Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: 3aDGiE4WCRT/62H1k29EhBgcwvgGNzJ0mlF1z5wpI4M=
Subject key identifier: D2:B6:61:95:77:0B:47:51:FD:CE:4C:2E:72:17:7B:BF:D3:7C:A6:A5
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 019A4E18D74004F987995BAC05AF5B4390D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 091F
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: HjYeoyWiCOWBat+X/4sZn3fV0+JY48XaaokkX4Z6xMs=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d7:40:04:f9:87:99:5b:ac:05:af:5b:43:90:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=d2b66195770b4751fdce4c2e72177bbfd37ca6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:e3:ec:2f:73:45:b5:ec:4b:20:67:80:70:
04:5f:73:03:f2:8f:bf:10:1c:3b:ee:13:25:13:48:
0c:84:f9:bb:6b:40:4a:02:dd:ee:e4:f0:f9:17:b6:
4a:35:61:47:31:05:5c:66:5c:bf:73:c5:da:61:fa:
f2:80:71:d3:a4:d0:e3:92:8a:93:eb:4e:57:f2:0a:
50:b4:aa:5a:0d:27:4b:4c:c5:c4:b9:d3:91:8b:b0:
75:b1:42:d3:e9:b8:6c:b0:24:b9:83:d4:92:3d:dd:
b2:2f:03:a0:28:de:bf:8f:52:30:47:8c:6a:48:3a:
f4:38:54:bf:c9:5f:7f:55:e5:8b:6e:f2:ce:5a:c2:
dd:02:b3:78:4f:2e:be:f9:40:36:22:ea:81:0a:27:
48:da:ce:f1:c9:ec:0e:c0:84:06:75:15:30:70:1b:
fb:ea:83:cd:b0:af:fc:bb:c4:19:33:09:56:5e:51:
1d:1f:f1:e1:c8:ad:35:7d:13:0b:f5:6b:e7:26:a5:
39:58:72:9e:96:15:f0:9a:90:46:0d:15:bd:c0:74:
eb:45:66:81:c6:6b:4d:30:47:09:b1:79:e1:48:a8:
93:62:8d:d4:43:a5:b0:a7:02:6f:9d:b2:49:89:7f:
40:92:dd:a7:87:0d:1f:93:03:ba:35:69:47:6a:52:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B6:61:95:77:0B:47:51:FD:CE:4C:2E:72:17:7B:BF:D3:7C:A6:A5
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9b:02:23:9b:52:08:8e:3a:fe:15:fd:e5:0d:e0:30:df:d6:
cc:8b:ed:d2:16:10:60:c4:4b:55:0b:51:21:cd:b9:f4:cc:30:
a8:91:9c:73:1c:55:76:b4:d4:28:40:30:18:b4:4b:e9:0b:7b:
b0:bf:0e:92:ca:0e:9c:bd:af:5c:42:0b:9c:de:ce:8a:1d:6d:
c7:71:47:d8:dc:48:2c:d6:ac:d3:63:e4:4b:6d:2f:6f:fb:9b:
d4:4f:5f:6b:ca:ee:26:29:6d:6f:9a:8f:78:64:1e:ad:17:9a:
81:41:e7:6e:d8:be:4e:9f:75:ff:d7:0d:44:3f:a4:e7:b6:81:
52:5c:57:d8:5f:6a:21:35:0f:6f:80:dd:8f:8b:2b:99:a7:c3:
44:24:93:97:26:71:9a:ca:cd:3f:09:47:6d:f9:57:c1:b8:4b:
e9:44:b8:77:72:b5:c6:f7:91:d4:44:73:92:08:b9:38:b8:6a:
ca:0a:07:01:5e:28:2b:93:d1:d5:ce:88:24:29:5d:4c:dc:14:
c1:de:6c:dd:40:fa:31:68:d0:5a:df:67:8f:4b:99:a4:9a:01:
a5:1e:3f:22:3a:c5:bd:4e:48:09:21:30:ea:56:9d:00:c0:5b:
f5:1e:d6:cb:74:23:1f:a6:4c:77:e4:35:66:0d:a7:7f:68:21:
16:d5:4e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNdABPmHmVusBa9bQ5DTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODE2NGQ5OTYxYTE2ZDJlZmY3NzNmNTAyNzgyMWU5ZDJi
ZDM3NDAwHhcNMjUxMTA0MDkwMDQxWhcNMjUxMTA1MDkwMDQxWjAzMTEwLwYDVQQD
EyhkMmI2NjE5NTc3MGI0NzUxZmRjZTRjMmU3MjE3N2JiZmQzN2NhNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWrj7C9zRbXsSyBngHAEX3MD8o+/
EBw77hMlE0gMhPm7a0BKAt3u5PD5F7ZKNWFHMQVcZly/c8XaYfrygHHTpNDjkoqT
605X8gpQtKpaDSdLTMXEudORi7B1sULT6bhssCS5g9SSPd2yLwOgKN6/j1IwR4xq
SDr0OFS/yV9/VeWLbvLOWsLdArN4Ty6++UA2IuqBCidI2s7xyewOwIQGdRUwcBv7
6oPNsK/8u8QZMwlWXlEdH/HhyK01fRML9WvnJqU5WHKelhXwmpBGDRW9wHTrRWaB
xmtNMEcJsXnhSKiTYo3UQ6WwpwJvnbJJiX9Akt2nhw0fkwO6NWlHalKBNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK2YZV3C0dR/c5MLnIXe7/TfKalMB8GA1UdIwQY
MBaAFKGBZNmWGhbS7/dz9QJ4IenSvTdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUt
MTUyMzgwM2ZhZGFmLzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUtMTUyMzgwM2ZhZGFm
LzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJsCI5tS
CI46/hX95Q3gMN/WzIvt0hYQYMRLVQtRIc259MwwqJGccxxVdrTUKEAwGLRL6Qt7
sL8OksoOnL2vXEILnN7Oih1tx3FH2NxILNas02PkS20vb/ub1E9fa8ruJiltb5qP
eGQerReagUHnbti+Tp91/9cNRD+k57aBUlxX2F9qITUPb4Ddj4srmafDRCSTlyZx
msrNPwlHbflXwbhL6US4d3K1xveR1ERzkgi5OLhqygoHAV4oK5PR1c6IJCldTNwU
wd5s3UD6MWjQWt9nj0uZpJoBpR4/IjrFvU5ICSEw6ladAMBb9R7Wy3QjH6ZMd+Q1
Zg2nf2ghFtVONg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:40 2025 by rpki-client