6c:e3:f1:10:77:a5:cd:11:6d:e6:f8:
6b:93:43:d7:43:94:70:cb:c4:cf:d5:bb:de:e8:10:70:c6:e0:
d1:7d:08:43:a1:a2:66:3e:f1:74:d2:42:1e:36:6f:c4:65:e9:
93:62:c2:ca:be:a7:c6:c0:3e:5d:c4:4a:ab:18:23:69:9d:64:
47:1b:c3:28:5c:f3:e6:82:8d:13:e6:fa:f7:a0:a8:1c:7f:0f:
7a:32:f1:0e:e5:b3:f2:1f:0f:ab:d7:87:39:d5:5a:88:29:23:
20:e1:32:4a:a9:92:71:61:a3:54:10:6a:00:6d:c0:9f:ef:ce:
4b:45:90:d7:e5:34:8e:34:ee:1f:91:a4:4d:72:6c:91:25:d9:
a8:d0:22:1f:53:87:84:92:f0:02:b7:f5:de:e0:2e:7d:75:bd:
d4:7b:dd:54:c5:9d:2a:b0:66:e1:31:d6:84:79:8c:a7:aa:e2:
be:a4:1b:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHJ9ctaJComVvPoQfAnw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjUxMDI3MTAwMDI0WhcNMjUxMDI4MTAwMDI0WjAzMTEwLwYDVQQD
EyhiOTc5M2I4Yjg0NzAxMjk2ZDViZDQ4NDI2N2M2ZTBkYzhiMDNmNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnpfVrJnKm9j8mzw9GJO+giujIx2
DD0zf2IQTgullkM8jjNSs0gUX4r1L5V5JlnxhdVRgfsrTZIP/HE/LvDgVGND+pI5
L/LQFmsP+sSMfClsOrAGnmRbh6gLQVKF9jlxhH+YbAyNHL41nUABps87ACVDqzVS
Is7MglFp8byN2o80OHGth0DPbSqkg5GvkqEEfz3lOaIkBxYOGQjU21ARi4AhEJA4
rI4s5qMqZ/svjXeqcqQoMvhxGsJVk7zL5JYp6sn6aE30fI5mabe9utCfNYu6RRNS
KLfSAnbptgf+wxCZv9MfzgA//dOkGehvzghWYxz6Xn8WjHfwlDvYFWzKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl5O4uEcBKW1b1IQmfG4NyLA/ajMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOVMgCyk
dF3rj8Ak13UNTjBcW9wvaPANccbctO+hPGt7jeJfmTaRTYQMiYRZNsgc7RAxfY4S
FT2uQz6q+XWctqcQ2aob/TrN2EctRmyO0Gzj8RB3pc0Rbeb4a5ND10OUcMvEz9W7
3ugQcMbg0X0IQ6GiZj7xdNJCHjZvxGXpk2LCyr6nxsA+XcRKqxgjaZ1kRxvDKFzz
5oKNE+b696CoHH8PejLxDuWz8h8Pq9eHOdVaiCkjIOEySqmScWGjVBBqAG3An+/O
S0WQ1+U0jjTuH5GkTXJskSXZqNAiH1OHhJLwArf13uAufXW91HvdVMWdKrBm4THW
hHmMp6rivqQbwA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 15:34:03 2025 by rpki-client