Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json)
Hash identifier: iGnYDkUedCCsD4pTXF3TZSPSmZ+etlLUl+fRRATgDls=
Subject key identifier: 41:66:81:9D:53:A4:FE:13:51:3E:B2:22:65:98:AF:91:C7:9F:CB:E7
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 019A51F55742B299EA13324B1844A2E3E659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
Manifest number: C2
Signing time: Wed 05 Nov 2025 03:00:24 +0000
Manifest this update: Wed 05 Nov 2025 03:00:24 +0000
Manifest next update: Thu 06 Nov 2025 03:00:24 +0000
Files and hashes: 1: D6hQsVypLugL4mxvUWDjpj8fUTE.roa (hash: a5DmBELXphgI1XIJoBpStB1qvP3OXRM4NJd2RT/9RAA=)
2: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: 3EN7skgz5bFg8ycTbMphneMdUVwqdyQZ0OXczS2FDK8=)
3: n032k9FmuIzkkyRidAg8YH7w1hU.roa (hash: xlH82s++yte3uwND1ATPOo20SB9UwXzLCVAcekRQrE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:57:42:b2:99:ea:13:32:4b:18:44:a2:e3:e6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Nov 5 03:00:24 2025 GMT
Not After : Nov 6 03:00:24 2025 GMT
Subject: CN=4166819d53a4fe13513eb2226598af91c79fcbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:49:5e:c2:7e:02:dc:8d:0f:b3:70:3b:5f:
4d:71:ab:5a:a2:68:c3:ec:51:aa:12:d2:87:24:b6:
9c:58:21:84:20:14:51:0a:aa:65:3f:2b:cd:fb:cc:
74:4c:7c:d6:93:46:89:32:43:c9:e0:02:6a:5f:8c:
ce:b2:35:51:a6:ce:1d:30:11:bc:76:ed:71:59:bc:
d1:44:cc:91:18:f7:e0:bb:be:07:34:0d:10:e1:97:
c5:e9:56:fa:19:de:38:7d:6d:af:84:5b:44:9c:b7:
f4:1d:bf:92:29:c1:c1:94:c2:19:38:3c:d2:c8:4b:
c6:5c:23:42:e9:95:e8:e6:2f:5c:b3:f1:cb:30:72:
b4:98:20:6e:0a:4f:86:d6:fa:63:fd:17:3f:1b:c8:
7e:be:b5:26:16:d3:c6:d9:47:74:30:fc:80:52:76:
d8:e9:4d:64:29:9a:19:3d:e3:be:97:7f:ac:04:16:
7a:fa:35:cd:77:1f:16:01:19:fc:ab:ff:37:ee:58:
01:9f:53:b8:d3:e3:1b:1f:75:79:5e:76:c9:8d:47:
a4:bc:9b:d5:26:56:c5:d1:a0:0b:f8:10:7b:f6:db:
96:40:99:30:71:c8:8c:fc:f1:f3:5c:a6:7e:74:a2:
54:7b:63:fd:a7:90:17:aa:11:d2:60:e3:73:ac:ed:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:81:9D:53:A4:FE:13:51:3E:B2:22:65:98:AF:91:C7:9F:CB:E7
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:81:45:56:79:78:9d:d6:0f:83:56:c8:22:9d:ba:ad:a0:8e:
a9:a1:5b:c8:5f:cf:6c:d9:04:1c:7c:0c:56:c0:28:37:de:8e:
5d:99:cd:51:e9:11:7f:97:8c:b6:5b:83:23:27:a9:ba:69:8b:
