Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: STHTK4PGSvV9c8NjocEEqU+dVuLQ2rB5+gPYolgms0A=
Subject key identifier: 3C:F5:77:C0:18:88:A4:E5:BB:14:61:D3:51:EF:67:A3:C3:43:15:F0
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019A4FCFF0A374411B33FBCD85987B878B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 1341
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: +qrXiy4yxNydNyr0SAU1bI/A/4ukzSA5lnF/YK4+USE=)
2: SkpuG1SShh_Tu0tEsS_zldokzRY.roa (hash: dFYDpE1wahaZPqcUFRinjMxK5eBFUvf/eJm1l8owCY8=)
3: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (hash: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f0:a3:74:41:1b:33:fb:cd:85:98:7b:87:8b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=3cf577c01888a4e5bb1461d351ef67a3c34315f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:b1:b3:5c:a2:d6:08:4d:c8:73:87:31:26:
3e:f0:0f:ba:30:53:06:b5:84:39:53:6b:1a:2f:20:
4c:2f:a4:6c:01:87:88:4e:48:7f:fc:9f:39:07:3e:
fd:35:23:ae:b1:9a:de:17:5c:79:ff:d0:de:3a:08:
8e:cb:f9:4e:5b:0e:d0:0c:38:a0:67:91:e4:86:30:
81:ad:01:77:05:bf:b2:0c:cc:12:db:46:ac:8c:ad:
f7:a2:03:fc:13:cb:50:be:c2:bc:d4:01:f6:c0:b2:
3c:d1:f6:c5:1e:ac:39:ae:38:a3:1b:5b:e4:1d:c4:
34:53:37:49:f2:ca:a7:65:00:f3:82:4c:f1:64:05:
15:3e:8f:ee:7b:56:07:2e:fe:b8:82:37:d6:d9:1c:
5f:fa:a4:d7:4d:c4:9c:f5:25:6e:35:3f:ae:8d:c0:
b9:15:6b:e1:b8:03:c0:4b:cf:14:b7:a0:c5:f4:b1:
61:89:20:71:9d:6b:ba:fd:d4:98:14:79:1a:70:0b:
1a:87:bb:e6:69:c7:e0:a3:09:0a:dc:b2:7d:42:6a:
96:d3:a6:4e:26:58:b4:56:d1:80:ec:ac:63:80:7e:
35:ee:7a:2e:fb:5c:26:f9:bf:d8:69:53:92:15:3b:
04:84:f0:44:6e:3d:37:43:e5:92:65:0d:c4:9b:bf:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:77:C0:18:88:A4:E5:BB:14:61:D3:51:EF:67:A3:C3:43:15:F0
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:37:fa:08:38:d2:cc:fa:fd:8f:b3:9e:09:40:88:ac:78:c5:
63:77:8f:a1:ed:2d:8b:f9:19:8b:c4:82:c7:1d:a7:cb:22:e8:
05:86:52:3c:71:6e:0b:ba:1f:05:97:ca:24:2d:a9:1b:a5:d8:
28:85:80:e9:8a:9f:93:a3:b7:42:54:5a:3c:ce:79:d3:b8:bb:
17:e8:bb:69:e8:ca:79:a6:f1:0f:7f:7c:3a:33:7e:7c:65:76:
21:29:f3:e8:c3:2c:10:2a:dc:78:aa:48:5f:6a:ec:ae:fc:30:
7d:d2:99:8a:c3:ea:3f:6b:89:54:23:68:77:04:c2:49:7f:88:
c4:d4:c6:fa:77:8b:a6:a6:7c:c2:c4:7e:40:d2:06:82:83:5a:
9c:51:8c:a5:62:10:fc:d4:34:08:fb:de:d3:c0:46:78:60:b2:
76:6f:84:ff:af:9d:05:54:f9:91:be:0d:c5:a9:af:fa:d7:61:
dc:0b:e0:d7:ff:82:06:27:ef:80:f1:cd:71:08:f4:25:b9:9f:
33:f2:df:e5:fd:c6:43:6b:b5:12:17:78:72:99:9b:b3:c1:df:
d8:e9:39:da:8f:b4:8a:e8:9e:ea:b5:fd:61:8d:ac:0f:42:ba:
5e:c0:06:a9:37:d4:34:43:bd:53:4c:cf:63:81:67:ee:df:b0:
8c:bb:22:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz/CjdEEbM/vNhZh7h4tUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OGU5NjI4NDBjZDMxNjhkZDJlYTM5NmZlNjgxMjc2Mjhh
ZWFjMjcwHhcNMjUxMTA0MTcwMDE4WhcNMjUxMTA1MTcwMDE4WjAzMTEwLwYDVQQD
EygzY2Y1NzdjMDE4ODhhNGU1YmIxNDYxZDM1MWVmNjdhM2MzNDMxNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lyxs1yi1ghNyHOHMSY+8A+6MFMG
tYQ5U2saLyBML6RsAYeITkh//J85Bz79NSOusZreF1x5/9DeOgiOy/lOWw7QDDig
Z5HkhjCBrQF3Bb+yDMwS20asjK33ogP8E8tQvsK81AH2wLI80fbFHqw5rjijG1vk
HcQ0UzdJ8sqnZQDzgkzxZAUVPo/ue1YHLv64gjfW2Rxf+qTXTcSc9SVuNT+ujcC5
FWvhuAPAS88Ut6DF9LFhiSBxnWu6/dSYFHkacAsah7vmacfgowkK3LJ9QmqW06ZO
Jli0VtGA7KxjgH417nou+1wm+b/YaVOSFTsEhPBEbj03Q+WSZQ3Em795iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDz1d8AYiKTluxRh01HvZ6PDQxXwMB8GA1UdIwQY
MBaAFDiOlihAzTFo3S6jlv5oEnYorqwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEt
YzMyMTg0MGMxZmFhLzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NWVhM2UtZDdlMi00MzBjLWFmOGEtYzMyMTg0MGMxZmFh
LzEvT0k2V0tFRE5NV2pkTHFPV19tZ1NkaWl1ckNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjf6CDjS
zPr9j7OeCUCIrHjFY3ePoe0ti/kZi8SCxx2nyyLoBYZSPHFuC7ofBZfKJC2pG6XY
KIWA6Yqfk6O3QlRaPM5507i7F+i7aejKeabxD398OjN+fGV2ISnz6MMsECrceKpI
X2rsrvwwfdKZisPqP2uJVCNodwTCSX+IxNTG+neLpqZ8wsR+QNIGgoNanFGMpWIQ
/NQ0CPve08BGeGCydm+E/6+dBVT5kb4Nxamv+tdh3Avg1/+CBifvgPHNcQj0Jbmf
M/Lf5f3GQ2u1Ehd4cpmbs8Hf2Ok52o+0iuie6rX9YY2sD0K6XsAGqTfUNEO9U0zP
Y4Fn7t+wjLsiXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:17:03 2025 by rpki-client