Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: +ZCZaQq0GfSVJtKqqv2dIzWJNfff8A6Yi+qtaw+IZ1E=
Subject key identifier: 69:BE:C7:87:4F:26:83:D6:BC:FE:13:97:6B:0D:AD:24:C9:49:21:62
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 019A4EF4A415C424268E1C2E5FEDA9FA7211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:46 +0000
Manifest this update: Tue 04 Nov 2025 13:00:46 +0000
Manifest next update: Wed 05 Nov 2025 13:00:46 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: 6Gg2Z689tALbf6p8H8QClglzxu5NnCIo5erNOb/xFtM=)
2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a4:15:c4:24:26:8e:1c:2e:5f:ed:a9:fa:72:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Nov 4 13:00:46 2025 GMT
Not After : Nov 5 13:00:46 2025 GMT
Subject: CN=69bec7874f2683d6bcfe13976b0dad24c9492162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:d6:88:94:98:57:ce:12:b0:bd:c0:b8:14:
18:a7:09:af:0b:c6:28:b4:10:78:f6:31:01:ae:bb:
fd:e5:17:13:3e:a5:6c:75:43:99:02:50:56:8b:53:
14:3b:ae:65:a9:d5:01:af:b8:04:48:5c:95:24:da:
84:2e:71:32:11:fb:6c:db:41:2d:ae:9f:ee:21:7b:
ef:ca:2b:ba:6f:79:9d:43:bc:e4:9a:61:67:40:ed:
af:56:b0:7a:80:de:6e:f5:37:4e:64:ba:25:44:d9:
dc:d9:57:7f:d4:0c:38:53:12:85:da:b8:27:de:22:
90:de:78:4c:c8:2d:c7:18:89:35:4b:00:59:d2:24:
35:9c:fe:43:ef:f7:66:fc:40:b6:cb:10:77:6c:84:
55:0c:15:d1:56:8c:b1:af:14:27:91:fe:1f:33:3a:
e5:c4:74:b9:1b:13:f1:e0:f6:30:72:18:51:9a:ea:
be:d1:86:63:6f:30:67:7c:44:87:03:be:90:ed:57:
b1:e6:d3:63:fe:7a:c4:6c:27:6b:fa:03:2f:a9:90:
c1:4b:22:5f:c8:25:c6:12:d5:93:79:38:b9:32:42:
83:cb:ea:d1:e3:5f:30:76:00:13:2b:67:fd:38:e6:
3e:22:6c:74:52:33:d4:c9:1c:6e:a8:89:f9:56:be:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:C7:87:4F:26:83:D6:BC:FE:13:97:6B:0D:AD:24:C9:49:21:62
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e6:55:a9:7d:35:b5:3f:7c:d6:ea:76:36:50:8a:9d:af:3a:
dc:89:96:7f:d2:e8:01:00:d0:7c:64:6f:03:2c:25:6c:a6:75:
a4:9d:db:58:60:ca:ca:4a:2d:85:7b:a9:24:ab:34:49:b9:00:
d9:a0:88:78:cc:7a:26:d7:08:11:cd:bf:d1:8c:3a:47:43:3c:
72:7b:a1:c7:ff:97:74:ab:73:a0:5f:d0:06:01:13:70:2a:c4:
eb:f8:9a:cb:7c:a3:50:57:88:bb:7c:61:15:b7:ff:71:eb:44:
9d:55:15:5b:fa:92:10:18:95:7f:cc:19:c2:10:f5:08:5b:02:
7f:1f:30:e4:f3:fd:7f:a4:d3:c1:c3:6f:dc:af:7a:36:4d:74:
27:5e:16:5c:d5:9d:25:16:8f:c5:29:9a:ca:00:24:0e:d5:e5:
e6:59:c8:77:7d:7c:a1:cc:f2:29:d9:d9:65:54:35:33:78:4f:
d4:14:6a:d9:b3:3d:f6:65:44:d6:8e:2d:74:82:7a:11:aa:a5:
22:d5:8c:de:50:a1:70:5f:75:72:96:54:af:33:20:cb:a6:9b:
41:4e:06:45:58:11:56:29:42:b5:ee:d1:e9:4e:e3:9c:43:a5:
aa:67:91:97:c3:c2:9f:48:e1:16:df:80:4f:a9:fa:e0:f3:83:
e0:44:83:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KQVxCQmjhwuX+2p+nIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0
YjZhMmUwHhcNMjUxMTA0MTMwMDQ2WhcNMjUxMTA1MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg2OWJlYzc4NzRmMjY4M2Q2YmNmZTEzOTc2YjBkYWQyNGM5NDkyMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3HWiJSYV84SsL3AuBQYpwmvC8Yo
tBB49jEBrrv95RcTPqVsdUOZAlBWi1MUO65lqdUBr7gESFyVJNqELnEyEfts20Et
rp/uIXvvyiu6b3mdQ7zkmmFnQO2vVrB6gN5u9TdOZLolRNnc2Vd/1Aw4UxKF2rgn
3iKQ3nhMyC3HGIk1SwBZ0iQ1nP5D7/dm/EC2yxB3bIRVDBXRVoyxrxQnkf4fMzrl
xHS5GxPx4PYwchhRmuq+0YZjbzBnfESHA76Q7Vex5tNj/nrEbCdr+gMvqZDBSyJf
yCXGEtWTeTi5MkKDy+rR418wdgATK2f9OOY+Imx0UjPUyRxuqIn5Vr7YAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGm+x4dPJoPWvP4Tl2sNrSTJSSFiMB8GA1UdIwQY
MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt
NzBjYmY1MTQ5YTVhLzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh
LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeZVqX01
tT981up2NlCKna863ImWf9LoAQDQfGRvAywlbKZ1pJ3bWGDKykothXupJKs0SbkA
2aCIeMx6JtcIEc2/0Yw6R0M8cnuhx/+XdKtzoF/QBgETcCrE6/iay3yjUFeIu3xh
Fbf/cetEnVUVW/qSEBiVf8wZwhD1CFsCfx8w5PP9f6TTwcNv3K96Nk10J14WXNWd
JRaPxSmaygAkDtXl5lnId318oczyKdnZZVQ1M3hP1BRq2bM99mVE1o4tdIJ6Eaql
ItWM3lChcF91cpZUrzMgy6abQU4GRVgRVilCte7R6U7jnEOlqmeRl8PCn0jhFt+A
T6n64POD4ESDdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:16 2025 by rpki-client