Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: bZ0ZywSUXuZZ/O+7vuJjzmVQXRskRRKXaLqn+7qFE+8=
Subject key identifier: 27:21:83:44:8D:7F:A9:DE:42:8F:9C:C3:33:A8:CA:D9:61:F6:CD:64
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019A4DAAFE4226FE3B4A35CE70B5EB4AE3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1724
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: OMJBBrbct5lJ3NPYQmwZDQfwPtI.roa (hash: P3SI0RFFQoE5StxjZVsTtoH382rKU+KGYXsOJugHreU=)
2: cJdu0V5pMBHO2m87So-B01Jh_Jc.roa (hash: 6fxmkYyCblDli/sa68IlSqPDlhmdfGTFCuG9dCmK83s=)
3: iXq0qrpCPo99PfUTjErWp7OhuBI.roa (hash: X22zlHUhN0LvDPli4rURv75ZdIFsXhRBny1jLbjYx7g=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: EEIdq6gWQryHr5Y5qe/aiFDiQEKoU4zi0Bm5AupRu3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fe:42:26:fe:3b:4a:35:ce:70:b5:eb:4a:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=272183448d7fa9de428f9cc333a8cad961f6cd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:46:7f:f3:f8:fe:96:89:7e:ad:ad:6b:0a:
68:e2:76:38:5b:2c:34:c6:2c:b1:00:c9:d1:f3:17:
0e:61:31:e9:d2:53:03:c9:e7:7a:88:c1:8b:ca:b3:
09:c4:15:96:17:1f:44:8c:db:e4:2e:14:f2:e9:7a:
58:be:b6:72:40:fe:8d:c8:a6:49:03:52:88:e7:15:
da:a8:1b:ed:8c:d8:26:c4:4f:40:55:4b:41:ec:8d:
9f:57:58:e4:7f:35:89:d9:d5:ca:4b:4e:ad:28:4a:
e4:c3:20:e3:34:ce:b8:b1:66:5b:06:82:db:11:21:
d8:27:fb:c3:88:cb:4b:e4:32:8b:c5:ca:09:cd:f2:
68:7a:0d:51:85:d8:97:bb:84:49:e5:54:8f:d3:2d:
5a:11:aa:e3:51:67:48:65:76:19:5b:53:fe:f4:f5:
3b:1b:f0:51:db:51:21:93:70:2c:be:16:d3:8c:0f:
7f:8c:f5:98:4d:09:06:d8:54:3c:42:08:0d:29:97:
e7:54:b4:76:f1:e9:82:0a:f3:32:87:09:0c:27:c8:
31:9c:e1:6b:68:71:8f:2a:5f:36:af:c7:39:fa:70:
8e:74:6c:e9:19:8f:f8:11:9c:16:ef:5f:e7:14:6d:
58:8c:51:1f:02:fa:c1:79:cc:ec:d1:b2:5b:ed:be:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:83:44:8D:7F:A9:DE:42:8F:9C:C3:33:A8:CA:D9:61:F6:CD:64
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0e:eb:f2:b7:04:62:aa:18:2a:fa:16:0d:55:8f:7b:8d:75:
c6:c0:0a:1e:53:da:bf:6e:dd:68:6b:d9:59:21:45:85:1c:f0:
7a:55:ff:75:b1:27:6f:3f:5a:21:a6:a4:a9:12:21:cd:83:9f:
ba:49:34:3b:da:c9:8e:b5:a1:7e:1a:ef:ef:84:bf:e2:4b:f9:
46:ec:a5:7a:08:5c:aa:9d:00:6f:fe:01:15:29:4e:dd:fb:e1:
98:94:ff:df:7c:fa:24:a1:04:c7:b5:c5:d6:34:d2:f9:7f:62:
9e:5b:e6:6a:bd:e1:06:b3:71:dd:16:86:7d:05:2c:a0:0e:3c:
4a:6f:12:f6:9c:0a:8c:3c:35:76:2a:61:7b:b6:93:9e:87:7f:
89:92:79:ad:60:6a:45:e1:82:03:3d:94:48:66:f5:b6:de:4d:
97:09:c6:7b:9b:5a:45:17:f5:04:55:d4:99:38:9f:ae:4a:51:
d2:17:db:3a:fc:25:f1:51:38:88:64:a9:7d:e0:ac:eb:87:e8:
6d:58:84:5c:4b:86:a2:6c:57:d4:c7:fd:c7:6d:cb:85:0b:be:
62:7b:55:e7:03:17:9c:de:be:e1:0e:27:f2:79:e7:e4:20:c4:
b0:ac:28:0b:f7:b3:13:42:dd:a9:5a:52:cd:2e:67:0b:b8:a8:
1f:d9:d5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqv5CJv47SjXOcLXrSuPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz
NTQzNWQwHhcNMjUxMTA0MDcwMDQzWhcNMjUxMTA1MDcwMDQzWjAzMTEwLwYDVQQD
EygyNzIxODM0NDhkN2ZhOWRlNDI4ZjljYzMzM2E4Y2FkOTYxZjZjZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32dGf/P4/paJfq2tawpo4nY4Wyw0
xiyxAMnR8xcOYTHp0lMDyed6iMGLyrMJxBWWFx9EjNvkLhTy6XpYvrZyQP6NyKZJ
A1KI5xXaqBvtjNgmxE9AVUtB7I2fV1jkfzWJ2dXKS06tKErkwyDjNM64sWZbBoLb
ESHYJ/vDiMtL5DKLxcoJzfJoeg1RhdiXu4RJ5VSP0y1aEarjUWdIZXYZW1P+9PU7
G/BR21Ehk3AsvhbTjA9/jPWYTQkG2FQ8QggNKZfnVLR28emCCvMyhwkMJ8gxnOFr
aHGPKl82r8c5+nCOdGzpGY/4EZwW71/nFG1YjFEfAvrBeczs0bJb7b52LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCchg0SNf6neQo+cwzOoytlh9s1kMB8GA1UdIwQY
MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct
NTA3MDExNTcwZWU2LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2
LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA7r8rcE
YqoYKvoWDVWPe411xsAKHlPav27daGvZWSFFhRzwelX/dbEnbz9aIaakqRIhzYOf
ukk0O9rJjrWhfhrv74S/4kv5Ruyleghcqp0Ab/4BFSlO3fvhmJT/33z6JKEEx7XF
1jTS+X9inlvmar3hBrNx3RaGfQUsoA48Sm8S9pwKjDw1diphe7aTnod/iZJ5rWBq
ReGCAz2USGb1tt5NlwnGe5taRRf1BFXUmTifrkpR0hfbOvwl8VE4iGSpfeCs64fo
bViEXEuGomxX1Mf9x23LhQu+YntV5wMXnN6+4Q4n8nnn5CDEsKwoC/ezE0LdqVpS
zS5nC7ioH9nV8A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:27 2025 by rpki-client