Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: Q8Q+fMzQwhB1vKYijelT+A8amd6vwNIiNZKQLW67hrU=
Subject key identifier: 95:3B:BB:F1:09:20:4A:5E:FF:04:E8:E2:86:E6:30:99:55:E0:0D:72
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 019A50E3FC653511108F5BA3CD06346886F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 103C
Signing time: Tue 04 Nov 2025 22:01:49 +0000
Manifest this update: Tue 04 Nov 2025 22:01:49 +0000
Manifest next update: Wed 05 Nov 2025 22:01:49 +0000
Files and hashes: 1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: WbBCyAeH2f/fAkceOKsJD1v9OAKxkFv9dO2bEWVgTYw=)
2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:fc:65:35:11:10:8f:5b:a3:cd:06:34:68:86:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Nov 4 22:01:49 2025 GMT
Not After : Nov 5 22:01:49 2025 GMT
Subject: CN=953bbbf109204a5eff04e8e286e6309955e00d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:97:d9:e7:43:2c:f1:52:ee:3b:2c:a9:fc:
ac:95:88:e5:cf:62:e8:fb:22:06:d6:09:50:ef:5d:
c5:ae:db:7a:e9:bf:ab:0d:09:a6:75:eb:79:ae:f5:
72:c2:07:26:f8:c0:74:db:3f:f9:5f:21:a5:c6:51:
d5:85:1d:a3:8c:56:be:eb:33:6d:2d:c1:08:a7:d1:
d2:9c:ba:fe:01:fc:8f:49:2a:74:f1:5c:a9:1d:b9:
eb:9f:d4:8b:a6:f5:b2:45:9f:22:e6:af:c3:6e:10:
be:a4:e3:b2:07:d8:5d:40:fb:15:0d:6b:4d:49:70:
3e:dc:38:d8:34:b4:dd:ff:a4:e9:31:75:04:fd:a5:
80:1a:df:a3:c1:83:34:37:11:91:53:61:02:02:7a:
09:80:40:c4:87:58:ef:6a:0a:2f:4a:50:37:74:a2:
12:6d:87:ec:b5:4b:a0:dc:3e:4d:fd:b2:a2:48:a4:
69:46:9f:da:cc:c5:78:95:e6:24:a4:8d:65:cd:7c:
02:de:02:7c:d2:f0:d3:66:9c:38:d2:17:21:88:7b:
c2:a2:3d:bc:a0:c9:01:82:05:03:32:31:3a:4d:d0:
12:97:6d:1c:a2:b4:c2:e2:4a:6a:18:eb:d1:16:b8:
cb:bf:24:39:5d:ac:47:03:67:dc:3d:c4:ad:3a:01:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:BB:F1:09:20:4A:5E:FF:04:E8:E2:86:E6:30:99:55:E0:0D:72
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d4:c6:3f:42:2f:d0:05:a1:b4:18:8d:01:c7:c7:15:30:e6:
70:7d:28:8f:80:67:08:1d:0c:5e:c1:b0:bc:e7:39:84:e4:0f:
f5:8f:3a:eb:d0:75:e2:7b:d0:e6:43:a0:8c:ec:5e:25:50:ba:
0c:3c:cd:b8:6e:4f:e6:08:c3:a2:db:f1:40:ad:b2:be:3e:7c:
d1:ff:6e:cd:96:64:81:81:be:bf:50:4e:c3:65:78:dc:d5:d7:
c4:47:27:b4:13:3c:38:5a:9d:69:74:dd:ec:75:25:5d:b0:05:
d3:02:b4:df:19:c7:e9:88:e3:3e:46:ef:10:91:af:29:9b:e9:
9b:35:2e:85:c2:e7:f6:16:e6:10:bf:fd:c0:a5:aa:5a:0c:ae:
27:fc:dc:52:a8:f5:58:c8:b9:55:2b:5a:a5:e8:b2:8a:30:78:
bb:40:2b:df:0b:c0:05:f5:48:2e:42:e5:7b:fa:ea:02:8b:da:
24:db:ce:2e:66:c1:09:fb:8f:4f:cf:d4:00:a9:dd:d0:9f:f9:
57:d6:33:37:f3:91:6a:6a:34:8d:7e:f8:a4:c8:35:60:d7:2a:
6f:c4:24:64:2c:d4:3c:9f:8f:c1:6b:28:43:0d:bc:eb:2b:89:
93:51:3a:f9:9e:bb:78:6e:71:d7:be:0b:31:57:90:12:ef:04:
b5:05:a5:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4/xlNREQj1ujzQY0aIb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMDk5NWE4N2JmNjRkYzQ5NDliODE5ZGZlMDJmOGE1ODZh
YWE0ZGUwHhcNMjUxMTA0MjIwMTQ5WhcNMjUxMTA1MjIwMTQ5WjAzMTEwLwYDVQQD
Eyg5NTNiYmJmMTA5MjA0YTVlZmYwNGU4ZTI4NmU2MzA5OTU1ZTAwZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHSX2edDLPFS7jssqfyslYjlz2Lo
+yIG1glQ713Frtt66b+rDQmmdet5rvVywgcm+MB02z/5XyGlxlHVhR2jjFa+6zNt
LcEIp9HSnLr+AfyPSSp08VypHbnrn9SLpvWyRZ8i5q/DbhC+pOOyB9hdQPsVDWtN
SXA+3DjYNLTd/6TpMXUE/aWAGt+jwYM0NxGRU2ECAnoJgEDEh1jvagovSlA3dKIS
bYfstUug3D5N/bKiSKRpRp/azMV4leYkpI1lzXwC3gJ80vDTZpw40hchiHvCoj28
oMkBggUDMjE6TdASl20corTC4kpqGOvRFrjLvyQ5XaxHA2fcPcStOgGPxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJU7u/EJIEpe/wTo4obmMJlV4A1yMB8GA1UdIwQY
MBaAFKAJlah79k3ElJuBnf4C+KWGqqTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGIt
ODkzOGU5NTU2MzQyLzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGItODkzOGU5NTU2MzQy
LzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtTGP0Iv
0AWhtBiNAcfHFTDmcH0oj4BnCB0MXsGwvOc5hOQP9Y8669B14nvQ5kOgjOxeJVC6
DDzNuG5P5gjDotvxQK2yvj580f9uzZZkgYG+v1BOw2V43NXXxEcntBM8OFqdaXTd
7HUlXbAF0wK03xnH6YjjPkbvEJGvKZvpmzUuhcLn9hbmEL/9wKWqWgyuJ/zcUqj1
WMi5VStapeiyijB4u0Ar3wvABfVILkLle/rqAovaJNvOLmbBCfuPT8/UAKnd0J/5
V9YzN/ORamo0jX74pMg1YNcqb8QkZCzUPJ+PwWsoQw286yuJk1E6+Z67eG5x174L
MVeQEu8EtQWlLQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:17 2025 by rpki-client