Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: i7jftUcBX85Xwo2iX9ifKu2j2G7S5IjyfOpFLR/gbxQ=
Subject key identifier: A7:F2:C9:92:0A:53:53:7F:CF:01:51:13:98:FF:3A:44:28:11:6C:E8
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019A51F5BF9BC5C0FA73DC5460971DE2EC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0E02
Signing time: Wed 05 Nov 2025 03:00:51 +0000
Manifest this update: Wed 05 Nov 2025 03:00:51 +0000
Manifest next update: Thu 06 Nov 2025 03:00:51 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: iwqYjrpeAeRjQOVrRa9PR8BBLOQlZTfZzWRa517cE5I=)
2: dxC4OOVdD7y8lzmmwGYNpdpf-D0.roa (hash: 1F32hSGI4pbAFMDzlkPoS+O8tvJxdYgPLvmfvhN+IXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:bf:9b:c5:c0:fa:73:dc:54:60:97:1d:e2:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Nov 5 03:00:51 2025 GMT
Not After : Nov 6 03:00:51 2025 GMT
Subject: CN=a7f2c9920a53537fcf01511398ff3a4428116ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:20:07:08:00:23:d2:90:b1:e5:5c:70:e5:
5c:38:12:27:8e:a4:27:ab:e4:3a:58:94:52:b6:df:
d8:10:40:8e:fb:31:c3:0a:93:c6:f8:66:3f:1c:0a:
08:07:3d:41:42:20:5c:68:59:b6:0c:e7:94:d8:1b:
13:8d:fe:96:4d:61:48:2d:1d:36:a9:c3:57:13:aa:
e6:1c:94:45:95:f7:8c:c3:be:5e:f8:45:0c:a9:85:
10:37:61:4c:e3:51:53:87:57:61:41:21:93:27:2d:
3a:f3:71:3f:3b:97:21:33:f4:27:55:85:b2:2a:68:
2a:2f:8c:4f:71:6c:88:7f:2e:c5:62:6d:22:f0:9e:
e8:62:3e:e7:31:6b:5f:79:1f:5e:e6:3f:7d:c6:c6:
dc:fe:8b:0e:26:1d:1e:80:d1:56:e5:8c:c8:91:8f:
9c:eb:79:e0:85:ed:af:b6:8d:47:49:df:2c:75:27:
a5:d5:12:8e:99:dd:80:18:f5:cf:6c:5a:4f:5a:9b:
18:27:4d:25:39:cc:da:a0:e0:64:67:a7:89:b7:5e:
65:8b:fa:a1:78:f1:79:80:9e:33:7e:1b:4c:59:e6:
77:42:82:ae:19:50:8b:89:9b:03:09:84:df:83:57:
00:b3:cc:ca:1b:e1:b5:90:57:24:6a:d6:4c:6c:49:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:C9:92:0A:53:53:7F:CF:01:51:13:98:FF:3A:44:28:11:6C:E8
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e2:2c:cc:ad:e0:60:38:70:30:20:c7:34:2d:b9:d9:b5:6d:
1e:ad:3e:3f:c6:0c:cf:21:2b:a6:9c:62:a3:86:b4:32:2b:16:
dc:50:fc:a2:c7:53:0a:a2:a2:6e:23:06:af:3b:fe:2b:70:a0:
f2:ff:7c:f1:56:4a:99:8e:5e:a7:3c:d9:15:f2:c2:b0:13:42:
42:0c:6a:05:9f:68:f3:73:b0:bf:b3:f5:60:24:03:a2:1a:8d:
97:fb:6d:6e:0b:0e:1a:48:38:44:d7:f3:01:52:77:10:e9:f2:
7a:2c:91:a6:47:84:b2:1c:d8:b0:39:dd:34:97:fb:71:05:c0:
01:2b:17:eb:86:f5:c0:40:f6:b2:4a:b0:6c:d2:2d:4b:8e:70:
bd:e5:b3:16:6a:79:b3:3a:a3:7e:c5:b5:f9:fd:69:7b:04:45:
3a:dc:a2:39:3c:86:f7:ea:d1:55:72:ef:d3:0d:b4:57:54:34:
06:9d:bb:eb:0c:23:03:04:79:80:9e:78:2c:50:a7:9a:ee:52:
c9:8a:08:f2:18:56:e0:3f:e2:76:7e:fb:c2:ad:e1:66:b0:91:
68:12:b0:d9:39:2e:05:99:b5:cd:12:55:e2:94:14:94:87:7d:
3d:ce:2c:10:c5:35:cf:cb:64:aa:c7:c4:6c:96:33:b9:f8:ba:
fc:99:79:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9b+bxcD6c9xUYJcd4uxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjlkMTMxYmU1MjgxMGU0N2M5Y2JiZjgzYTNmZmJkNGY3
Y2JkYmYwHhcNMjUxMTA1MDMwMDUxWhcNMjUxMTA2MDMwMDUxWjAzMTEwLwYDVQQD
EyhhN2YyYzk5MjBhNTM1MzdmY2YwMTUxMTM5OGZmM2E0NDI4MTE2Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0logBwgAI9KQseVccOVcOBInjqQn
q+Q6WJRStt/YEECO+zHDCpPG+GY/HAoIBz1BQiBcaFm2DOeU2BsTjf6WTWFILR02
qcNXE6rmHJRFlfeMw75e+EUMqYUQN2FM41FTh1dhQSGTJy0683E/O5chM/QnVYWy
KmgqL4xPcWyIfy7FYm0i8J7oYj7nMWtfeR9e5j99xsbc/osOJh0egNFW5YzIkY+c
63nghe2vto1HSd8sdSel1RKOmd2AGPXPbFpPWpsYJ00lOczaoOBkZ6eJt15li/qh
ePF5gJ4zfhtMWeZ3QoKuGVCLiZsDCYTfg1cAs8zKG+G1kFckatZMbEm0bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfyyZIKU1N/zwFRE5j/OkQoEWzoMB8GA1UdIwQY
MBaAFDgp0TG+UoEOR8nLv4Oj/71PfL2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYt
YjAzOGRiODk4YjdlLzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iMWE0ZTEtODc3Yi00MzgwLWJmYmYtYjAzOGRiODk4Yjdl
LzEvT0NuUk1iNVNnUTVIeWN1X2c2UF92VTk4dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeIszK3g
YDhwMCDHNC252bVtHq0+P8YMzyErppxio4a0MisW3FD8osdTCqKibiMGrzv+K3Cg
8v988VZKmY5epzzZFfLCsBNCQgxqBZ9o83Owv7P1YCQDohqNl/ttbgsOGkg4RNfz
AVJ3EOnyeiyRpkeEshzYsDndNJf7cQXAASsX64b1wED2skqwbNItS45wveWzFmp5
szqjfsW1+f1pewRFOtyiOTyG9+rRVXLv0w20V1Q0Bp276wwjAwR5gJ54LFCnmu5S
yYoI8hhW4D/idn77wq3hZrCRaBKw2TkuBZm1zRJV4pQUlId9Pc4sEMU1z8tkqsfE
bJYzufi6/Jl5vw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:40 2025 by rpki-client