Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json)
Hash identifier: gb90JZEm3wUjQiUI1pEmsI6XVf0OeY0YXzuqM93xoio=
Subject key identifier: C7:EE:81:33:AD:75:47:CC:57:31:1C:7D:D2:79:16:31:F4:17:89:BE
Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Certificate serial: 019A5119C491E3E783706DFB435041CFEF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 23:00:34 +0000
Manifest this update: Tue 04 Nov 2025 23:00:34 +0000
Manifest next update: Wed 05 Nov 2025 23:00:34 +0000
Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: l4NcNdxq76uFRB8RnIQPrkfkL5WwGAoXzz1Tavdtfe8=)
2: Wrm4Xo5M6Od7VmecTT8hFIZ3qpU.roa (hash: VMyIfns1xRX3nJc0aO+48RkMt038/NfSu9JKR70iYqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c4:91:e3:e7:83:70:6d:fb:43:50:41:cf:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb
Validity
Not Before: Nov 4 23:00:34 2025 GMT
Not After : Nov 5 23:00:34 2025 GMT
Subject: CN=c7ee8133ad7547cc57311c7dd2791631f41789be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:16:51:4d:64:61:a4:b8:ae:91:7b:56:d4:
95:b5:8d:e2:66:e7:ef:f2:0e:59:83:d9:3f:03:62:
3a:34:4b:43:22:41:1a:fb:ec:66:af:e7:63:b2:52:
79:8c:77:fc:e8:1f:37:02:91:b6:b0:82:0f:ff:fa:
35:08:cb:63:d2:e4:97:9c:bd:b4:f6:9c:f9:eb:d6:
e3:4c:0a:d5:ed:ec:4c:6f:af:3e:03:56:82:67:c8:
32:de:21:6d:d0:9d:90:90:77:d4:d8:ea:61:ec:df:
9f:51:13:1c:e2:04:80:f9:6a:0b:79:2e:c7:eb:ba:
07:78:70:b3:a8:19:e9:81:93:a0:97:d3:a8:19:fc:
f0:b2:e9:43:59:b2:f2:62:27:21:37:01:71:f7:8d:
db:a6:a6:a6:14:18:24:32:eb:bf:b9:73:96:29:8b:
a7:17:7e:aa:68:07:7a:68:0a:d3:84:da:a5:24:76:
84:53:0c:85:c8:f5:ed:08:27:fd:7a:b3:48:60:88:
72:1f:b3:6a:97:2f:df:89:8a:8e:8b:57:3d:5c:d6:
d7:59:fd:ae:9d:39:90:95:13:39:ed:52:e7:29:a9:
0b:93:f6:a9:97:76:30:93:b4:ab:a9:10:c2:bf:22:
2f:c2:6d:17:70:f6:d2:42:c7:58:4d:44:e5:9e:d7:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EE:81:33:AD:75:47:CC:57:31:1C:7D:D2:79:16:31:F4:17:89:BE
X509v3 Authority Key Identifier:
keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:b2:14:89:4a:00:45:28:7f:90:cc:5f:f8:a4:57:39:77:
1f:4f:2d:50:8c:10:3c:2e:65:36:a1:17:61:2f:c8:16:d1:a8:
cd:e3:0c:8d:51:fb:f1:0d:11:f2:99:c3:cc:2e:a0:f4:74:02:
49:cb:cc:e6:9c:b6:15:41:1a:82:41:8d:d3:2a:5a:73:ae:6e:
a5:9a:ce:e3:a1:87:af:e7:3d:d7:c2:8a:2e:e5:59:09:7e:20:
cd:31:df:58:61:a5:a2:c4:53:c6:dd:fc:f7:ed:c8:b7:6a:c7:
4f:7f:38:a6:6c:fa:09:1c:67:4f:92:2e:d1:b2:70:cf:15:be:
95:a5:5a:61:17:34:b9:f4:b3:f2:64:24:53:0b:71:06:72:f0:
db:c8:ad:e5:aa:d7:5a:29:2a:22:90:f0:dd:f2:e7:f0:09:bc:
48:bd:34:7d:05:09:76:69:a4:d6:46:ca:56:6d:c2:4f:15:67:
91:34:e2:26:67:f5:5c:d2:d3:28:81:19:a6:5c:1e:d0:52:1b:
00:35:a1:c8:98:1a:7e:8c:9c:1a:11:3d:fe:17:85:4a:9e:ab:
ce:e3:91:e2:63:f5:68:1a:36:ae:f0:99:75:cb:2a:6f:03:21:
9c:ed:cc:58:51:25:a5:86:7b:7f:6a:5f:fc:18:30:79:12:e8:
29:b8:48:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGcSR4+eDcG37Q1BBz+89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2
NDRjZGIwHhcNMjUxMTA0MjMwMDM0WhcNMjUxMTA1MjMwMDM0WjAzMTEwLwYDVQQD
EyhjN2VlODEzM2FkNzU0N2NjNTczMTFjN2RkMjc5MTYzMWY0MTc4OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGUWUU1kYaS4rpF7VtSVtY3iZufv
8g5Zg9k/A2I6NEtDIkEa++xmr+djslJ5jHf86B83ApG2sIIP//o1CMtj0uSXnL20
9pz569bjTArV7exMb68+A1aCZ8gy3iFt0J2QkHfU2Oph7N+fURMc4gSA+WoLeS7H
67oHeHCzqBnpgZOgl9OoGfzwsulDWbLyYichNwFx943bpqamFBgkMuu/uXOWKYun
F36qaAd6aArThNqlJHaEUwyFyPXtCCf9erNIYIhyH7Nqly/fiYqOi1c9XNbXWf2u
nTmQlRM57VLnKakLk/apl3Ywk7SrqRDCvyIvwm0XcPbSQsdYTUTlnteZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfugTOtdUfMVzEcfdJ5FjH0F4m+MB8GA1UdIwQY
MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt
ODRlNTk2YTNjMTIxLzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx
LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAqyFIlK
AEUof5DMX/ikVzl3H08tUIwQPC5lNqEXYS/IFtGozeMMjVH78Q0R8pnDzC6g9HQC
ScvM5py2FUEagkGN0ypac65upZrO46GHr+c918KKLuVZCX4gzTHfWGGlosRTxt38
9+3It2rHT384pmz6CRxnT5Iu0bJwzxW+laVaYRc0ufSz8mQkUwtxBnLw28it5arX
WikqIpDw3fLn8Am8SL00fQUJdmmk1kbKVm3CTxVnkTTiJmf1XNLTKIEZplwe0FIb
ADWhyJgafoycGhE9/heFSp6rzuOR4mP1aBo2rvCZdcsqbwMhnO3MWFElpYZ7f2pf
/BgweRLoKbhIOg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:45 2025 by rpki-client