Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: F+AuNaqTz/KqoOqk8O4Ay4uZstOVA+RZZVONRYyBht0=
Subject key identifier: C8:FD:2F:87:BD:D4:86:EC:A2:43:5E:AE:A6:29:F8:01:4A:95:37:87
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 019A5307F976F0FD506E895F7182B7124FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 0FAB
Signing time: Wed 05 Nov 2025 08:00:22 +0000
Manifest this update: Wed 05 Nov 2025 08:00:22 +0000
Manifest next update: Thu 06 Nov 2025 08:00:22 +0000
Files and hashes: 1: H9x10BlhOPw86EI5C2pvE1Zw13M.roa (hash: QHucV9qKNzN6PEkHvdTSmlNETO8zOFnoDJVkHCpBCPE=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: qbxyJR7U2Qqa1N+lhDqRENF8y8X4LlfEcP2EG7tAjgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:f9:76:f0:fd:50:6e:89:5f:71:82:b7:12:4f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Nov 5 08:00:22 2025 GMT
Not After : Nov 6 08:00:22 2025 GMT
Subject: CN=c8fd2f87bdd486eca2435eaea629f8014a953787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:04:10:fc:93:20:61:cc:ed:4a:e3:54:00:
c4:db:27:c2:9f:1d:9f:ac:83:08:86:e5:51:2b:bd:
4b:59:73:67:fd:4b:0f:1c:5e:58:c1:ae:db:f7:a0:
fe:d8:02:96:ca:68:cf:ea:09:8f:da:94:8d:7a:f2:
39:15:bb:ef:fc:9a:0d:9b:79:d9:95:43:39:eb:b7:
d3:c3:d5:58:5a:78:01:64:8d:e6:36:48:20:9e:4d:
0a:f9:8f:12:13:4c:58:8e:d5:1b:ef:3c:b4:ce:09:
34:41:79:3b:91:41:e2:03:95:31:ac:79:94:3e:cc:
ee:e9:32:fc:8a:52:20:73:ae:a7:3b:fa:a8:50:69:
b8:4c:b3:fc:a5:49:df:a5:71:06:1c:0a:c4:9a:75:
60:9c:ff:62:88:7e:a3:8a:50:5e:60:71:00:f1:b4:
27:11:0e:00:3f:42:46:25:9f:09:64:c2:48:e5:c0:
41:b5:ed:09:9f:6f:6c:d8:bc:90:f0:f2:50:38:89:
1f:87:73:16:3b:8a:39:ae:d5:f8:72:88:90:ec:80:
84:a9:b8:92:99:c5:3e:d1:77:39:49:87:1a:34:63:
f9:f7:c8:0a:fd:88:f3:07:e5:9f:e5:dc:fb:8b:43:
d0:1b:2d:96:72:a8:6a:74:e2:a9:ee:32:ac:ec:f7:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:2F:87:BD:D4:86:EC:A2:43:5E:AE:A6:29:F8:01:4A:95:37:87
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:53:e9:3e:c4:77:b2:f2:66:d0:cd:14:2f:e4:38:58:b5:34:
9a:9a:65:b7:bd:aa:ce:92:96:5c:86:1d:4a:58:0a:c7:a3:e1:
c0:6a:38:2d:5e:eb:86:f8:86:52:f2:71:5c:c1:6b:56:a3:6e:
cc:c7:49:67:be:27:ca:43:d9:a0:ca:1e:ae:2a:6f:b8:a0:f7:
bf:25:13:27:a7:7f:8e:9d:d6:69:fa:ec:5a:29:b8:ee:01:f1:
b1:6e:cf:fd:77:c9:23:b3:a3:fd:14:26:1c:08:ad:6e:ad:4e:
99:c6:a7:ca:77:96:80:ab:23:cf:4c:31:6f:2f:02:27:02:8e:
60:31:63:d6:74:ad:76:b6:6b:5c:87:db:f7:9c:e5:40:52:4b:
a2:80:c0:81:36:3d:ae:90:f8:67:95:b0:05:74:56:15:47:37:
8b:a9:f4:58:a4:37:cc:15:69:9d:d8:89:67:5a:9b:46:f1:38:
b7:63:23:c7:db:8a:9f:a6:5b:4f:f6:f2:9e:72:5f:d8:5b:34:
65:09:1f:af:d9:87:f5:c6:9b:78:ac:76:12:4f:9f:97:1d:61:
22:8b:65:a5:25:96:34:d0:8b:1e:e6:cc:f3:49:b8:31:ef:35:
f8:9a:51:1c:64:01:5e:62:d8:0c:56:ed:1c:3d:c5:4d:a0:86:
b1:08:66:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTB/l28P1QbolfcYK3Ek/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZWIzM2MyY2VmYjVkYTM0NjA3YjAwYjUwMDVlNDRiNzU1
MjRhMWYwHhcNMjUxMTA1MDgwMDIyWhcNMjUxMTA2MDgwMDIyWjAzMTEwLwYDVQQD
EyhjOGZkMmY4N2JkZDQ4NmVjYTI0MzVlYWVhNjI5ZjgwMTRhOTUzNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYsEEPyTIGHM7UrjVADE2yfCnx2f
rIMIhuVRK71LWXNn/UsPHF5Ywa7b96D+2AKWymjP6gmP2pSNevI5Fbvv/JoNm3nZ
lUM567fTw9VYWngBZI3mNkggnk0K+Y8SE0xYjtUb7zy0zgk0QXk7kUHiA5UxrHmU
Pszu6TL8ilIgc66nO/qoUGm4TLP8pUnfpXEGHArEmnVgnP9iiH6jilBeYHEA8bQn
EQ4AP0JGJZ8JZMJI5cBBte0Jn29s2LyQ8PJQOIkfh3MWO4o5rtX4coiQ7ICEqbiS
mcU+0Xc5SYcaNGP598gK/YjzB+Wf5dz7i0PQGy2WcqhqdOKp7jKs7PfCowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj9L4e91IbsokNerqYp+AFKlTeHMB8GA1UdIwQY
MBaAFJjrM8LO+12jRgewC1AF5Et1UkofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYt
MjBjNGRjMWU0YTc3LzEvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83NmIxZDMtNGZkOS00NmNmLTgzZTYtMjBjNGRjMWU0YTc3
LzEvbU9zendzNzdYYU5HQjdBTFVBWGtTM1ZTU2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlPpPsR3
svJm0M0UL+Q4WLU0mpplt72qzpKWXIYdSlgKx6PhwGo4LV7rhviGUvJxXMFrVqNu
zMdJZ74nykPZoMoeripvuKD3vyUTJ6d/jp3WafrsWim47gHxsW7P/XfJI7Oj/RQm
HAitbq1OmcanyneWgKsjz0wxby8CJwKOYDFj1nStdrZrXIfb95zlQFJLooDAgTY9
rpD4Z5WwBXRWFUc3i6n0WKQ3zBVpndiJZ1qbRvE4t2Mjx9uKn6ZbT/bynnJf2Fs0
ZQkfr9mH9cabeKx2Ek+flx1hIotlpSWWNNCLHubM80m4Me81+JpRHGQBXmLYDFbt
HD3FTaCGsQhmug==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:37 2025 by rpki-client