Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier: zyopSotj+1saaJxyqbi+tRAc2BwVYd6dLqB26YDYszU=
Subject key identifier: 9A:4B:2F:55:FF:F5:7A:E2:70:3D:AD:1D:DB:B3:BD:3C:E6:0A:06:D2
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 019A71B8CB494CE2F7D94B4AF2A32D535179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: ox0yUD8elsg6r4daV8Ez0EIGS7ODLYPXXm2pUKLfkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cb:49:4c:e2:f7:d9:4b:4a:f2:a3:2d:53:51:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=9a4b2f55fff57ae2703dad1ddbb3bd3ce60a06d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:29:bf:b9:e5:4a:16:86:04:4d:d3:e9:d2:
ed:22:cf:d8:d0:59:a5:41:60:14:f1:3c:74:5b:a7:
2a:fb:3e:28:57:4a:7a:ae:29:14:a9:04:26:9e:21:
7f:d2:6c:25:80:0c:27:cb:03:85:62:c0:21:a5:c6:
57:eb:a1:c5:49:a2:4b:83:a2:47:d2:0e:81:44:cc:
60:2e:e6:9c:d2:cb:0c:e5:9b:88:ce:9a:f3:dc:60:
28:39:66:44:3a:09:44:1d:77:f4:a9:bf:68:cc:bc:
e4:ea:18:4c:bf:65:04:e6:af:24:49:97:63:d9:7b:
0d:17:88:b2:51:eb:54:37:1a:eb:89:1b:08:49:2c:
d9:c5:2d:6d:af:22:16:d0:18:6d:9a:d7:8b:8f:7a:
23:26:d0:7d:c2:86:0e:c1:f8:ca:57:43:0d:96:b1:
13:3e:1b:e3:59:c9:77:86:04:b4:78:d8:8d:e6:d9:
3c:c6:7d:06:d1:06:86:d3:72:71:19:c6:b8:d2:39:
9a:6e:43:08:9b:90:83:e8:de:6e:fe:2a:29:c3:40:
2b:3f:c2:ca:48:85:af:05:96:89:27:57:10:dd:0a:
c6:e8:b9:f4:07:d5:eb:d2:0d:19:ba:cc:3c:26:2e:
df:fd:87:14:ea:db:1b:6d:06:cd:46:7b:6e:c8:90:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:2F:55:FF:F5:7A:E2:70:3D:AD:1D:DB:B3:BD:3C:E6:0A:06:D2
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a1:5c:c3:37:d3:63:04:19:d2:82:d6:4f:4f:77:fb:f1:58:
48:f7:f3:bd:f4:b9:24:2d:d4:c6:7d:2c:59:5a:62:e7:16:b9:
21:91:2c:a0:7e:92:0d:0b:45:e8:70:41:cb:94:5c:b1:30:d0:
fb:30:98:77:91:10:af:a6:96:c9:06:9e:61:7a:b1:65:45:05:
4a:53:e2:98:68:62:6b:e2:12:92:a9:16:10:ab:b8:d3:cd:6b:
62:ab:da:d3:52:74:28:02:58:d5:fb:e8:3e:c7:e1:7f:36:0b:
90:13:cd:30:82:7b:55:05:e7:d1:44:c7:1e:32:a6:56:a5:91:
c9:f3:d4:c0:dd:d6:f3:79:fc:12:8d:1a:d4:a4:b6:19:09:72:
d2:3d:ac:1b:ab:09:dc:5d:c1:54:77:f8:af:d8:c2:dc:ef:10:
01:c2:9c:39:6f:2e:26:c1:80:33:73:8a:a1:b8:5f:60:25:e0:
6f:e2:77:85:b4:57:b9:9a:aa:a8:c0:8a:48:72:6b:d7:17:fc:
7c:4e:03:8e:76:05:d1:fb:b2:06:93:80:34:98:b0:9c:f4:5c:
9b:20:24:d4:06:4b:f0:0c:0d:b8:f8:41:e0:ce:da:20:a2:09:
76:aa:c1:2b:62:b7:63:36:0f:32:83:a7:a3:4d:f5:63:27:a2:
08:0b:46:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMtJTOL32UtK8qMtU1F5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMmJiMTFkMDE5NTU3ZTEyZjVmYjZlYjkwMzgzNzQyMTE2
MGQwMDkwHhcNMjUxMTExMDcwMjA3WhcNMjUxMTEyMDcwMjA3WjAzMTEwLwYDVQQD
Eyg5YTRiMmY1NWZmZjU3YWUyNzAzZGFkMWRkYmIzYmQzY2U2MGEwNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhIpv7nlShaGBE3T6dLtIs/Y0Fml
QWAU8Tx0W6cq+z4oV0p6rikUqQQmniF/0mwlgAwnywOFYsAhpcZX66HFSaJLg6JH
0g6BRMxgLuac0ssM5ZuIzprz3GAoOWZEOglEHXf0qb9ozLzk6hhMv2UE5q8kSZdj
2XsNF4iyUetUNxrriRsISSzZxS1tryIW0BhtmteLj3ojJtB9woYOwfjKV0MNlrET
PhvjWcl3hgS0eNiN5tk8xn0G0QaG03JxGca40jmabkMIm5CD6N5u/iopw0ArP8LK
SIWvBZaJJ1cQ3QrG6Ln0B9Xr0g0Zusw8Ji7f/YcU6tsbbQbNRntuyJCj3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpLL1X/9XricD2tHduzvTzmCgbSMB8GA1UdIwQY
MBaAFKArsR0BlVfhL1+265A4N0IRYNAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUt
N2JkM2FiNzNlMTcyLzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85ZDZjYTItMGRhYy00NTk3LTgwZjUtN2JkM2FiNzNlMTcy
LzEvb0N1eEhRR1ZWLUV2WDdicmtEZzNRaEZnMEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6FcwzfT
YwQZ0oLWT093+/FYSPfzvfS5JC3Uxn0sWVpi5xa5IZEsoH6SDQtF6HBBy5RcsTDQ
+zCYd5EQr6aWyQaeYXqxZUUFSlPimGhia+ISkqkWEKu4081rYqva01J0KAJY1fvo
PsfhfzYLkBPNMIJ7VQXn0UTHHjKmVqWRyfPUwN3W83n8Eo0a1KS2GQly0j2sG6sJ
3F3BVHf4r9jC3O8QAcKcOW8uJsGAM3OKobhfYCXgb+J3hbRXuZqqqMCKSHJr1xf8
fE4DjnYF0fuyBpOANJiwnPRcmyAk1AZL8AwNuPhB4M7aIKIJdqrBK2K3YzYPMoOn
o031YyeiCAtGbg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:47 2025 by rpki-client