Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: uz5P9he+xIJU2EepimGK/DAhkG8ZOqeCsFRsfnltggs=
Subject key identifier: 6D:04:9C:EA:14:0E:3B:4C:25:DA:15:32:22:66:8B:9D:F2:36:82:21
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 019A533F6F3662AA5730E093DB5485EE004A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 09:00:57 +0000
Manifest this update: Wed 05 Nov 2025 09:00:57 +0000
Manifest next update: Thu 06 Nov 2025 09:00:57 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: R6S4lIV6mNPLpD9+Yyx9/D2sxNB2NFZ3TAJSd0TS4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:6f:36:62:aa:57:30:e0:93:db:54:85:ee:00:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Nov 5 09:00:57 2025 GMT
Not After : Nov 6 09:00:57 2025 GMT
Subject: CN=6d049cea140e3b4c25da153222668b9df2368221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:61:92:ab:67:a9:8c:e9:24:2c:c1:0f:bf:
ad:61:53:15:3b:81:a3:25:5a:2d:46:79:96:51:59:
fc:f2:28:80:a0:4b:e5:de:6b:e7:63:56:99:0b:65:
c3:65:b9:19:bd:c1:ad:9f:79:97:8a:0d:27:7e:80:
7f:fd:38:b1:8e:07:21:9e:8f:67:7c:ea:c3:83:54:
e2:cd:07:48:a5:4a:4a:3d:17:cf:0e:ec:7f:d2:4c:
b4:69:63:02:86:9e:30:48:36:2b:ad:c7:9c:17:08:
ba:0d:1f:80:11:94:66:5c:3d:50:96:72:97:ad:29:
a4:52:ff:17:b7:19:1c:4c:b6:89:77:be:fb:24:e9:
e1:c9:95:bb:20:50:9a:69:c5:d9:a6:cd:8b:30:d1:
65:65:30:24:8d:01:8c:26:78:88:66:80:f3:73:bd:
1e:7b:9e:b3:a9:f1:92:3a:4c:b5:e4:9a:ee:8e:92:
69:16:cb:f4:44:1f:40:42:33:34:d6:46:e7:07:4e:
8c:96:0c:0b:1d:a6:65:3c:37:96:17:7b:7a:7c:e9:
79:19:9e:d8:75:4b:b9:16:74:f2:37:6b:28:82:80:
9a:ff:a7:1a:1d:6b:a0:0c:59:0c:7d:93:60:3f:78:
cb:5b:89:6a:ac:b7:68:0f:f6:a9:13:24:a4:c2:57:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:04:9C:EA:14:0E:3B:4C:25:DA:15:32:22:66:8B:9D:F2:36:82:21
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:1e:29:ff:e1:38:27:8b:79:ee:2b:fc:fc:2b:6c:88:76:
1e:a6:eb:e7:30:31:75:bb:5e:40:62:14:2b:f1:9b:d9:1d:b2:
38:4d:6d:74:04:08:c6:d3:ad:6f:bc:7c:4c:8c:68:44:d3:27:
71:3c:60:3e:72:eb:69:88:75:35:ba:38:5d:76:7c:44:42:ee:
9e:5f:b1:d9:49:63:8c:be:87:05:4a:58:22:8a:29:4c:7e:ee:
16:b3:2d:d7:6a:09:7b:3c:60:f6:89:e2:62:57:e5:3b:6a:12:
91:67:8a:76:de:92:27:e4:1d:74:94:92:71:ff:3e:c7:c2:2c:
65:cb:dd:15:46:7a:b9:08:b5:aa:18:fc:d4:b6:1c:cd:21:60:
c4:59:24:77:73:2f:aa:71:f3:c4:a8:a4:e0:96:9d:da:0d:81:
c7:b1:c7:04:ef:d0:b3:2d:90:25:27:e8:00:35:bc:0c:bd:1d:
51:b0:36:65:1c:d7:d9:fe:f8:e7:e9:39:bd:db:2f:80:a8:47:
2e:0c:ea:de:84:43:e5:90:8c:9b:ee:a8:9c:a8:8c:b0:e9:7c:
21:cd:3a:c0:9f:77:6b:d6:36:2e:72:10:75:89:4d:d7:06:c7:
bc:36:0a:dd:e2:90:24:b9:b3:75:5c:f2:9a:91:39:fd:90:a0:
a0:de:6e:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTP282YqpXMOCT21SF7gBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1
MTE2ODgwHhcNMjUxMTA1MDkwMDU3WhcNMjUxMTA2MDkwMDU3WjAzMTEwLwYDVQQD
Eyg2ZDA0OWNlYTE0MGUzYjRjMjVkYTE1MzIyMjY2OGI5ZGYyMzY4MjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilBhkqtnqYzpJCzBD7+tYVMVO4Gj
JVotRnmWUVn88iiAoEvl3mvnY1aZC2XDZbkZvcGtn3mXig0nfoB//Tixjgchno9n
fOrDg1TizQdIpUpKPRfPDux/0ky0aWMChp4wSDYrrcecFwi6DR+AEZRmXD1QlnKX
rSmkUv8XtxkcTLaJd777JOnhyZW7IFCaacXZps2LMNFlZTAkjQGMJniIZoDzc70e
e56zqfGSOky15JrujpJpFsv0RB9AQjM01kbnB06MlgwLHaZlPDeWF3t6fOl5GZ7Y
dUu5FnTyN2sogoCa/6caHWugDFkMfZNgP3jLW4lqrLdoD/apEySkwldyuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0EnOoUDjtMJdoVMiJmi53yNoIhMB8GA1UdIwQY
MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt
YTVkM2NiOTE4MjA2LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2
LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWseKf/h
OCeLee4r/PwrbIh2Hqbr5zAxdbteQGIUK/Gb2R2yOE1tdAQIxtOtb7x8TIxoRNMn
cTxgPnLraYh1Nbo4XXZ8RELunl+x2UljjL6HBUpYIoopTH7uFrMt12oJezxg9oni
YlflO2oSkWeKdt6SJ+QddJSScf8+x8IsZcvdFUZ6uQi1qhj81LYczSFgxFkkd3Mv
qnHzxKik4Jad2g2Bx7HHBO/Qsy2QJSfoADW8DL0dUbA2ZRzX2f745+k5vdsvgKhH
Lgzq3oRD5ZCMm+6onKiMsOl8Ic06wJ93a9Y2LnIQdYlN1wbHvDYK3eKQJLmzdVzy
mpE5/ZCgoN5ubQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:22 2025 by rpki-client