Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: m+kZBzaQ12mFrd4iVRT4lSi8eQhf17bMIL4xGcM5DhI=
Subject key identifier: 39:AF:E5:90:31:5F:8E:CB:29:DC:E5:E7:97:2B:6F:3E:66:BB:1A:C8
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 019A4D3D02B754F6F36EDE928AD35A74D6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 0331
Signing time: Tue 04 Nov 2025 05:00:35 +0000
Manifest this update: Tue 04 Nov 2025 05:00:35 +0000
Manifest next update: Wed 05 Nov 2025 05:00:35 +0000
Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: 5s/Pl6/nGCZcKwM44rZ0GpIsqt8BFPIe1LgQ+bxBgQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:02:b7:54:f6:f3:6e:de:92:8a:d3:5a:74:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Nov 4 05:00:35 2025 GMT
Not After : Nov 5 05:00:35 2025 GMT
Subject: CN=39afe590315f8ecb29dce5e7972b6f3e66bb1ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:76:1e:63:f8:16:66:e0:b7:9e:da:42:e3:
a1:cf:d9:02:3f:f4:38:8c:4b:9a:d4:e2:1a:31:b7:
5d:ad:25:75:75:b2:e3:36:31:87:3a:cb:f9:5a:24:
91:93:6f:ed:d2:73:4f:06:91:cb:14:a0:83:6f:b5:
2e:8c:14:66:8f:48:9a:a5:60:5c:a8:4c:cb:70:7f:
cd:d7:92:46:be:c6:f8:8f:86:67:e7:f3:3e:22:f7:
9c:cf:98:aa:b1:56:fc:f5:c3:a3:53:71:6c:62:84:
e4:44:79:6c:b0:a2:a5:4c:31:3d:56:8d:7c:ec:05:
e5:fa:24:87:df:3e:05:96:bd:2b:17:94:db:db:f3:
bd:50:32:0a:87:db:34:09:c6:7d:f1:d4:27:1d:aa:
ba:62:b0:ef:ca:32:39:00:de:eb:a0:d5:5d:aa:bf:
bf:b4:58:a1:44:94:39:a2:05:ac:c9:31:3c:a9:85:
9d:9f:4c:f1:cc:9b:cb:04:89:98:9d:3d:2a:0e:a9:
f5:ff:4f:74:e7:c8:49:24:8e:f6:c8:3c:98:0f:27:
aa:e6:8a:70:0a:bf:9e:fa:93:10:b2:01:be:db:eb:
33:75:e4:ea:35:67:c4:22:3c:7d:86:c0:82:86:0e:
be:72:32:26:e4:08:d9:f7:bb:21:2a:24:bd:80:6a:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AF:E5:90:31:5F:8E:CB:29:DC:E5:E7:97:2B:6F:3E:66:BB:1A:C8
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:8c:92:87:98:2a:2d:54:f0:c9:db:99:bd:d6:0d:ad:2c:
36:ca:c4:03:55:4b:70:0b:d3:f3:64:64:83:1c:7b:8e:77:15:
a9:21:03:8a:56:c6:68:4b:2a:af:32:eb:d6:10:0b:0a:0b:07:
0a:20:3d:91:ff:53:74:10:97:4f:c7:2f:b2:53:eb:43:a2:9b:
03:1b:ad:b4:cd:43:dd:b7:5a:6d:08:1a:fa:e4:aa:63:c8:d9:
45:32:57:ab:8c:d2:1e:f6:85:32:36:09:cd:bf:95:fe:ef:a5:
e7:42:1f:38:41:79:0e:d4:dd:4c:1e:5e:cd:0c:8f:91:7e:7d:
44:d2:7c:c8:62:fd:e8:da:e9:14:71:ea:f1:f6:56:38:a4:a0:
3b:47:f2:1d:18:04:d7:b2:77:88:65:c7:81:99:eb:b1:08:50:
b9:a5:b8:9b:46:b8:ca:30:fe:35:75:da:06:14:7d:08:3a:28:
08:d0:5a:f8:92:58:5a:6b:f0:d2:2f:7e:92:ce:47:a6:bd:28:
a9:62:54:58:96:12:8a:64:3d:18:11:a8:ce:01:d2:f9:86:1e:
ad:90:75:aa:05:c8:33:a3:1b:bb:2a:de:14:20:be:4d:73:f5:
71:9d:16:3d:71:12:22:55:85:98:94:c6:4e:4c:88:53:8a:e9:
30:77:ba:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPQK3VPbzbt6SitNadNbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODM4MjRmZGMyOWViZTRhYzI4NmNhMDE4NDRkZjg2ZDRk
NzVlYzAwHhcNMjUxMTA0MDUwMDM1WhcNMjUxMTA1MDUwMDM1WjAzMTEwLwYDVQQD
EygzOWFmZTU5MDMxNWY4ZWNiMjlkY2U1ZTc5NzJiNmYzZTY2YmIxYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9x92HmP4Fmbgt57aQuOhz9kCP/Q4
jEua1OIaMbddrSV1dbLjNjGHOsv5WiSRk2/t0nNPBpHLFKCDb7UujBRmj0iapWBc
qEzLcH/N15JGvsb4j4Zn5/M+Ivecz5iqsVb89cOjU3FsYoTkRHlssKKlTDE9Vo18
7AXl+iSH3z4Flr0rF5Tb2/O9UDIKh9s0CcZ98dQnHaq6YrDvyjI5AN7roNVdqr+/
tFihRJQ5ogWsyTE8qYWdn0zxzJvLBImYnT0qDqn1/09058hJJI72yDyYDyeq5opw
Cr+e+pMQsgG+2+szdeTqNWfEIjx9hsCChg6+cjIm5AjZ97shKiS9gGrkRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmv5ZAxX47LKdzl55crbz5muxrIMB8GA1UdIwQY
MBaAFK6Dgk/cKevkrChsoBhE34bU117AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTkt
OTcwMDU0NmI1NzExLzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTktOTcwMDU0NmI1NzEx
LzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHiMkoeY
Ki1U8Mnbmb3WDa0sNsrEA1VLcAvT82Rkgxx7jncVqSEDilbGaEsqrzLr1hALCgsH
CiA9kf9TdBCXT8cvslPrQ6KbAxuttM1D3bdabQga+uSqY8jZRTJXq4zSHvaFMjYJ
zb+V/u+l50IfOEF5DtTdTB5ezQyPkX59RNJ8yGL96NrpFHHq8fZWOKSgO0fyHRgE
17J3iGXHgZnrsQhQuaW4m0a4yjD+NXXaBhR9CDooCNBa+JJYWmvw0i9+ks5Hpr0o
qWJUWJYSimQ9GBGozgHS+YYerZB1qgXIM6MbuyreFCC+TXP1cZ0WPXESIlWFmJTG
TkyIU4rpMHe6pA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:48 2025 by rpki-client