Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: uWtkmctkPEdnnOB97iIasK4/oaBF3zz7j8pPcq/3JdU=
Subject key identifier: 97:35:8F:3A:94:12:0D:5F:86:94:42:8C:7C:74:3D:61:06:1D:04:E7
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 019A71B8B2FB1E2B85B2B6CD85FC54B6E404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 0611
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: 8Nz8kLqhooeTsm2gruMWnHGoKPuTQ4hIfpSTy7SOSkE=)
2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b2:fb:1e:2b:85:b2:b6:cd:85:fc:54:b6:e4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=97358f3a94120d5f8694428c7c743d61061d04e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:c6:ce:1a:96:ab:18:16:ee:70:4b:ce:5f:
98:97:0d:06:23:87:98:a4:77:2e:1c:44:ba:53:7a:
23:24:0b:ac:8b:c6:86:ba:f0:a9:0a:dc:5b:4d:fe:
e7:2e:2e:13:d3:27:38:7d:55:35:cf:bb:9e:ed:92:
d6:1d:e1:31:64:88:98:44:44:91:35:7a:3c:77:e5:
8f:05:18:a7:bd:6d:1e:d7:27:e8:c1:77:27:e7:92:
63:2a:8e:87:27:f4:8b:6a:ee:8a:c8:b0:0d:52:b9:
46:fa:a1:4e:f9:a9:d0:7e:5a:f6:38:a5:b2:cb:ac:
ea:20:4b:bd:7e:9f:64:ff:55:69:6e:eb:54:31:bc:
5d:0b:87:f5:9d:29:ad:0f:d2:fc:ec:69:6f:0c:23:
ca:d3:e7:e2:b4:90:5e:df:fb:8a:62:13:dc:de:79:
b5:36:a7:ee:3e:08:83:b4:6b:e5:56:12:0f:0f:a5:
4b:3d:4f:e2:11:99:4d:34:37:c2:a6:e0:24:86:7c:
a2:cc:78:52:07:89:f9:27:2c:1b:e1:8e:d5:8a:95:
6f:aa:8f:62:d7:16:04:74:1f:b5:aa:ac:5c:a6:c4:
4b:86:27:21:8d:6f:d0:17:89:dd:d3:93:4c:86:e5:
98:90:19:b9:2f:94:b4:0b:5b:7a:66:c6:ad:36:13:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:8F:3A:94:12:0D:5F:86:94:42:8C:7C:74:3D:61:06:1D:04:E7
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fc:f0:9e:58:c3:08:67:1f:87:4b:f1:3c:5b:9d:77:97:94:
ae:c2:d6:6a:9b:35:18:65:55:12:ea:35:60:a2:1a:ec:d0:4c:
68:e5:f5:65:31:6a:8e:db:ec:01:d7:94:a4:28:b2:23:d2:68:
2e:88:ca:23:7e:fb:be:69:ed:ff:28:59:b1:95:66:c3:b8:b1:
44:a1:58:d3:d9:60:c9:ea:bc:19:8b:71:d6:b4:20:48:52:19:
49:79:ad:a2:fe:83:dc:8f:64:54:8d:19:b6:03:7f:bb:3a:20:
c6:7a:79:cb:8b:78:04:9c:12:d1:8e:67:13:b6:e0:37:71:bb:
93:5f:d0:de:3d:70:48:57:47:cb:0b:dc:20:c0:4b:c3:ee:6b:
13:b9:6c:56:ff:19:8a:69:fd:76:99:f2:82:fd:37:22:03:d0:
40:f7:e1:dc:44:7c:54:a1:0c:5d:d5:56:01:8c:4e:ce:23:24:
a3:8e:f5:e8:ed:1f:fe:d2:15:19:b7:59:c8:18:4d:f4:4d:eb:
ed:6b:fe:ee:26:59:e1:7d:47:2b:0b:c0:80:c1:cb:45:83:b8:
35:e5:40:e3:a0:15:63:a9:34:5d:12:ec:de:82:08:a1:bc:6f:
6d:61:9e:01:0b:ac:7d:d9:57:e0:90:91:3c:d6:b2:82:b1:5a:
db:bf:1f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLL7HiuFsrbNhfxUtuQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMzE0OWRhMGExMmJkYmYxYmVmNTk4YjA0NjMwOTA3ODAy
MDZjZTAwHhcNMjUxMTExMDcwMjAwWhcNMjUxMTEyMDcwMjAwWjAzMTEwLwYDVQQD
Eyg5NzM1OGYzYTk0MTIwZDVmODY5NDQyOGM3Yzc0M2Q2MTA2MWQwNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEjGzhqWqxgW7nBLzl+Ylw0GI4eY
pHcuHES6U3ojJAusi8aGuvCpCtxbTf7nLi4T0yc4fVU1z7ue7ZLWHeExZIiYRESR
NXo8d+WPBRinvW0e1yfowXcn55JjKo6HJ/SLau6KyLANUrlG+qFO+anQflr2OKWy
y6zqIEu9fp9k/1VpbutUMbxdC4f1nSmtD9L87GlvDCPK0+fitJBe3/uKYhPc3nm1
NqfuPgiDtGvlVhIPD6VLPU/iEZlNNDfCpuAkhnyizHhSB4n5Jywb4Y7VipVvqo9i
1xYEdB+1qqxcpsRLhichjW/QF4nd05NMhuWYkBm5L5S0C1t6ZsatNhPrtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc1jzqUEg1fhpRCjHx0PWEGHQTnMB8GA1UdIwQY
MBaAFDoxSdoKEr2/G+9ZiwRjCQeAIGzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kODhhYWUtNjhjMy00OTA5LTlmOGEt
MDdlODNjZDViNjBkLzEvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kODhhYWUtNjhjMy00OTA5LTlmOGEtMDdlODNjZDViNjBk
LzEvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvzwnljD
CGcfh0vxPFudd5eUrsLWaps1GGVVEuo1YKIa7NBMaOX1ZTFqjtvsAdeUpCiyI9Jo
LojKI377vmnt/yhZsZVmw7ixRKFY09lgyeq8GYtx1rQgSFIZSXmtov6D3I9kVI0Z
tgN/uzogxnp5y4t4BJwS0Y5nE7bgN3G7k1/Q3j1wSFdHywvcIMBLw+5rE7lsVv8Z
imn9dpnygv03IgPQQPfh3ER8VKEMXdVWAYxOziMko4716O0f/tIVGbdZyBhN9E3r
7Wv+7iZZ4X1HKwvAgMHLRYO4NeVA46AVY6k0XRLs3oIIobxvbWGeAQusfdlX4JCR
PNaygrFa278fRw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:34 2025 by rpki-client