Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: 8iOwYAQ20BUpdxx0/XYQ3H9OAEZQWIqv4doQk/ub0RI=
Subject key identifier: 8A:CD:C3:E7:81:5B:13:3E:62:DD:06:A0:42:4F:8F:A1:B7:B9:C7:F4
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 019A71EEC832FB8F70C8209C0DB27397710A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: y6o7cmve0FHvuzVNNLd0ViH4lsZTIGtGQetEUipf3EE=)
2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c8:32:fb:8f:70:c8:20:9c:0d:b2:73:97:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=8acdc3e7815b133e62dd06a0424f8fa1b7b9c7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:95:c3:8e:98:27:cb:73:3b:3c:75:f7:50:
b0:0c:e6:61:32:a9:ea:05:26:46:86:92:73:97:57:
5a:02:25:fb:e3:c9:2c:06:86:d0:de:01:92:22:7d:
a0:ce:fd:5a:ac:d5:39:6e:72:40:99:07:77:7b:01:
28:73:3f:90:2c:62:05:60:47:ef:6d:50:db:e1:96:
0a:df:63:73:82:cf:4f:9f:dd:9a:3d:23:a7:5a:7e:
df:b2:b1:03:7d:2c:ea:bb:5a:a9:59:72:e0:87:e9:
4e:d9:3a:9d:ab:d9:2e:6e:0a:ab:10:a9:77:cb:b3:
57:89:28:8a:bb:55:74:f2:52:be:cd:31:6b:b1:ed:
f1:8d:04:c9:24:5f:f2:72:66:31:52:d6:99:e8:c1:
f6:2d:90:b3:96:3b:ab:16:b9:2a:c1:dd:18:56:06:
3b:46:90:60:fa:7e:4c:c2:57:4c:ea:14:a9:b0:d8:
e7:37:3b:42:ab:e7:d2:db:85:a7:31:c7:12:7b:28:
77:72:00:ba:a7:0c:62:9a:7e:64:ce:d1:8c:84:de:
a4:63:5f:d6:00:c4:c5:14:4e:d3:96:88:ad:9d:8a:
04:b7:44:a5:8e:39:ff:60:b2:33:c8:fd:a0:07:44:
88:7d:40:68:9e:b0:1a:a9:79:56:fe:30:16:ec:7f:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:C3:E7:81:5B:13:3E:62:DD:06:A0:42:4F:8F:A1:B7:B9:C7:F4
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:37:70:2e:53:18:dd:31:56:6f:71:de:99:95:14:f5:44:98:
94:ae:73:47:c5:94:74:13:a1:e7:8c:cd:aa:78:d2:86:db:54:
0a:10:04:5d:f8:af:ce:c2:85:68:5e:3c:c2:1d:25:35:a0:b5:
fc:cf:5e:16:35:33:9e:bb:27:ba:39:bf:ce:88:81:14:9c:69:
12:21:4f:64:01:35:2a:d5:a7:fa:b8:1a:69:59:8f:53:b0:17:
8a:98:04:78:23:9d:c3:2b:b0:dc:3e:da:cf:ab:e6:f5:ad:60:
b5:98:b4:28:e3:6d:48:84:2f:ac:1c:f4:b9:64:91:ab:90:a1:
1f:b6:13:63:50:1b:1e:37:56:7b:29:0d:ef:cd:56:c4:22:79:
30:b2:00:cd:39:fb:d7:8d:46:59:58:e9:37:a3:c3:8e:74:c7:
2c:1d:c1:00:c8:1d:fe:e0:e0:c7:98:1f:81:2b:3c:24:f0:0b:
7e:6e:26:c4:8e:71:c4:01:bd:27:fa:b0:92:8e:50:09:1e:84:
fc:72:c3:8d:8b:c6:2d:5b:83:98:2d:86:c4:bd:c8:bd:2c:4f:
43:84:43:8d:b7:e5:43:66:1a:e0:83:5a:d8:68:84:7c:b2:35:
02:db:21:48:16:f8:86:0f:a3:b4:a4:35:95:19:2a:1b:c3:9b:
75:c7:c0:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sgy+49wyCCcDbJzl3EKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMjcyOTAyNjU4ZTE1Y2IzNGJkNTA5YzM5NTBiYWRlMjFh
Nzk2ZDIwHhcNMjUxMTExMDgwMTA1WhcNMjUxMTEyMDgwMTA1WjAzMTEwLwYDVQQD
Eyg4YWNkYzNlNzgxNWIxMzNlNjJkZDA2YTA0MjRmOGZhMWI3YjljN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ2Vw46YJ8tzOzx191CwDOZhMqnq
BSZGhpJzl1daAiX748ksBobQ3gGSIn2gzv1arNU5bnJAmQd3ewEocz+QLGIFYEfv
bVDb4ZYK32Nzgs9Pn92aPSOnWn7fsrEDfSzqu1qpWXLgh+lO2Tqdq9kubgqrEKl3
y7NXiSiKu1V08lK+zTFrse3xjQTJJF/ycmYxUtaZ6MH2LZCzljurFrkqwd0YVgY7
RpBg+n5MwldM6hSpsNjnNztCq+fS24WnMccSeyh3cgC6pwximn5kztGMhN6kY1/W
AMTFFE7TloitnYoEt0Sljjn/YLIzyP2gB0SIfUBonrAaqXlW/jAW7H+/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrNw+eBWxM+Yt0GoEJPj6G3ucf0MB8GA1UdIwQY
MBaAFKAnKQJljhXLNL1QnDlQut4hp5bSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgt
OTI3NTI2ZTZmMmQ5LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgtOTI3NTI2ZTZmMmQ5
LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDdwLlMY
3TFWb3HemZUU9USYlK5zR8WUdBOh54zNqnjShttUChAEXfivzsKFaF48wh0lNaC1
/M9eFjUznrsnujm/zoiBFJxpEiFPZAE1KtWn+rgaaVmPU7AXipgEeCOdwyuw3D7a
z6vm9a1gtZi0KONtSIQvrBz0uWSRq5ChH7YTY1AbHjdWeykN781WxCJ5MLIAzTn7
141GWVjpN6PDjnTHLB3BAMgd/uDgx5gfgSs8JPALfm4mxI5xxAG9J/qwko5QCR6E
/HLDjYvGLVuDmC2GxL3IvSxPQ4RDjbflQ2Ya4INa2GiEfLI1AtshSBb4hg+jtKQ1
lRkqG8ObdcfASQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:12 2025 by rpki-client