Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json)
Hash identifier: CExiCjjMNYQBijpr6v4JHN8A4pUoa82Tc5ciR7BPwpA=
Subject key identifier: 5D:48:94:C2:67:D1:C2:21:B2:36:52:A4:01:44:2F:4E:3F:80:91:21
Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Certificate serial: 019A71EE86E67DDA2578DFF7208FD6EDDBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
Manifest number: 0C4C
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: E9Q8KEChQxWCGEqxzsh8t9MTuECDHdDoLE19uIkEvsY=)
2: rwuE2HeUale_KAQK1oOeIO9teNQ.roa (hash: 1njSxFnxGZ0NzAHsH1imJbJ+hQrmgk75hjXn6T/fBr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:86:e6:7d:da:25:78:df:f7:20:8f:d6:ed:db:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=5d4894c267d1c221b23652a401442f4e3f809121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:3d:54:1a:8e:16:0d:dd:44:1a:f6:a5:b9:
92:a7:84:a9:da:c0:e9:06:7b:0d:bd:e7:34:e5:a2:
f0:88:b3:16:c9:03:00:4b:0c:cc:c9:87:70:63:b6:
7f:09:1d:fa:eb:8f:78:e5:18:02:dd:d3:67:15:3a:
7e:20:c2:bf:f2:70:37:4f:55:37:6a:90:4a:79:e8:
a1:e2:38:4f:59:9e:64:c6:56:79:b1:9f:4d:3f:95:
51:cc:86:4c:ba:6f:d1:fb:6e:3a:0f:41:fe:4a:6d:
62:59:14:ab:76:61:52:cd:27:57:fb:08:50:ec:59:
c3:93:b3:a3:2f:ae:ea:26:fe:1d:b7:bb:64:d5:cc:
21:46:25:21:c6:10:18:f1:5e:d3:2a:a8:22:e3:c4:
ac:77:46:78:20:f5:a5:c3:95:46:ab:56:b9:f8:81:
60:aa:c7:04:07:c2:62:6f:1c:d9:cd:f5:5a:5a:65:
1c:69:6b:3f:6b:4f:3e:ab:97:06:0b:71:ce:22:7f:
b2:d3:c6:a1:19:4c:57:fa:b4:88:52:01:de:61:8e:
37:d6:28:3e:d0:03:48:ce:56:b3:f3:87:43:6b:1f:
b8:be:11:9b:c6:6f:1e:4c:47:c4:2e:20:8d:a9:1e:
30:02:f1:49:73:c4:42:60:de:a9:0f:4f:3c:fe:83:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:48:94:C2:67:D1:C2:21:B2:36:52:A4:01:44:2F:4E:3F:80:91:21
X509v3 Authority Key Identifier:
keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0b:22:33:13:3a:c8:b1:f8:d0:b7:96:51:86:db:60:5c:6e:
99:7c:e9:76:50:67:e1:83:64:75:97:15:ee:5d:09:43:8b:fb:
1c:fa:d2:58:a2:28:ae:8a:1e:b1:7e:5c:d5:e5:63:d7:e3:16:
5a:79:0b:51:db:4c:9f:7b:53:ad:47:72:e0:4f:5d:9f:b6:1d:
b5:50:e7:1f:b0:bc:66:de:49:93:42:41:d6:32:fc:df:89:55:
7e:7f:f1:ba:bd:79:8e:3b:d8:e8:6b:01:3f:f2:c3:43:a0:7a:
4b:d1:79:48:5a:45:0f:2f:2b:90:fa:20:52:d2:62:39:ab:e6:
8a:34:98:f5:e1:41:61:5a:b6:8e:4f:02:06:a8:88:4e:a1:0d:
b2:9f:00:5a:ed:d4:22:0b:cf:e8:d3:b8:bd:22:40:78:99:fd:
fd:e9:36:6e:7c:7b:ad:f5:74:d4:87:bd:ee:9d:a9:b1:7c:31:
8e:c9:d4:53:cf:1b:db:6e:e9:2e:9d:64:25:d3:5c:69:96:6d:
25:8b:6d:2c:b4:e7:14:9b:3b:d9:d1:3a:40:78:22:f9:05:90:
71:cb:cd:71:55:69:99:51:07:fc:e4:6a:18:f1:ac:7b:81:c2:
d9:8f:a9:d9:94:d6:3c:d9:a2:91:9f:13:a0:dd:d7:33:de:2c:
34:87:40:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7obmfdoleN/3II/W7dvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjAwOTlhZDg2ZGQ4NDM0ZTUyZjhjNmZkZGVlYjJjM2Vk
NmM2Y2EwHhcNMjUxMTExMDgwMDQ4WhcNMjUxMTEyMDgwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZDQ4OTRjMjY3ZDFjMjIxYjIzNjUyYTQwMTQ0MmY0ZTNmODA5MTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBg9VBqOFg3dRBr2pbmSp4Sp2sDp
BnsNvec05aLwiLMWyQMASwzMyYdwY7Z/CR3664945RgC3dNnFTp+IMK/8nA3T1U3
apBKeeih4jhPWZ5kxlZ5sZ9NP5VRzIZMum/R+246D0H+Sm1iWRSrdmFSzSdX+whQ
7FnDk7OjL67qJv4dt7tk1cwhRiUhxhAY8V7TKqgi48Ssd0Z4IPWlw5VGq1a5+IFg
qscEB8JibxzZzfVaWmUcaWs/a08+q5cGC3HOIn+y08ahGUxX+rSIUgHeYY431ig+
0ANIzlaz84dDax+4vhGbxm8eTEfELiCNqR4wAvFJc8RCYN6pD088/oPbWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1IlMJn0cIhsjZSpAFEL04/gJEhMB8GA1UdIwQY
MBaAFKPwCZrYbdhDTlL4xv3e6yw+1sbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYt
ZDUxNjdlNjc1NmI2LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYtZDUxNjdlNjc1NmI2
LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQsiMxM6
yLH40LeWUYbbYFxumXzpdlBn4YNkdZcV7l0JQ4v7HPrSWKIorooesX5c1eVj1+MW
WnkLUdtMn3tTrUdy4E9dn7YdtVDnH7C8Zt5Jk0JB1jL834lVfn/xur15jjvY6GsB
P/LDQ6B6S9F5SFpFDy8rkPogUtJiOavmijSY9eFBYVq2jk8CBqiITqENsp8AWu3U
IgvP6NO4vSJAeJn9/ek2bnx7rfV01Ie97p2psXwxjsnUU88b227pLp1kJdNcaZZt
JYttLLTnFJs72dE6QHgi+QWQccvNcVVpmVEH/ORqGPGse4HC2Y+p2ZTWPNmikZ8T
oN3XM94sNIdAeg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:45 2025 by rpki-client