Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: MHBkp4kYMbHf24WSltbEDjugVnIIPw4DYSYsB6kZ9to=
Subject key identifier: 3D:E0:B9:9A:17:87:76:05:1D:41:C9:07:B4:E7:A7:72:95:B0:14:C4
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019A50E3BB9B710F21702A140AF59E589F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:01:33 +0000
Manifest this update: Tue 04 Nov 2025 22:01:33 +0000
Manifest next update: Wed 05 Nov 2025 22:01:33 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: maTGSk4lD9adUVHHa8Q/5aGw05tuappDQuwvULq60tM=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:bb:9b:71:0f:21:70:2a:14:0a:f5:9e:58:9f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Nov 4 22:01:33 2025 GMT
Not After : Nov 5 22:01:33 2025 GMT
Subject: CN=3de0b99a178776051d41c907b4e7a77295b014c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:51:67:18:32:6a:78:84:3f:53:6a:45:e8:
35:7c:0f:f1:dd:5e:80:50:e2:07:11:b8:bb:a7:5f:
4f:12:bd:a8:8a:20:8c:9f:cf:7a:df:a8:59:7b:a6:
a9:13:e7:c1:be:0e:90:0f:ae:83:c2:cd:e2:c7:13:
02:29:9d:b3:05:a5:b0:e2:0c:ce:cc:fd:17:bd:bf:
85:b2:e8:2c:42:72:86:c2:08:f9:17:ca:0a:8f:38:
cd:59:6f:83:ef:0b:23:bb:2b:04:74:7a:cb:12:3b:
2b:5d:47:dc:78:d4:53:1d:a0:80:1d:b5:04:5d:12:
83:8f:58:fb:3e:f3:27:2b:18:4e:61:38:09:20:6f:
da:dc:f7:9d:a5:de:06:42:ca:57:bd:e6:b5:77:7c:
34:c6:e6:a0:da:ef:b9:15:5c:cd:63:1f:02:61:2a:
a2:d9:8d:ba:6d:cf:49:2f:38:0b:a9:bb:25:36:34:
8a:5b:5e:78:ee:39:0f:ce:b0:f9:80:b1:0a:27:4e:
2e:35:46:f3:78:af:8f:69:1c:6a:cf:56:00:14:f0:
66:7b:fe:c6:8f:6b:ed:f9:ad:27:43:7d:d9:17:42:
ab:30:ad:2a:ef:81:c2:90:bd:a8:ce:ed:65:d9:5c:
37:7c:f1:de:02:44:0f:e4:69:9b:f6:92:04:ce:c7:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:B9:9A:17:87:76:05:1D:41:C9:07:B4:E7:A7:72:95:B0:14:C4
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:39:a2:e0:0e:99:01:81:1e:cc:aa:c0:a5:8d:e0:39:99:90:
5d:29:e1:53:db:e4:f6:37:e1:64:6d:a6:be:e2:41:01:14:9c:
fa:a3:13:0a:52:85:a6:24:10:d6:08:b8:30:87:cb:88:6f:3e:
75:92:08:9c:96:9c:d5:3a:82:8d:a6:85:5d:c5:9b:8c:8d:a4:
c6:ed:4d:3c:89:de:ee:59:29:b3:9a:49:b2:e4:11:49:5c:46:
05:59:d1:5a:22:74:44:40:2c:6e:06:d7:b7:5f:5d:ce:37:c3:
ea:ae:40:a8:7e:67:f6:d8:df:d3:9f:41:36:74:f4:96:1f:06:
1c:3b:dc:12:87:44:10:d9:1a:27:fc:43:c1:b2:3c:34:97:ea:
35:22:d1:27:eb:12:35:cc:f3:1c:86:4b:ce:c2:27:c9:03:3b:
2e:2a:b6:34:91:6c:61:dc:87:b3:0e:d5:c1:25:c2:80:77:60:
54:4e:64:68:a4:c5:ec:eb:a4:f6:c6:e4:c5:1a:2a:f7:5d:0f:
75:fe:b7:72:94:2b:94:ae:70:68:0e:f3:ad:57:59:fa:66:60:
d1:91:b4:a3:d2:dd:8a:27:04:48:be:25:f5:93:97:f6:8d:98:
27:f0:25:29:5f:6e:d8:41:e6:49:8d:fd:2a:71:e6:46:ad:ba:
1c:3d:b3:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ47ubcQ8hcCoUCvWeWJ8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4
YmRhY2YwHhcNMjUxMTA0MjIwMTMzWhcNMjUxMTA1MjIwMTMzWjAzMTEwLwYDVQQD
EygzZGUwYjk5YTE3ODc3NjA1MWQ0MWM5MDdiNGU3YTc3Mjk1YjAxNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVtRZxgyaniEP1NqReg1fA/x3V6A
UOIHEbi7p19PEr2oiiCMn89636hZe6apE+fBvg6QD66Dws3ixxMCKZ2zBaWw4gzO
zP0Xvb+FsugsQnKGwgj5F8oKjzjNWW+D7wsjuysEdHrLEjsrXUfceNRTHaCAHbUE
XRKDj1j7PvMnKxhOYTgJIG/a3Pedpd4GQspXvea1d3w0xuag2u+5FVzNYx8CYSqi
2Y26bc9JLzgLqbslNjSKW1547jkPzrD5gLEKJ04uNUbzeK+PaRxqz1YAFPBme/7G
j2vt+a0nQ33ZF0KrMK0q74HCkL2ozu1l2Vw3fPHeAkQP5Gmb9pIEzseYcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3guZoXh3YFHUHJB7Tnp3KVsBTEMB8GA1UdIwQY
MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt
NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm
LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDmi4A6Z
AYEezKrApY3gOZmQXSnhU9vk9jfhZG2mvuJBARSc+qMTClKFpiQQ1gi4MIfLiG8+
dZIInJac1TqCjaaFXcWbjI2kxu1NPIne7lkps5pJsuQRSVxGBVnRWiJ0REAsbgbX
t19dzjfD6q5AqH5n9tjf059BNnT0lh8GHDvcEodEENkaJ/xDwbI8NJfqNSLRJ+sS
NczzHIZLzsInyQM7Liq2NJFsYdyHsw7VwSXCgHdgVE5kaKTF7Ouk9sbkxRoq910P
df63cpQrlK5waA7zrVdZ+mZg0ZG0o9LdiicESL4l9ZOX9o2YJ/AlKV9u2EHmSY39
KnHmRq26HD2zHA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:20:06 2025 by rpki-client