Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
File: OklF5GdkAp0lgdggwzc_pEWFVTk.mft (raw, json)
Hash identifier: rJZGc4OJwu5snDdGXgbfeMSX36uTCElB4LqidwtDwvE=
Subject key identifier: F6:44:D2:5B:7C:86:84:EF:B9:B4:02:34:87:2B:AE:71:87:14:A5:15
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 019A51F5DA9869C62C2842D111A15DF94C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
Manifest number: 171D
Signing time: Wed 05 Nov 2025 03:00:57 +0000
Manifest this update: Wed 05 Nov 2025 03:00:57 +0000
Manifest next update: Thu 06 Nov 2025 03:00:57 +0000
Files and hashes: 1: 1-yPHrZgsoThpMDnxsp8ik7ZJAmM.roa (hash: PkPdKCMYMFbeGyHu/UiymTakLQYctiNwfIAb9+YJYgQ=)
2: 5QRzBx43AV-rVFibUIkxX67tvbI.roa (hash: gayo6a2ZkLUJa9zMEpLRBH3Ls/m1iB/K2c1cMPBX4/Y=)
3: 6Xm-75V0sXQGqzDZtgBZ1MB1y7U.roa (hash: y6WKfvCzgcr5qRF8JvQX+THC7a2GBmmRXVuRnQY8PoA=)
4: OklF5GdkAp0lgdggwzc_pEWFVTk.crl (hash: Pao8K3o6ZY9TNtL/SEcpZAitPQQo4GPUvBOdqMrSqgs=)
5: U6V2FCr3duwrLHYXfMUAwbMQYWE.roa (hash: n65sXgOD4a9BNyNZnLy9ePNv9aeblojwP3q3G8dIAXE=)
6: aEuO7f3JtpWyu2f1MPnzErrljgU.roa (hash: YH8NEIJKb+pPrmGWzPR+jhBeuD5w3MtFJDL2dbR+PwQ=)
7: hE4J7-nVjBP1I1amWriRZQbCRjQ.roa (hash: t96fk3QnxrV27k+4LVx0l6UARkEoivZQZo9G+qQHzNc=)
8: tVLlOiV7SvnosXMuOA6u9tK4RqI.roa (hash: /FYDglX8ng94EWH9NM8VS2sIZeZUQbmdZE0FSeyFXmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:da:98:69:c6:2c:28:42:d1:11:a1:5d:f9:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Nov 5 03:00:57 2025 GMT
Not After : Nov 6 03:00:57 2025 GMT
Subject: CN=f644d25b7c8684efb9b40234872bae718714a515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:80:8a:39:6d:6d:8c:d3:33:33:b1:0f:1f:
a0:fb:98:c3:90:02:a5:34:3c:aa:91:df:be:22:43:
d4:2f:45:5a:1b:07:e3:45:7c:75:e7:44:22:e5:df:
49:7c:b7:97:82:4a:a4:93:f4:00:5a:e3:9e:d0:f3:
68:55:33:6a:50:2f:f5:7b:ee:2c:bd:cc:cf:d9:1b:
de:b6:17:8e:c3:bb:f6:57:63:9d:b3:20:bf:b6:34:
38:6a:b2:34:73:36:21:1f:32:fc:b3:7a:71:26:33:
58:e6:9e:d4:c7:db:58:78:12:ad:d3:4b:3d:19:d6:
c6:45:7e:06:1e:7f:d8:ff:1f:f5:75:d6:21:34:62:
02:93:31:94:3b:5d:d7:d0:cc:3d:74:b1:29:26:fb:
73:7a:f8:0e:e0:7c:d3:ef:6c:40:3a:d7:82:e4:b3:
6e:22:c4:23:44:f8:58:25:04:9b:31:b0:d3:8e:22:
f8:16:76:64:fb:89:9c:5d:e1:a8:fd:d1:13:a6:b7:
e5:ba:de:71:3e:97:df:a5:ae:b6:7b:99:1a:6e:3c:
