Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File: OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier: q+JvvT+6Gv/G8yzep+1WxDvN8Jru6AdxJLwdGzgKSpQ=
Subject key identifier: EC:58:13:29:7C:E6:89:C3:B5:17:F3:EB:32:CE:DD:11:59:13:DF:89
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 019A52D2BDCD586253B2615819CCF9B0B378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 07:02:14 +0000
Manifest this update: Wed 05 Nov 2025 07:02:14 +0000
Manifest next update: Thu 06 Nov 2025 07:02:14 +0000
Files and hashes: 1: 5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa (hash: XAzmjxdrpIx5mLyehPHseK/+jaakSPTIZ07v9R3ktfQ=)
2: 7gpUO99SfoacmIWvz5o-z3ESpPc.roa (hash: jBBU4x8HtuG0AJgjijT3pv++S+IgCjRtCv3AjftIABQ=)
3: JOJ9b2WkEIXJpzQl9CDXk_CHY94.roa (hash: SAmYAd0xvQRGMk1x62ICIfIVJyfWTunRcVeOhZ1E3l0=)
4: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: EA7fkfovFNFAW3KqbHR26aS321zZh8WPCaNzFypX5zA=)
5: _MMbboen6fjGZxdl1sjrAWa0F6o.roa (hash: lasMNF+CDNUkmhfnkFUMcQ2+Q/sn4RwC142SJaDCsYo=)
6: qTT5EzYYejgHx_-gozkgtiyWSxE.roa (hash: WcMM5EKO8L7zVDvgOOXzTCPHLyfkpMtxpa7CTFKHemk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:bd:cd:58:62:53:b2:61:58:19:cc:f9:b0:b3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Nov 5 07:02:14 2025 GMT
Not After : Nov 6 07:02:14 2025 GMT
Subject: CN=ec5813297ce689c3b517f3eb32cedd115913df89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:8e:40:4e:87:9e:36:20:74:fd:8d:d9:3f:
21:86:3d:5b:c6:06:23:bc:41:21:a9:4a:5c:40:24:
74:3b:ab:66:04:ab:68:bb:8c:ab:57:28:f5:3f:fe:
84:21:19:f8:84:30:20:12:ef:31:0b:65:9c:76:f5:
3a:30:4e:1c:df:05:2b:ff:17:69:86:53:66:60:c3:
63:58:b9:d5:30:b7:17:83:58:3c:27:45:b1:10:8a:
63:f4:81:e4:82:20:d0:cd:cf:1b:cc:2e:fe:1b:cd:
13:66:77:10:d7:84:16:c5:62:49:b1:4d:92:d9:c2:
30:fc:7e:7d:71:2d:22:6d:34:26:f5:c0:57:76:63:
14:75:a2:9a:ea:e4:00:94:93:08:ec:97:1d:30:6a:
bd:2c:2f:74:92:61:f6:9b:17:24:3c:b5:35:b8:49:
45:b5:bb:86:8e:e2:57:07:0b:95:a0:54:5b:8f:4b:
64:51:95:02:26:bb:99:7e:bf:0e:39:05:c7:c1:0e:
1a:05:13:0b:7c:91:29:9e:b9:d4:f0:28:2e:4e:74:
c2:3a:01:78:03:55:b5:b7:ce:3c:99:aa:c1:34:6b:
1a:a4:67:c4:54:33:38:bc:47:84:48:41:f1:6e:4b:
ff:39:5d:fb:55:04:47:42:99:a3:c1:ee:06:08:da:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:58:13:29:7C:E6:89:C3:B5:17:F3:EB:32:CE:DD:11:59:13:DF:89
