Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: QAOrt42grBlv3+u+MLQTbuRFGdty02FUHIdfO6i9FpM=
Subject key identifier: 95:CF:2C:97:84:ED:D8:D9:39:27:F6:36:46:68:49:68:5D:AB:41:79
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 019A530860EBEF478B460D2A11424418C012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 08:00:49 +0000
Manifest this update: Wed 05 Nov 2025 08:00:49 +0000
Manifest next update: Thu 06 Nov 2025 08:00:49 +0000
Files and hashes: 1: 8cUHkHeMSC76fH99pPRKCG6K4As.roa (hash: 55nCWREAZoiaySk5Kp1IWRogrctw38RXeb5qRSfBuwo=)
2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: GZk9Kpvl8dRJ0W6zSPs6NyNRiVI12GwVsdJpc2S6vz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:60:eb:ef:47:8b:46:0d:2a:11:42:44:18:c0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Nov 5 08:00:49 2025 GMT
Not After : Nov 6 08:00:49 2025 GMT
Subject: CN=95cf2c9784edd8d93927f636466849685dab4179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:fb:c1:ff:27:51:af:4a:08:4e:54:dd:f7:
af:fe:38:13:e8:95:b3:ea:7a:71:30:e4:bf:fa:3d:
19:69:46:7e:c7:a6:d4:c9:58:f9:60:b8:d8:f3:02:
94:1f:9e:73:9b:ca:2c:ec:63:29:58:cb:a9:e2:9b:
8d:77:15:4a:0c:fe:ae:a5:f3:94:09:84:31:b3:0e:
8b:b5:77:25:a1:b5:3a:6f:c1:18:5a:82:12:6a:15:
50:ea:58:79:d8:28:61:4c:60:11:88:bf:4a:fa:01:
0e:f9:59:96:51:3c:3e:22:48:97:7d:cb:fc:a7:d9:
5a:5f:b8:46:c6:15:b7:c2:a9:4f:d7:b8:76:08:ad:
10:58:8d:b8:68:86:3b:6b:8f:85:f3:df:2b:b0:84:
81:11:bc:e0:6b:94:c4:a3:26:8f:5e:f1:1c:86:69:
90:74:27:4b:7e:fa:9f:bd:9a:94:71:c9:3c:3d:e8:
3a:2f:b4:6d:f1:3a:9b:05:d5:89:c4:c1:60:dd:64:
38:b4:25:d9:a7:b3:a9:f7:f2:11:0e:c0:87:55:47:
a2:d3:95:dc:8d:42:94:df:1b:ae:99:c8:96:dc:ab:
f6:c2:f7:99:bf:be:33:15:f0:d3:9e:0a:2d:04:97:
4c:76:f1:d1:e9:90:15:2c:fb:f3:62:e2:1c:40:c2:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CF:2C:97:84:ED:D8:D9:39:27:F6:36:46:68:49:68:5D:AB:41:79
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d9:77:b0:f4:ca:9d:3f:50:50:0b:4e:eb:1d:b9:af:dd:80:
7e:b8:4a:26:a0:d3:b7:e4:9f:fd:2b:de:82:1b:fe:c2:9e:af:
24:d0:87:de:5f:39:bc:22:f1:07:82:e8:fc:b8:57:6b:ca:52:
21:4a:0a:83:03:7c:a9:95:af:3f:37:3d:2d:2f:83:63:83:06:
ba:67:6e:10:f0:13:21:fa:28:0c:e7:94:5b:ac:89:7b:d7:d0:
f3:b0:48:c5:5e:f6:ef:06:49:40:de:8f:42:32:29:d9:b9:ac:
45:88:e9:2e:66:43:41:02:27:f3:6e:16:b6:18:1f:51:c2:f4:
25:2a:52:dd:f0:c5:ae:d5:31:d2:bf:ac:2a:72:d3:24:eb:03:
66:cc:11:c8:c3:0c:58:82:b4:71:31:c2:fb:58:47:90:16:27:
b3:ae:7f:62:cb:ca:b1:24:9a:b7:d2:cf:3d:00:e6:ee:ef:90:
65:d8:f3:99:ce:b5:1a:02:f0:b0:94:e4:61:f8:40:95:df:2b:
1d:bd:c6:df:7d:54:ba:cc:6d:0a:d3:62:53:8e:c7:3c:6a:a4:
60:26:f7:c7:1f:7b:71:a0:23:33:a1:86:8c:ec:41:4e:9d:64:
d7:a6:36:b9:e4:b3:29:d8:30:8e:7f:c8:4c:f1:c4:19:93:5f:
c8:c1:33:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCGDr70eLRg0qEUJEGMASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDgyYjEzMjBiOTgwZjQ2ZDZlNDA0ZmU3ZDU4YmRiMTFk
NTBmZDMwHhcNMjUxMTA1MDgwMDQ5WhcNMjUxMTA2MDgwMDQ5WjAzMTEwLwYDVQQD
Eyg5NWNmMmM5Nzg0ZWRkOGQ5MzkyN2Y2MzY0NjY4NDk2ODVkYWI0MTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqov7wf8nUa9KCE5U3fev/jgT6JWz
6npxMOS/+j0ZaUZ+x6bUyVj5YLjY8wKUH55zm8os7GMpWMup4puNdxVKDP6upfOU
CYQxsw6LtXclobU6b8EYWoISahVQ6lh52ChhTGARiL9K+gEO+VmWUTw+IkiXfcv8
p9laX7hGxhW3wqlP17h2CK0QWI24aIY7a4+F898rsISBEbzga5TEoyaPXvEchmmQ
dCdLfvqfvZqUcck8Peg6L7Rt8TqbBdWJxMFg3WQ4tCXZp7Op9/IRDsCHVUei05Xc
jUKU3xuumciW3Kv2wveZv74zFfDTngotBJdMdvHR6ZAVLPvzYuIcQMI9zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXPLJeE7djZOSf2NkZoSWhdq0F5MB8GA1UdIwQY
MBaAFDhIKxMguYD0bW5AT+fVi9sR1Q/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAt
NWNmNDNkMzU5MDhlLzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMzI0NTQtM2VmOS00NDEyLTg1NzAtNWNmNDNkMzU5MDhl
LzEvT0VnckV5QzVnUFJ0YmtCUDU5V0wyeEhWRDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedl3sPTK
nT9QUAtO6x25r92AfrhKJqDTt+Sf/Sveghv+wp6vJNCH3l85vCLxB4Lo/LhXa8pS
IUoKgwN8qZWvPzc9LS+DY4MGumduEPATIfooDOeUW6yJe9fQ87BIxV727wZJQN6P
QjIp2bmsRYjpLmZDQQIn824WthgfUcL0JSpS3fDFrtUx0r+sKnLTJOsDZswRyMMM
WIK0cTHC+1hHkBYns65/YsvKsSSat9LPPQDm7u+QZdjzmc61GgLwsJTkYfhAld8r
Hb3G331UusxtCtNiU47HPGqkYCb3xx97caAjM6GGjOxBTp1k16Y2ueSzKdgwjn/I
TPHEGZNfyMEz8Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:20 2025 by rpki-client