Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: cB/stegAgAoDaSOWYx3HnBvHkHlK3E5PIil5+m0ETrE=
Subject key identifier: 3A:E8:31:01:F8:29:80:91:F6:34:46:59:07:89:71:D9:AF:CD:21:28
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 019A714995C10A62810D1ECE42CD07EC0C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:39 +0000
Manifest this update: Tue 11 Nov 2025 05:00:39 +0000
Manifest next update: Wed 12 Nov 2025 05:00:39 +0000
Files and hashes: 1: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (hash: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=)
2: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: vBSFBCiPzY3RUHULDF07H9cA6LSwnBqEdV6dsQa1unE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:95:c1:0a:62:81:0d:1e:ce:42:cd:07:ec:0c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Nov 11 05:00:39 2025 GMT
Not After : Nov 12 05:00:39 2025 GMT
Subject: CN=3ae83101f8298091f6344659078971d9afcd2128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:be:05:7c:bd:f9:26:29:83:6e:ed:70:32:
a5:a6:ac:4f:5b:e9:7b:60:ab:5f:6c:e5:58:80:a0:
be:c7:06:47:4d:94:83:59:7e:8f:6b:60:a4:69:4a:
15:35:91:4f:76:b7:2d:51:ed:69:84:62:b8:7b:91:
6d:62:5f:f4:ca:4b:20:a4:e5:8d:6b:ff:ed:e7:bc:
20:ed:4b:76:b3:8d:32:51:67:70:4f:55:d6:58:0b:
ce:19:ab:5b:51:53:98:74:cd:c1:c2:53:fe:86:5d:
9a:a1:13:85:ae:8f:43:e6:15:8d:cd:57:cd:40:f3:
a4:f4:ea:7c:6c:a0:28:45:ac:ce:a8:a1:22:d5:32:
34:27:40:3c:53:4d:54:6a:e2:83:f4:6e:33:39:e8:
55:82:43:39:a4:fb:28:a2:72:25:50:69:0a:0b:91:
5b:fd:b3:99:df:0e:23:0e:01:03:bb:4c:4c:20:3c:
8b:4e:05:61:e7:3c:ad:c0:da:36:52:91:8a:11:01:
38:b4:de:1f:12:a7:f4:a0:16:68:8f:e4:5c:98:b5:
82:d3:b5:77:fd:bf:0e:8f:63:eb:32:95:bd:16:97:
2b:e4:6e:12:ab:3c:82:d2:c1:07:bc:e7:9c:ae:e3:
e9:3e:4b:21:62:98:af:fc:f3:7b:8d:35:40:aa:9d:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:31:01:F8:29:80:91:F6:34:46:59:07:89:71:D9:AF:CD:21:28
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2a:17:39:1a:cd:8b:ee:9e:24:e9:3a:ae:40:fc:31:f8:35:
ad:6d:94:24:5e:4b:e8:9e:e4:5d:e5:d7:89:5d:58:b3:c3:d8:
b3:0b:ea:f6:51:68:60:94:bf:b0:09:b7:2d:c2:71:89:ba:6f:
6a:c7:df:f6:d2:7b:e0:90:57:f9:55:49:ee:71:bc:31:67:66:
c5:7a:a9:31:db:8d:27:76:6a:a5:3c:b0:63:7a:e9:71:5a:15:
14:3e:c5:71:49:c9:fe:40:e5:02:0a:92:d0:14:ca:71:39:54:
96:e3:9a:82:a5:5c:7d:50:d9:1f:eb:e3:e9:ba:32:a5:d8:b9:
f0:c0:20:03:d2:3a:b5:2e:93:54:bf:9b:58:7f:1b:d1:7b:c7:
e5:3f:9c:bf:32:12:66:92:06:73:17:55:77:4e:6a:2a:82:28:
d4:40:df:cb:75:8f:93:03:66:52:40:a8:48:48:25:5e:1f:0a:
f8:5a:8c:2d:9a:18:80:6a:da:93:c3:77:5d:aa:4c:ce:d8:1f:
d3:16:e7:b3:c2:b2:80:5d:58:ff:a3:3d:28:73:13:f2:2a:e9:
60:ce:9b:e7:e8:da:49:78:75:ff:c7:cb:71:dc:89:fe:80:cc:
7c:b8:d8:18:3e:07:64:84:7c:f1:63:af:42:3c:26:20:8b:9b:
7b:13:74:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSZXBCmKBDR7OQs0H7Ax5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTAwOTYyNDdhOGM1NGU1ZGU4YzFiMGRhZjEwNTRhZWM4
Y2M0NTAwHhcNMjUxMTExMDUwMDM5WhcNMjUxMTEyMDUwMDM5WjAzMTEwLwYDVQQD
EygzYWU4MzEwMWY4Mjk4MDkxZjYzNDQ2NTkwNzg5NzFkOWFmY2QyMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi2+BXy9+SYpg27tcDKlpqxPW+l7
YKtfbOVYgKC+xwZHTZSDWX6Pa2CkaUoVNZFPdrctUe1phGK4e5FtYl/0yksgpOWN
a//t57wg7Ut2s40yUWdwT1XWWAvOGatbUVOYdM3BwlP+hl2aoROFro9D5hWNzVfN
QPOk9Op8bKAoRazOqKEi1TI0J0A8U01UauKD9G4zOehVgkM5pPsoonIlUGkKC5Fb
/bOZ3w4jDgEDu0xMIDyLTgVh5zytwNo2UpGKEQE4tN4fEqf0oBZoj+RcmLWC07V3
/b8Oj2PrMpW9Fpcr5G4SqzyC0sEHvOecruPpPkshYpiv/PN7jTVAqp1ZLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDroMQH4KYCR9jRGWQeJcdmvzSEoMB8GA1UdIwQY
MBaAFDrgCWJHqMVOXejBsNrxBUrsjMRQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgt
Yjk3MjIxNDQ1MTNmLzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYWE0OTQtOTMwOC00N2VlLWE4MDgtYjk3MjIxNDQ1MTNm
LzEvT3VBSllrZW94VTVkNk1HdzJ2RUZTdXlNeEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZioXORrN
i+6eJOk6rkD8Mfg1rW2UJF5L6J7kXeXXiV1Ys8PYswvq9lFoYJS/sAm3LcJxibpv
asff9tJ74JBX+VVJ7nG8MWdmxXqpMduNJ3ZqpTywY3rpcVoVFD7FcUnJ/kDlAgqS
0BTKcTlUluOagqVcfVDZH+vj6boypdi58MAgA9I6tS6TVL+bWH8b0XvH5T+cvzIS
ZpIGcxdVd05qKoIo1EDfy3WPkwNmUkCoSEglXh8K+FqMLZoYgGrak8N3XapMztgf
0xbns8KygF1Y/6M9KHMT8irpYM6b5+jaSXh1/8fLcdyJ/oDMfLjYGD4HZIR88WOv
QjwmIIubexN0zQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:39 2025 by rpki-client