Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: z556G5W9x88LQ+RsZxbIwoUxT7fsudj8iObq04/L6NI=
Subject key identifier: 92:F1:C1:10:C5:9E:0D:C1:24:0B:CC:69:8E:0A:A6:DE:ED:C3:FA:72
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019A53E3A1475F831C9508A687573315E37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 12:00:18 +0000
Manifest this update: Wed 05 Nov 2025 12:00:18 +0000
Manifest next update: Thu 06 Nov 2025 12:00:18 +0000
Files and hashes: 1: NFVItNq2OuycBZAKwujdNRPdjR4.roa (hash: kFLAiEsjdkmomPuGBpZgEpCt6qeMdIVgeardYp2BucY=)
2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: E37VG8Aj6xKd6QBKEuin5YEHYg3xiRkvuV9EA9nAsEk=)
3: QheNcxsOMuaxLgjUMz8IKhAE4zI.roa (hash: 1qU8I97VIdY7GQVn2XafsvIYaI5J0RtyUS8ikCjbw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:a1:47:5f:83:1c:95:08:a6:87:57:33:15:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Nov 5 12:00:18 2025 GMT
Not After : Nov 6 12:00:18 2025 GMT
Subject: CN=92f1c110c59e0dc1240bcc698e0aa6deedc3fa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:b4:b9:da:60:8d:2e:94:78:bd:6b:48:f4:
68:fd:1a:68:e6:a0:44:af:52:16:8c:d5:63:55:f4:
c3:68:08:35:e4:8c:e4:61:ca:54:b1:cb:b1:da:f6:
95:01:ce:7d:fd:fb:92:01:7c:66:ac:23:85:54:3f:
47:b2:27:4f:7e:0f:5c:01:94:27:76:0f:00:93:39:
bb:43:2a:8d:a1:8f:a6:36:14:92:95:ac:20:2b:1a:
8a:34:f3:3a:9e:ef:af:0b:ae:42:de:52:81:51:49:
45:cf:99:8c:f2:81:d3:e1:38:1d:ac:85:45:f2:a8:
8f:76:69:db:fc:7e:f5:a8:07:60:d2:84:da:33:e4:
8b:e7:d9:bd:76:bd:bc:82:51:74:85:d8:cb:84:be:
ca:2a:f7:ed:e4:1a:13:68:2c:eb:ab:87:58:ef:45:
29:bb:81:09:ba:79:82:55:8f:97:83:9d:c2:44:1c:
ea:e0:e2:44:9f:a3:30:96:c5:dd:c9:41:73:68:90:
67:97:24:ec:38:9d:9c:b4:0f:1b:2e:db:ce:9a:30:
33:5c:c3:f8:88:31:9a:f1:0e:a3:70:e5:b9:20:05:
5c:c1:ac:76:99:b7:17:13:14:c9:96:15:90:2b:0e:
fe:5f:76:bd:7c:1e:3c:6d:12:0b:b6:df:3b:b7:06:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:C1:10:C5:9E:0D:C1:24:0B:CC:69:8E:0A:A6:DE:ED:C3:FA:72
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:41:b6:ca:10:bc:e1:2c:dc:df:1a:fa:d3:f9:7a:0f:e6:2b:
53:41:b6:80:0c:a5:50:96:4d:77:4d:cd:92:85:8b:91:fa:16:
3b:5d:ea:dc:32:5c:84:e0:d2:f2:49:f6:94:8d:d1:42:1c:e5:
ef:4b:8a:bf:f4:92:5a:89:32:2d:b8:d9:52:85:cf:90:db:38:
13:e1:98:bc:46:1e:a7:fa:7b:02:ad:c0:35:58:ce:04:85:5b:
fd:fa:fa:32:fa:79:0c:03:ed:b6:67:07:f8:38:54:41:91:6e:
fe:61:b2:63:7a:cf:fd:a6:5e:85:27:33:fa:36:6e:89:b0:aa:
19:64:45:fa:5e:3d:c2:9e:89:0c:13:50:b5:19:ed:30:71:33:
5b:ba:92:2e:36:1b:8d:fb:17:ca:e3:dc:63:c7:5f:41:22:2b:
0d:ba:ef:a1:e3:ac:53:19:e8:36:46:d5:78:0f:dd:18:34:b5:
88:84:d5:1c:5d:49:0a:4f:99:85:9f:6e:83:78:eb:ee:f8:07:
6b:1d:d1:59:57:ce:33:65:32:57:76:8c:00:98:1d:77:f5:10:
3c:78:c8:9a:27:47:d3:ef:9a:3d:84:a2:97:d6:d7:47:60:bd:
ae:e1:55:98:9d:45:54:9c:d7:27:65:4c:da:4c:5f:d9:7a:d2:
00:61:a9:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT46FHX4MclQimh1czFeN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5
NGFmNzQwHhcNMjUxMTA1MTIwMDE4WhcNMjUxMTA2MTIwMDE4WjAzMTEwLwYDVQQD
Eyg5MmYxYzExMGM1OWUwZGMxMjQwYmNjNjk4ZTBhYTZkZWVkYzNmYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb60udpgjS6UeL1rSPRo/Rpo5qBE
r1IWjNVjVfTDaAg15IzkYcpUscux2vaVAc59/fuSAXxmrCOFVD9HsidPfg9cAZQn
dg8Akzm7QyqNoY+mNhSSlawgKxqKNPM6nu+vC65C3lKBUUlFz5mM8oHT4TgdrIVF
8qiPdmnb/H71qAdg0oTaM+SL59m9dr28glF0hdjLhL7KKvft5BoTaCzrq4dY70Up
u4EJunmCVY+Xg53CRBzq4OJEn6MwlsXdyUFzaJBnlyTsOJ2ctA8bLtvOmjAzXMP4
iDGa8Q6jcOW5IAVcwax2mbcXExTJlhWQKw7+X3a9fB48bRILtt87twaX0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLxwRDFng3BJAvMaY4Kpt7tw/pyMB8GA1UdIwQY
MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt
ZGIzMTlhMzFiZGY3LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3
LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUG2yhC8
4Szc3xr60/l6D+YrU0G2gAylUJZNd03NkoWLkfoWO13q3DJchODS8kn2lI3RQhzl
70uKv/SSWokyLbjZUoXPkNs4E+GYvEYep/p7Aq3ANVjOBIVb/fr6Mvp5DAPttmcH
+DhUQZFu/mGyY3rP/aZehScz+jZuibCqGWRF+l49wp6JDBNQtRntMHEzW7qSLjYb
jfsXyuPcY8dfQSIrDbrvoeOsUxnoNkbVeA/dGDS1iITVHF1JCk+ZhZ9ug3jr7vgH
ax3RWVfOM2UyV3aMAJgdd/UQPHjImidH0++aPYSil9bXR2C9ruFVmJ1FVJzXJ2VM
2kxf2XrSAGGphQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:45:56 2025 by rpki-client