Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File: ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier: fNDQ/F4oL7Iksnoa/X2FoGmNyYbxXlEImu3NcywBkI0=
Subject key identifier: 01:99:1E:50:EA:B4:B4:9B:B1:7B:C3:F4:BD:1F:EE:59:2E:94:04:F6
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer: /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial: 019A52D1FD1F41ADF7BCD7F44BFCE0455B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:24 +0000
Manifest this update: Wed 05 Nov 2025 07:01:24 +0000
Manifest next update: Thu 06 Nov 2025 07:01:24 +0000
Files and hashes: 1: 1Sndi7er7bpQydqDqOMh1TcWi2c.roa (hash: 1MEp25vqqZ0ufx7FrXXarnt6HcRltVfMx9pP8jk/+jU=)
2: G3ZIKi5NlW3jvdkfzVqAJ4xyXOo.roa (hash: rwjhfMhSY3LA1PgrA0qmqDeuJnCpkzyImzevDSh2Ji4=)
3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: zh4+zH0wj15Lqhq6wX5CZwEwhV+wbGpqyBgJOsRXMOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:fd:1f:41:ad:f7:bc:d7:f4:4b:fc:e0:45:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Validity
Not Before: Nov 5 07:01:24 2025 GMT
Not After : Nov 6 07:01:24 2025 GMT
Subject: CN=01991e50eab4b49bb17bc3f4bd1fee592e9404f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:56:61:2e:1c:0f:37:ae:57:83:64:06:6b:
7f:3d:8d:87:db:52:40:61:88:ce:0e:e7:14:7b:14:
10:e2:3d:1c:39:8d:a8:c1:88:d3:ea:50:63:63:1d:
d0:08:41:98:72:4f:05:65:ff:aa:bc:8e:77:9a:a4:
2e:81:31:9c:ad:b6:3e:08:76:70:e0:a5:1c:c8:02:
35:78:0e:5a:ad:62:2e:62:be:94:c8:ee:ee:e5:0d:
fe:e0:68:5a:49:ff:0a:90:ff:6f:eb:3d:f4:68:24:
6e:91:33:0e:f5:a6:40:a5:e5:36:83:96:d9:e5:e6:
b9:8b:19:89:3d:24:50:38:e4:cc:53:54:fe:6d:85:
70:81:63:1f:02:dd:c9:28:9a:51:88:ae:a7:be:f6:
82:05:a1:c2:2d:36:e7:08:5f:83:31:32:c2:b0:86:
10:78:32:79:14:c4:84:89:57:32:e2:dd:05:51:c0:
4a:58:c5:94:9b:7c:d9:f3:a1:8c:1a:0b:2c:b0:74:
2f:95:97:77:93:e1:04:b9:20:f9:ba:b3:1d:19:d6:
dd:53:fa:b1:32:39:54:a0:6e:86:23:c9:f2:04:92:
70:23:b6:a9:58:b6:65:f4:d7:29:f7:cc:27:3c:26:
af:9c:63:be:30:67:dd:b0:15:83:84:6c:ba:7a:13:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:1E:50:EA:B4:B4:9B:B1:7B:C3:F4:BD:1F:EE:59:2E:94:04:F6
X509v3 Authority Key Identifier:
keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2e:8a:bf:95:0f:c6:e0:08:8c:e6:5e:1b:c8:d6:04:ef:5f:
fa:11:63:39:7a:12:57:01:a6:79:4c:d6:35:01:59:d0:11:09:
5e:fe:4b:c3:2f:f3:ac:c5:ec:ca:40:04:c7:cf:95:17:e2:2e:
a9:72:b2:27:be:ba:3a:90:df:19:80:44:d3:84:46:3a:89:57:
dc:ba:fe:e3:f6:87:ba:4b:29:73:1f:b2:0f:e5:3d:06:3f:46:
a6:88:b1:56:43:6a:8c:93:ef:65:e3:57:26:69:85:98:87:22:
33:93:29:ef:e6:db:4f:a3:b5:9a:06:ba:30:f3:51:e9:3c:ad:
37:27:1e:f7:a9:62:8b:33:cf:26:5a:21:0e:ab:c7:c8:ea:4a:
8b:04:b5:e5:a9:54:32:a0:34:15:b3:d8:e0:d6:07:5c:5e:63:
10:90:e2:4b:65:d0:28:49:55:21:f7:63:ab:14:99:fe:df:a4:
08:13:17:ae:af:f1:4d:2e:d2:03:a9:e8:38:45:54:8e:f8:8c:
9b:c4:f3:e8:06:27:24:35:a5:ca:f3:e6:7f:85:fe:3b:9d:00:
ab:43:61:03:3d:9d:f5:b8:03:e8:b5:f2:ec:74:34:3b:e5:59:
35:d4:76:cd:b6:35:89:92:09:1c:bd:7f:3c:19:cb:9a:74:f9:
aa:f3:0f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0f0fQa33vNf0S/zgRVtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTYwNmM3ZTkzZmVkMzZlZjkwZDQyY2U0YTk3MjYwYmI4
YWE5YzEwHhcNMjUxMTA1MDcwMTI0WhcNMjUxMTA2MDcwMTI0WjAzMTEwLwYDVQQD
EygwMTk5MWU1MGVhYjRiNDliYjE3YmMzZjRiZDFmZWU1OTJlOTQwNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDRWYS4cDzeuV4NkBmt/PY2H21JA
YYjODucUexQQ4j0cOY2owYjT6lBjYx3QCEGYck8FZf+qvI53mqQugTGcrbY+CHZw
4KUcyAI1eA5arWIuYr6UyO7u5Q3+4GhaSf8KkP9v6z30aCRukTMO9aZApeU2g5bZ
5ea5ixmJPSRQOOTMU1T+bYVwgWMfAt3JKJpRiK6nvvaCBaHCLTbnCF+DMTLCsIYQ
eDJ5FMSEiVcy4t0FUcBKWMWUm3zZ86GMGgsssHQvlZd3k+EEuSD5urMdGdbdU/qx
MjlUoG6GI8nyBJJwI7apWLZl9Ncp98wnPCavnGO+MGfdsBWDhGy6ehPY4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGZHlDqtLSbsXvD9L0f7lkulAT2MB8GA1UdIwQY
MBaAFKLmBsfpP+0275DULOSpcmC7iqnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYt
YTllYTIwNTcwNDJiLzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYtYTllYTIwNTcwNDJi
LzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyS6Kv5UP
xuAIjOZeG8jWBO9f+hFjOXoSVwGmeUzWNQFZ0BEJXv5Lwy/zrMXsykAEx8+VF+Iu
qXKyJ766OpDfGYBE04RGOolX3Lr+4/aHukspcx+yD+U9Bj9GpoixVkNqjJPvZeNX
JmmFmIciM5Mp7+bbT6O1mga6MPNR6TytNyce96liizPPJlohDqvHyOpKiwS15alU
MqA0FbPY4NYHXF5jEJDiS2XQKElVIfdjqxSZ/t+kCBMXrq/xTS7SA6noOEVUjviM
m8Tz6AYnJDWlyvPmf4X+O50Aq0NhAz2d9bgD6LXy7HQ0O+VZNdR2zbY1iZIJHL1/
PBnLmnT5qvMP3w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:15:49 2025 by rpki-client