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c2:5f:05:e8:ba:51:a3:6a:0a:45:0e:78:7f:52:4c:d6:0e:
37:22:7f:79:7c:f4:30:2f:e5:c2:2e:6f:f3:c6:bd:d0:2c:f3:
49:71:90:41:03:88:26:6f:88:e0:52:ee:a2:9b:bf:c4:92:45:
93:b1:fa:ec:19:0c:64:87:ff:e2:76:09:cb:ec:93:79:f4:b2:
ad:d1:df:9c:26:7d:bf:45:d2:ea:79:12:ba:6e:eb:a8:04:dd:
e0:7e:b8:44:07:0d:5e:44:85:df:18:5c:38:9e:91:bd:8e:07:
ce:15:62:d0:00:19:02:2d:8f:a0:73:bd:46:87:3f:53:99:e0:
ef:c0:11:e2:f2:17:2d:20:72:e2:0c:fd:d1:9a:48:5f:5a:91:
fd:bb:89:0f:ee:ea:71:25:82:df:9f:f0:94:0f:ab:ef:18:aa:
ca:de:75:71:7b:55:e2:d1:8e:fa:88:46:95:c5:c6:6a:7b:89:
66:e9:c5:b2:a6:f0:32:88:7d:ab:04:9f:db:83:60:1e:a0:43:
9f:70:6a:b6:b7:46:8d:77:48:6b:44:23:03:79:d4:dc:67:fd:
0f:8b:26:63:b7:94:cf:ce:b4:dc:6c:93:96:40:09:40:d6:51:
5a:78:f7:9d:22:ae:55:6e:03:63:f9:f8:84:02:ee:6a:21:47:
f5:ee:32:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0r3NWGJTsmFYGcz5sLN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YTg1NTA2NTliYjY4ZTc3MGQ4YjAxMjZiNzI2MWZiODdk
ODI0MGIwHhcNMjUxMTA1MDcwMjE0WhcNMjUxMTA2MDcwMjE0WjAzMTEwLwYDVQQD
EyhlYzU4MTMyOTdjZTY4OWMzYjUxN2YzZWIzMmNlZGQxMTU5MTNkZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi6OQE6HnjYgdP2N2T8hhj1bxgYj
vEEhqUpcQCR0O6tmBKtou4yrVyj1P/6EIRn4hDAgEu8xC2WcdvU6ME4c3wUr/xdp
hlNmYMNjWLnVMLcXg1g8J0WxEIpj9IHkgiDQzc8bzC7+G80TZncQ14QWxWJJsU2S
2cIw/H59cS0ibTQm9cBXdmMUdaKa6uQAlJMI7JcdMGq9LC90kmH2mxckPLU1uElF
tbuGjuJXBwuVoFRbj0tkUZUCJruZfr8OOQXHwQ4aBRMLfJEpnrnU8CguTnTCOgF4
A1W1t848marBNGsapGfEVDM4vEeESEHxbkv/OV37VQRHQpmjwe4GCNrykwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxYEyl85onDtRfz6zLO3RFZE9+JMB8GA1UdIwQY
MBaAFDioVQZZu2jncNiwEmtyYfuH2CQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEt
MWQ3MDNiNDk2NjM0LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEtMWQ3MDNiNDk2NjM0
LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacJfBei6
UaNqCkUOeH9STNYONyJ/eXz0MC/lwi5v88a90CzzSXGQQQOIJm+I4FLuopu/xJJF
k7H67BkMZIf/4nYJy+yTefSyrdHfnCZ9v0XS6nkSum7rqATd4H64RAcNXkSF3xhc
OJ6RvY4HzhVi0AAZAi2PoHO9Roc/U5ng78AR4vIXLSBy4gz90ZpIX1qR/buJD+7q
cSWC35/wlA+r7xiqyt51cXtV4tGO+ohGlcXGanuJZunFsqbwMoh9qwSf24NgHqBD
n3BqtrdGjXdIa0QjA3nU3Gf9D4smY7eUz8603GyTlkAJQNZRWnj3nSKuVW4DY/n4
hALuaiFH9e4y7w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:03:55 2025 by rpki-client