Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: MswV25OCfqVFzRKQrIjolpRvUnMkSS0pFvZb9aFO+24=
Subject key identifier: F4:C6:B1:B9:ED:BE:C4:6F:6E:1F:8C:41:32:C1:78:7C:C2:3A:4B:13
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 019A5375CD363DD2AC5DC749F450C1C0891A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 1719
Signing time: Wed 05 Nov 2025 10:00:20 +0000
Manifest this update: Wed 05 Nov 2025 10:00:20 +0000
Manifest next update: Thu 06 Nov 2025 10:00:20 +0000
Files and hashes: 1: Ao4f98uIFcgkhdxyPOpQgAuwN9w.roa (hash: ttNIa0Xruypw+Nr5sYx69ADzUxbcLDOTo777VDuXgok=)
2: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: eaH+1fBMzvwJeVzUdGylYEX8hV6KXe5QK+WKYbZP8oI=)
3: bf5JniBkyKbSSiSrUK6PpsjkA_o.roa (hash: G/EVvuIiKK3u39WnHajT6FKjkBStN9/ciaxEIQanbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:cd:36:3d:d2:ac:5d:c7:49:f4:50:c1:c0:89:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Nov 5 10:00:20 2025 GMT
Not After : Nov 6 10:00:20 2025 GMT
Subject: CN=f4c6b1b9edbec46f6e1f8c4132c1787cc23a4b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:90:50:47:82:29:d0:7e:cf:0a:41:0d:20:
a6:54:e3:43:85:3c:6d:25:d7:b3:c9:17:ce:91:33:
cf:3d:da:ce:14:17:dd:1f:94:6b:6e:29:75:da:c6:
6f:a0:f0:90:f5:80:28:6f:a9:72:9c:c7:36:73:76:
1d:38:02:82:56:f8:a2:27:0b:6a:91:1d:c5:32:57:
51:4e:f7:71:47:dc:77:2a:56:db:bc:04:1d:f9:7e:
17:37:ed:b3:f1:4d:a5:9f:11:d4:a3:3b:a5:fa:26:
cf:be:fe:16:1c:53:1b:ae:e7:92:2b:f9:18:0c:21:
d0:0b:30:43:a3:9c:15:a4:d4:db:0e:ce:95:2b:47:
93:79:12:f3:42:f8:4b:48:2a:ef:a9:e5:07:58:7c:
76:a4:f3:fb:9b:5e:03:d9:c4:ed:fd:70:02:48:00:
80:fe:fb:0c:1f:f8:0f:89:84:99:d8:fe:4e:fd:97:
6d:9a:a3:83:0e:27:2b:b7:2f:b3:77:fb:0e:cd:10:
e6:b8:73:f5:a6:3e:f3:c0:2a:77:dd:63:2b:0f:9f:
ec:54:fb:5a:16:65:ab:17:1d:bc:ba:35:60:bd:54:
be:86:24:63:40:a8:0e:80:7b:42:5f:03:35:7a:ca:
e9:36:c1:53:01:dc:97:a3:7e:fd:1c:26:ae:ae:86:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C6:B1:B9:ED:BE:C4:6F:6E:1F:8C:41:32:C1:78:7C:C2:3A:4B:13
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:87:2e:64:97:02:a7:ec:82:1a:b9:a1:c7:c0:47:f4:8b:17:
82:97:df:c2:6c:4c:1c:23:5c:7d:2b:70:93:f7:c6:81:a6:3f:
b1:44:4f:bf:54:6c:49:07:2b:62:47:ba:95:87:0a:a8:ba:1d:
88:95:71:22:9a:54:79:87:71:a9:ec:f6:55:39:ae:59:02:2f:
65:9a:7c:a2:30:bb:92:64:73:eb:e6:0f:dd:72:d5:ea:5f:4f:
d0:41:8c:69:8f:e3:44:76:1a:39:68:79:dc:3a:ea:1f:26:70:
e8:dc:d5:ba:ed:0b:fd:e1:d9:c8:22:d4:78:be:19:01:ed:0a:
84:8f:aa:a7:b0:26:39:cf:ac:3e:f6:99:f4:23:a8:5f:00:cd:
76:d9:af:42:04:8d:a0:6b:46:8c:f1:3f:3d:38:74:e9:2d:46:
a4:fa:54:d0:10:41:6b:7e:56:35:57:d3:cb:d7:7b:f7:53:63:
e8:34:58:6d:30:06:3c:d3:4a:8b:20:61:99:9f:9b:46:e1:33:
52:3f:3e:5e:1c:75:f7:5a:16:de:ac:cc:dc:42:aa:d1:61:fd:
48:50:4d:aa:54:ad:6c:49:cd:12:ad:da:49:28:42:cd:24:f7:
b9:32:f1:3f:86:f4:8e:90:3a:ff:70:ae:96:95:5d:ea:bc:6b:
58:c0:43:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdc02PdKsXcdJ9FDBwIkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjUxMTA1MTAwMDIwWhcNMjUxMTA2MTAwMDIwWjAzMTEwLwYDVQQD
EyhmNGM2YjFiOWVkYmVjNDZmNmUxZjhjNDEzMmMxNzg3Y2MyM2E0YjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKyQUEeCKdB+zwpBDSCmVONDhTxt
JdezyRfOkTPPPdrOFBfdH5Rrbil12sZvoPCQ9YAob6lynMc2c3YdOAKCVviiJwtq
kR3FMldRTvdxR9x3KlbbvAQd+X4XN+2z8U2lnxHUozul+ibPvv4WHFMbrueSK/kY
DCHQCzBDo5wVpNTbDs6VK0eTeRLzQvhLSCrvqeUHWHx2pPP7m14D2cTt/XACSACA
/vsMH/gPiYSZ2P5O/ZdtmqODDicrty+zd/sOzRDmuHP1pj7zwCp33WMrD5/sVPta
FmWrFx28ujVgvVS+hiRjQKgOgHtCXwM1esrpNsFTAdyXo379HCauroZ3aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTGsbntvsRvbh+MQTLBeHzCOksTMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYcuZJcC
p+yCGrmhx8BH9IsXgpffwmxMHCNcfStwk/fGgaY/sURPv1RsSQcrYke6lYcKqLod
iJVxIppUeYdxqez2VTmuWQIvZZp8ojC7kmRz6+YP3XLV6l9P0EGMaY/jRHYaOWh5
3DrqHyZw6NzVuu0L/eHZyCLUeL4ZAe0KhI+qp7AmOc+sPvaZ9COoXwDNdtmvQgSN
oGtGjPE/PTh06S1GpPpU0BBBa35WNVfTy9d791Nj6DRYbTAGPNNKiyBhmZ+bRuEz
Uj8+Xhx191oW3qzM3EKq0WH9SFBNqlStbEnNEq3aSShCzST3uTLxP4b0jpA6/3Cu
lpVd6rxrWMBDmw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:42:25 2025 by rpki-client