Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json)
Hash identifier: wmd+DEDYjRQ82WLSLB7kjFQR9ZlMqEjuRjLtOUkXwtA=
Subject key identifier: 82:96:5F:2C:D2:46:16:C1:51:7B:36:13:97:28:A9:82:A3:40:6E:C0
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 019A4F9968CD1EF23EB461CE8B90F720586F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
Manifest number: 12A1
Signing time: Tue 04 Nov 2025 16:00:45 +0000
Manifest this update: Tue 04 Nov 2025 16:00:45 +0000
Manifest next update: Wed 05 Nov 2025 16:00:45 +0000
Files and hashes: 1: kaGph50MrnZk9_Ae5Md0JZHkmEM.roa (hash: KOuavh84jne4Oayx4KsSyaMHm/sNkEEba6rU0bPnEbc=)
2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: 9lwCamDGVo1E89P8LkqdyyWvKhpgBot1IclYUkPYJ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:68:cd:1e:f2:3e:b4:61:ce:8b:90:f7:20:58:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Nov 4 16:00:45 2025 GMT
Not After : Nov 5 16:00:45 2025 GMT
Subject: CN=82965f2cd24616c1517b36139728a982a3406ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f6:96:72:fc:1f:ba:d5:8a:b0:ad:31:35:57:
08:0e:79:65:0c:3e:b2:86:10:f9:a7:cf:8e:95:3e:
df:7c:36:90:82:28:11:62:97:79:44:b8:c9:31:d0:
e5:dc:ed:27:f8:03:f6:36:c8:bb:5f:fb:c4:31:0a:
cc:8f:2d:68:e4:6b:23:fa:1b:c3:82:b8:93:98:d2:
4c:3e:b6:00:fa:91:12:47:7a:b6:4b:f5:58:92:01:
19:ef:af:85:d7:0b:9f:f8:4b:ad:21:e2:85:55:c8:
eb:23:a7:2f:92:a1:f3:da:b2:58:9f:c4:99:26:88:
08:a2:50:79:f2:c1:06:6b:5f:34:bc:57:97:11:c5:
b4:ba:0e:a3:6b:d6:9a:41:7b:c2:87:36:19:18:9d:
2a:42:6c:37:27:1d:26:d3:63:3d:50:1e:22:b6:ec:
b8:ee:e4:7a:83:3f:ed:29:37:13:21:46:f7:83:02:
86:a6:be:ed:fc:5a:f8:b9:6e:58:95:22:87:ad:08:
c2:6b:55:de:11:22:98:0d:1a:ec:0a:51:06:03:f5:
06:5b:9c:41:b7:a9:7d:8f:26:ac:3a:85:d7:2d:27:
c2:98:8f:7e:22:4c:e8:db:72:17:97:10:4b:19:93:
f9:85:78:88:c6:f7:2d:b2:41:6f:ac:87:10:af:cf:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:5F:2C:D2:46:16:C1:51:7B:36:13:97:28:A9:82:A3:40:6E:C0
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ca:1b:5b:db:ab:de:8f:fe:b2:86:52:20:e2:74:ab:4d:95:
fe:96:f8:f1:7f:33:83:a8:57:7d:aa:93:a2:31:4d:4c:87:9b:
cf:18:1f:8e:37:33:f7:38:55:bd:bd:48:39:70:03:67:f5:eb:
16:e8:57:de:98:36:5e:f4:10:bb:0a:cd:f0:8c:34:5d:3f:4a:
b1:41:9c:ce:59:4e:cf:bc:05:0e:82:3f:50:44:4d:35:04:54:
51:e6:59:ce:04:06:cb:02:a1:16:3a:16:e3:da:17:d9:a2:37:
ff:72:27:00:df:29:78:c1:aa:73:67:9e:47:02:de:a4:24:cb:
5c:62:d1:c7:12:19:39:9e:c6:06:1e:3f:91:f6:bb:65:db:2c:
f1:27:e4:6d:54:ca:20:52:f4:2a:ec:ee:45:51:7a:f1:e1:46:
e8:37:20:a7:d7:bb:e3:f8:ff:16:d0:86:e3:69:0b:11:c7:fe:
fb:8b:74:69:14:ab:02:bf:ea:64:98:82:4b:88:b9:4a:77:d9:
a1:69:5a:9c:b6:a6:96:97:06:1e:78:95:98:18:ae:aa:bb:6e:
5b:4c:06:83:e7:46:05:b8:68:a6:b2:68:2b:20:e7:4e:6c:3a:
0d:0f:a0:cb:b5:15:e4:b5:60:95:18:db:a3:51:44:91:76:25:
a2:1b:82:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmWjNHvI+tGHOi5D3IFhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGU0MWNiZmRlZmFkMGJiMGUyOTcyNDdhY2MxYTIwMWQy
ZGY0YTAwHhcNMjUxMTA0MTYwMDQ1WhcNMjUxMTA1MTYwMDQ1WjAzMTEwLwYDVQQD
Eyg4Mjk2NWYyY2QyNDYxNmMxNTE3YjM2MTM5NzI4YTk4MmEzNDA2ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vaWcvwfutWKsK0xNVcIDnllDD6y
hhD5p8+OlT7ffDaQgigRYpd5RLjJMdDl3O0n+AP2Nsi7X/vEMQrMjy1o5Gsj+hvD
griTmNJMPrYA+pESR3q2S/VYkgEZ76+F1wuf+EutIeKFVcjrI6cvkqHz2rJYn8SZ
JogIolB58sEGa180vFeXEcW0ug6ja9aaQXvChzYZGJ0qQmw3Jx0m02M9UB4ituy4
7uR6gz/tKTcTIUb3gwKGpr7t/Fr4uW5YlSKHrQjCa1XeESKYDRrsClEGA/UGW5xB
t6l9jyasOoXXLSfCmI9+Ikzo23IXlxBLGZP5hXiIxvctskFvrIcQr8/N9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKWXyzSRhbBUXs2E5coqYKjQG7AMB8GA1UdIwQY
MBaAFKCOQcv9760LsOKXJHrMGiAdLfSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzkt
NjU4ZDRjNDYyOGFkLzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzktNjU4ZDRjNDYyOGFk
LzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcobW9ur
3o/+soZSIOJ0q02V/pb48X8zg6hXfaqTojFNTIebzxgfjjcz9zhVvb1IOXADZ/Xr
FuhX3pg2XvQQuwrN8Iw0XT9KsUGczllOz7wFDoI/UERNNQRUUeZZzgQGywKhFjoW
49oX2aI3/3InAN8peMGqc2eeRwLepCTLXGLRxxIZOZ7GBh4/kfa7Zdss8SfkbVTK
IFL0KuzuRVF68eFG6Dcgp9e74/j/FtCG42kLEcf++4t0aRSrAr/qZJiCS4i5SnfZ
oWlanLamlpcGHniVmBiuqrtuW0wGg+dGBbhoprJoKyDnTmw6DQ+gy7UV5LVglRjb
o1FEkXYlohuCPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:37:42 2025 by rpki-client