4c:19:11:97:9c:bd:5d:ad:23:24:91:f1:c1:2c:26:0e:2e:6f:
68:aa:a2:d1:a4:d0:e5:98:f4:93:d4:e1:77:4d:25:88:19:71:
56:1c:ac:b1:fe:44:ef:e1:25:b7:a0:e9:92:26:c4:f3:bd:36:
ce:da:bc:9f:29:07:8f:04:35:8f:c8:35:de:bb:6a:bc:5f:4f:
4e:d9:2a:99:80:5c:26:b3:4d:4f:63:0c:44:34:d8:06:44:c9:
90:0e:e4:74:4d:64:55:ba:64:d1:15:bc:c4:40:dc:05:ea:6a:
52:4c:de:0d:3b:0c:8f:d0:37:6b:fc:7a:8d:39:c9:f4:5b:cc:
0a:e7:6f:49:be:ee:42:ee:15:0e:ba:64:dd:a7:3e:ae:a6:b9:
43:03:19:61:2d:f2:c4:06:ba:8c:66:fd:ac:4e:ce:92:bb:43:
2d:df:45:68:f8:42:92:bb:c5:57:50:4d:51:2d:a3:1d:3d:a1:
2c:ec:3e:6e:21:6f:7b:45:8b:ed:3f:6a:71:c5:40:72:2c:87:
81:f6:b5:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9VdCspnqEzJLGESi4+ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTUzMjBmODU2YmU4MmVhODc0ZTkyZDZkODBiYzZmOTk3
ODMwMGUwHhcNMjUxMTA1MDMwMDI0WhcNMjUxMTA2MDMwMDI0WjAzMTEwLwYDVQQD
Eyg0MTY2ODE5ZDUzYTRmZTEzNTEzZWIyMjI2NTk4YWY5MWM3OWZjYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxxJXsJ+AtyND7NwO19NcataomjD
7FGqEtKHJLacWCGEIBRRCqplPyvN+8x0THzWk0aJMkPJ4AJqX4zOsjVRps4dMBG8
du1xWbzRRMyRGPfgu74HNA0Q4ZfF6Vb6Gd44fW2vhFtEnLf0Hb+SKcHBlMIZODzS
yEvGXCNC6ZXo5i9cs/HLMHK0mCBuCk+G1vpj/Rc/G8h+vrUmFtPG2Ud0MPyAUnbY
6U1kKZoZPeO+l3+sBBZ6+jXNdx8WARn8q/837lgBn1O40+MbH3V5XnbJjUekvJvV
JlbF0aAL+BB79tuWQJkwcciM/PHzXKZ+dKJUe2P9p5AXqhHSYONzrO3KdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFmgZ1TpP4TUT6yImWYr5HHn8vnMB8GA1UdIwQY
MBaAFJjlMg+Fa+guqHTpLW2AvG+ZeDAOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9VeUQ0VnI2QzZvZE9rdGJZQzhiNWw0TUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNTdlZjktOTgxNS00Zjk1LWEwYmQt
Zjk4ZGE1NDZhYmQzLzEvbU9VeUQ0VnI2QzZvZE9rdGJZQzhiNWw0TUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mNTdlZjktOTgxNS00Zjk1LWEwYmQtZjk4ZGE1NDZhYmQz
LzEvbU9VeUQ0VnI2QzZvZE9rdGJZQzhiNWw0TUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYFFVnl4
ndYPg1bIIp26raCOqaFbyF/PbNkEHHwMVsAoN96OXZnNUekRf5eMtluDIyepummL
TBkRl5y9Xa0jJJHxwSwmDi5vaKqi0aTQ5Zj0k9Thd00liBlxVhyssf5E7+Elt6Dp
kibE8702ztq8nykHjwQ1j8g13rtqvF9PTtkqmYBcJrNNT2MMRDTYBkTJkA7kdE1k
Vbpk0RW8xEDcBepqUkzeDTsMj9A3a/x6jTnJ9FvMCudvSb7uQu4VDrpk3ac+rqa5
QwMZYS3yxAa6jGb9rE7OkrtDLd9FaPhCkrvFV1BNUS2jHT2hLOw+biFve0WL7T9q
ccVAciyHgfa1ww==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:46:56 2025 by rpki-client