Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: LlYxBFat4EptYoOADFDParCF2bn1xGfv0zlDbSzl2iI=
Subject key identifier: 4C:D1:57:F1:85:F1:2D:B4:C3:1A:8A:89:F8:9D:6E:98:CC:A5:66:56
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 019A4F2B1C1A9A2B35C60F35F3B7E1665D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 035D
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: p36JOwEk8mYlE+Kbo/1pMe2+EjH+q5gnQEL4k4w1d+s=)
2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1c:1a:9a:2b:35:c6:0f:35:f3:b7:e1:66:5d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=4cd157f185f12db4c31a8a89f89d6e98cca56656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:88:7f:8e:8f:fb:0a:d3:ff:63:04:73:71:
48:ab:12:a5:e9:2c:b9:66:f0:28:9b:ad:01:52:ac:
3b:97:ea:73:b4:f6:c2:c7:65:fd:d8:10:a7:b4:c9:
30:f2:cb:7b:85:d5:b3:a3:da:88:3c:39:70:fc:7c:
6f:cb:5e:bb:60:5c:9e:9e:10:8f:48:cf:04:3a:05:
43:2d:d7:63:a6:ed:e9:16:01:f8:71:c8:59:eb:cd:
fd:77:2f:b5:58:d0:24:e8:88:73:cd:42:de:83:67:
52:f8:e5:52:41:4a:74:74:8c:3c:d0:dd:cb:ba:6b:
27:cb:82:6d:52:67:67:7d:55:db:75:4b:55:be:82:
ae:66:31:b7:79:6e:1a:e3:ff:34:fa:23:ec:58:61:
75:ba:d3:d2:e3:b0:80:63:48:54:12:71:0b:80:aa:
92:81:11:d0:ca:e3:b6:dd:92:12:82:e5:a8:c9:7c:
63:78:29:1c:44:df:ab:b3:cf:8e:7b:ef:3b:f2:22:
bf:cd:9e:5b:15:5a:ca:89:81:d2:8b:85:4c:02:4d:
a5:7e:60:02:14:d5:55:01:18:33:48:42:61:ac:2b:
2e:dc:7d:6d:ec:ff:36:42:7b:a3:03:6c:45:6c:af:
a5:8a:b7:e9:99:76:df:81:23:f1:54:c3:d4:4a:6b:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D1:57:F1:85:F1:2D:B4:C3:1A:8A:89:F8:9D:6E:98:CC:A5:66:56
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:22:98:58:8e:ee:46:2f:92:5f:d2:f4:e8:60:ed:08:a7:71:
0f:28:03:59:f2:56:2b:b9:5f:8d:5c:de:48:5b:ad:cc:5e:72:
be:a0:43:68:26:16:53:3c:45:7d:7f:17:94:33:fc:bf:31:67:
dc:9d:e8:51:1a:fc:5b:b0:cf:cc:58:6b:24:5f:f2:6d:eb:60:
81:93:5f:7a:df:d1:85:f1:62:a9:ea:ef:a5:df:90:54:c6:68:
fc:74:6a:08:7b:cf:fe:be:2d:99:ba:ad:21:e3:a2:94:e3:2c:
5a:f4:96:23:79:99:2b:74:99:82:a4:8d:44:6d:d6:dd:86:13:
ca:96:16:3c:04:9f:de:25:9e:ef:fe:29:d7:52:74:33:fd:41:
95:21:7f:c3:b4:a7:60:49:46:26:a4:16:f5:07:fa:fe:47:f5:
82:b5:c3:af:3e:f0:50:3f:e5:dc:ea:58:7e:ca:03:b1:44:da:
7c:e4:b9:60:c2:eb:af:47:fc:3e:98:be:89:1d:64:c8:3c:07:
fd:71:be:bc:f3:5c:41:6c:d2:ca:1e:95:e2:05:91:5f:2b:e1:
9e:4d:b3:53:eb:96:ca:d6:b0:8d:e1:a0:1c:7c:19:b0:18:02:
35:b0:a0:6e:2e:5f:65:fa:91:0e:5c:eb:2f:af:34:ab:6d:69:
0c:97:c4:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKxwamis1xg8187fhZl1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTUwNWJmYzdmZDkxNzY4NmIxYzhiM2EyMThmNTUwOGY1
YTM3MGEwHhcNMjUxMTA0MTQwMDE2WhcNMjUxMTA1MTQwMDE2WjAzMTEwLwYDVQQD
Eyg0Y2QxNTdmMTg1ZjEyZGI0YzMxYThhODlmODlkNmU5OGNjYTU2NjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDqIf46P+wrT/2MEc3FIqxKl6Sy5
ZvAom60BUqw7l+pztPbCx2X92BCntMkw8st7hdWzo9qIPDlw/Hxvy167YFyenhCP
SM8EOgVDLddjpu3pFgH4cchZ6839dy+1WNAk6IhzzULeg2dS+OVSQUp0dIw80N3L
umsny4JtUmdnfVXbdUtVvoKuZjG3eW4a4/80+iPsWGF1utPS47CAY0hUEnELgKqS
gRHQyuO23ZISguWoyXxjeCkcRN+rs8+Oe+878iK/zZ5bFVrKiYHSi4VMAk2lfmAC
FNVVARgzSEJhrCsu3H1t7P82QnujA2xFbK+lirfpmXbfgSPxVMPUSmuPqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzRV/GF8S20wxqKifidbpjMpWZWMB8GA1UdIwQY
MBaAFDrlBb/H/ZF2hrHIs6IY9VCPWjcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUt
YTFjNzhhMGE2YmZkLzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUtYTFjNzhhMGE2YmZk
LzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyKYWI7u
Ri+SX9L06GDtCKdxDygDWfJWK7lfjVzeSFutzF5yvqBDaCYWUzxFfX8XlDP8vzFn
3J3oURr8W7DPzFhrJF/ybetggZNfet/RhfFiqervpd+QVMZo/HRqCHvP/r4tmbqt
IeOilOMsWvSWI3mZK3SZgqSNRG3W3YYTypYWPASf3iWe7/4p11J0M/1BlSF/w7Sn
YElGJqQW9Qf6/kf1grXDrz7wUD/l3OpYfsoDsUTafOS5YMLrr0f8Ppi+iR1kyDwH
/XG+vPNcQWzSyh6V4gWRXyvhnk2zU+uWytawjeGgHHwZsBgCNbCgbi5fZfqRDlzr
L680q21pDJfEug==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:19 2025 by rpki-client