74:d6:63:dd:a0:ab:e1:af:60:d0:21:1d:7d:32:16:
88:42:14:1f:a5:a1:7e:f4:03:b4:97:e9:0f:70:59:
c4:9a:d4:dd:51:2f:d9:db:9f:20:c3:3d:32:05:95:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:44:D2:5B:7C:86:84:EF:B9:B4:02:34:87:2B:AE:71:87:14:A5:15
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:10:5c:14:59:f4:af:50:e2:28:df:37:65:ca:2b:a5:30:fb:
97:6f:96:a4:0c:6f:22:0f:42:84:ae:22:38:7d:dd:9f:d1:1f:
4c:ac:24:b8:19:de:40:1d:1f:fb:e6:57:c4:b5:ae:1b:9f:b8:
04:63:43:e4:92:12:a3:2b:53:88:bf:12:bc:ed:53:f3:33:a3:
02:8e:88:f8:81:7a:44:73:af:7d:de:12:64:14:13:21:f9:5b:
b8:9a:ea:4c:29:a6:d9:79:9e:e5:b2:00:c3:01:67:8d:5d:d5:
17:05:4a:58:3e:91:e4:06:f0:1c:bf:c7:e6:2e:98:a6:d6:d6:
66:fd:6e:9e:52:32:67:8a:2e:f5:c3:9f:67:d2:c0:d3:c5:ad:
0f:1b:3c:8e:5d:3d:c7:61:a5:68:98:a6:9f:50:2f:b1:67:bb:
21:30:9d:85:6b:25:3f:db:13:d4:a4:05:b5:43:08:8c:dc:05:
6d:1d:0e:48:f1:4d:d4:e0:bf:e1:95:b7:63:1b:1c:d9:49:65:
4b:67:03:89:4a:8f:a1:04:f6:7b:d8:72:e0:e7:a2:88:7c:26:
4c:5f:df:b0:ca:de:18:e9:10:28:81:c5:67:0e:5f:16:2e:52:
55:40:c4:dc:8a:fe:5f:45:23:fc:ba:c6:2e:72:1c:e0:8b:eb:
99:0b:66:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9dqYacYsKELREaFd+UxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjUxMTA1MDMwMDU3WhcNMjUxMTA2MDMwMDU3WjAzMTEwLwYDVQQD
EyhmNjQ0ZDI1YjdjODY4NGVmYjliNDAyMzQ4NzJiYWU3MTg3MTRhNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5yAijltbYzTMzOxDx+g+5jDkAKl
NDyqkd++IkPUL0VaGwfjRXx150Qi5d9JfLeXgkqkk/QAWuOe0PNoVTNqUC/1e+4s
vczP2RvetheOw7v2V2OdsyC/tjQ4arI0czYhHzL8s3pxJjNY5p7Ux9tYeBKt00s9
GdbGRX4GHn/Y/x/1ddYhNGICkzGUO13X0Mw9dLEpJvtzevgO4HzT72xAOteC5LNu
IsQjRPhYJQSbMbDTjiL4FnZk+4mcXeGo/dETprflut5xPpffpa62e5kabjx01mPd
oKvhr2DQIR19MhaIQhQfpaF+9AO0l+kPcFnEmtTdUS/Z258gwz0yBZWguQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZE0lt8hoTvubQCNIcrrnGHFKUVMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBBcFFn0
r1DiKN83ZcorpTD7l2+WpAxvIg9ChK4iOH3dn9EfTKwkuBneQB0f++ZXxLWuG5+4
BGND5JISoytTiL8SvO1T8zOjAo6I+IF6RHOvfd4SZBQTIflbuJrqTCmm2Xme5bIA
wwFnjV3VFwVKWD6R5AbwHL/H5i6YptbWZv1unlIyZ4ou9cOfZ9LA08WtDxs8jl09
x2GlaJimn1AvsWe7ITCdhWslP9sT1KQFtUMIjNwFbR0OSPFN1OC/4ZW3Yxsc2Ull
S2cDiUqPoQT2e9hy4OeiiHwmTF/fsMreGOkQKIHFZw5fFi5SVUDE3Ir+X0Uj/LrG
LnIc4IvrmQtmnw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:52:51 2025 by rpki-client