Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: +pXl3epnpNnC/ZRCGmLRktV10tbBcfnnbGsx0E5tHJw=
Subject key identifier: B5:61:C3:83:59:F5:C2:41:A8:55:33:3D:96:A8:D2:BE:1E:2F:EB:D7
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 019A4FD020AB9D7585D14E068C01CA462C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 1407
Signing time: Tue 04 Nov 2025 17:00:31 +0000
Manifest this update: Tue 04 Nov 2025 17:00:31 +0000
Manifest next update: Wed 05 Nov 2025 17:00:31 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: agmYzzO81qMArlFZHndD14K/stsSxNJrV50grxYy1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:20:ab:9d:75:85:d1:4e:06:8c:01:ca:46:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Nov 4 17:00:31 2025 GMT
Not After : Nov 5 17:00:31 2025 GMT
Subject: CN=b561c38359f5c241a855333d96a8d2be1e2febd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:3d:9d:98:85:2f:d6:93:97:ee:85:e8:f3:
d3:29:f2:90:bd:25:7b:f0:54:08:27:87:05:be:5a:
1b:e3:1d:cb:9d:fe:a9:08:20:23:f0:06:14:5d:bd:
69:cc:4f:3e:be:2c:ac:f4:0e:50:7d:c7:4f:6f:76:
3b:34:89:02:5b:1b:c6:47:02:ba:0d:18:7c:62:ad:
a0:ff:25:65:ec:33:20:0e:92:ea:9c:a7:ef:6d:9c:
01:47:cf:ac:df:dc:9d:c6:5f:92:08:45:b6:63:c7:
11:c7:52:8a:83:19:7c:4a:59:50:b7:9d:a2:c7:cd:
32:f3:ff:0c:6d:89:7e:e8:2d:0a:05:42:e9:e8:1d:
c8:b0:34:10:87:c6:c2:ed:ee:af:50:c9:19:d9:c2:
9e:ad:7b:d2:1a:a2:98:17:d6:be:ff:d2:dd:6e:8b:
bf:31:63:f4:71:f9:9c:8d:1b:1d:17:87:6a:ac:65:
91:92:0e:70:d2:ea:ae:e4:a5:7a:93:d3:a9:2f:4f:
60:31:f6:86:49:71:79:e9:80:01:e4:b2:d7:d5:0c:
46:2c:88:7b:e4:bb:b1:e6:24:7f:b4:de:8e:d0:22:
60:66:72:13:fd:c4:1a:31:7e:ef:02:fd:97:81:5b:
af:ef:4c:64:1b:7d:a9:85:6f:ac:77:ef:6b:97:89:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:61:C3:83:59:F5:C2:41:A8:55:33:3D:96:A8:D2:BE:1E:2F:EB:D7
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8d:7b:cf:01:cd:f6:e5:d2:8b:47:06:39:a7:69:c0:e6:4e:
12:84:2e:ae:e0:35:93:31:1d:1f:44:88:24:ef:f6:cf:36:e3:
01:89:74:f1:06:f9:bc:38:8a:47:55:a9:98:55:04:d1:89:7e:
cc:e2:c5:85:86:8d:83:4a:af:f7:83:1f:8c:18:72:a2:bd:7f:
37:ae:eb:cb:92:3e:5d:33:42:84:a1:7b:74:b3:69:84:77:3b:
65:57:e9:95:68:d1:98:25:e7:29:93:1f:2c:c9:b2:6d:56:5b:
4f:4a:c9:66:7b:6c:d1:de:b5:ab:c9:c4:80:0c:8e:ca:e6:ef:
ae:22:22:22:f5:29:06:73:e9:3b:03:ca:ec:99:6d:5f:db:a2:
57:0e:02:97:0d:c4:91:81:8e:73:15:65:07:31:81:c7:c8:dc:
95:32:79:fb:b1:b9:fb:8d:e7:18:cb:ba:c6:86:1b:4d:5c:37:
d8:0e:5d:32:c4:06:f7:3d:d4:3c:0a:79:66:5d:c6:5b:cd:a1:
eb:0a:82:2d:a0:5d:70:03:c0:ba:70:6f:56:f3:0e:32:e1:4d:
b9:66:89:1e:30:f3:f8:75:e0:c6:b1:2e:48:97:f9:03:dd:7d:
80:49:90:34:0e:15:24:4d:0e:b9:cb:04:7d:6b:15:4c:83:35:
64:f6:77:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0CCrnXWF0U4GjAHKRiwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTJmNGFiYTBiYzliM2UzYWIxODU2NDk3YTQwMDcxOTcx
YjcwNGEwHhcNMjUxMTA0MTcwMDMxWhcNMjUxMTA1MTcwMDMxWjAzMTEwLwYDVQQD
EyhiNTYxYzM4MzU5ZjVjMjQxYTg1NTMzM2Q5NmE4ZDJiZTFlMmZlYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuo9nZiFL9aTl+6F6PPTKfKQvSV7
8FQIJ4cFvlob4x3Lnf6pCCAj8AYUXb1pzE8+viys9A5QfcdPb3Y7NIkCWxvGRwK6
DRh8Yq2g/yVl7DMgDpLqnKfvbZwBR8+s39ydxl+SCEW2Y8cRx1KKgxl8SllQt52i
x80y8/8MbYl+6C0KBULp6B3IsDQQh8bC7e6vUMkZ2cKerXvSGqKYF9a+/9Ldbou/
MWP0cfmcjRsdF4dqrGWRkg5w0uqu5KV6k9OpL09gMfaGSXF56YAB5LLX1QxGLIh7
5Lux5iR/tN6O0CJgZnIT/cQaMX7vAv2XgVuv70xkG32phW+sd+9rl4kiYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVhw4NZ9cJBqFUzPZao0r4eL+vXMB8GA1UdIwQY
MBaAFJji9KugvJs+OrGFZJekAHGXG3BKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS85MmQ1NjQtNWQwOS00MjhlLWFmODAt
ODg4MjE5OWJjY2I0LzEvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS85MmQ1NjQtNWQwOS00MjhlLWFmODAtODg4MjE5OWJjY2I0
LzEvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHI17zwHN
9uXSi0cGOadpwOZOEoQuruA1kzEdH0SIJO/2zzbjAYl08Qb5vDiKR1WpmFUE0Yl+
zOLFhYaNg0qv94MfjBhyor1/N67ry5I+XTNChKF7dLNphHc7ZVfplWjRmCXnKZMf
LMmybVZbT0rJZnts0d61q8nEgAyOyubvriIiIvUpBnPpOwPK7JltX9uiVw4Clw3E
kYGOcxVlBzGBx8jclTJ5+7G5+43nGMu6xoYbTVw32A5dMsQG9z3UPAp5Zl3GW82h
6wqCLaBdcAPAunBvVvMOMuFNuWaJHjDz+HXgxrEuSJf5A919gEmQNA4VJE0OucsE
fWsVTIM1ZPZ3uQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:59:44 2025 by rpki-client