Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier: RSNTHW/bNfthtpkd3WuUacMPEpTJrr0FjS8ce/8JRRk=
Subject key identifier: 63:1F:D2:CD:0D:8A:C4:BE:03:5E:42:3C:A8:3F:A3:E4:E4:DF:06:F5
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 019A4DE1F33B24702BB33A84DDF48212FA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number: 1512
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=)
2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=)
3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=)
4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: ORFlabryy9Nn0HEWiIbt+d9pPNTYW+fu24xNB0XenfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f3:3b:24:70:2b:b3:3a:84:dd:f4:82:12:fa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=631fd2cd0d8ac4be035e423ca83fa3e4e4df06f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:59:2a:7a:c5:09:fe:c7:19:05:f2:c7:29:
1e:22:f9:db:15:ec:59:27:0a:de:78:36:7a:89:04:
05:dc:2a:f3:e9:a9:a5:a3:f4:05:f5:70:3a:bb:40:
d7:ac:33:6f:95:ee:83:30:d0:bc:76:31:72:67:d7:
ca:c0:a7:ee:43:13:81:75:f4:d4:fc:16:a1:68:43:
53:b7:34:7e:a6:8e:f8:e8:d9:48:61:ea:6f:d9:14:
d2:17:e6:2d:7f:18:54:38:ff:5f:c3:97:22:26:b0:
3f:90:c3:77:c9:61:8d:ce:53:f3:27:ec:a3:6b:b9:
25:61:13:0b:8a:a8:e2:80:74:9f:e4:4c:f9:67:56:
f1:63:75:e6:90:ad:53:e3:19:37:35:ea:e6:21:64:
3f:f1:95:e8:03:fe:96:71:cb:6d:7b:e0:36:55:fd:
71:6f:66:93:cd:f9:fd:79:bc:7d:cf:e9:04:09:64:
c6:6c:03:33:fb:14:8b:01:c0:78:a4:1d:5b:03:3d:
b1:ce:11:d0:0f:05:eb:87:08:51:f8:e7:a3:75:1e:
b0:8a:b1:95:78:f2:67:c5:8f:6d:02:6a:05:c4:95:
47:52:4f:55:55:3a:6e:36:79:1e:f6:a7:a9:63:a0:
0a:78:e6:5c:14:0e:3c:4a:87:7a:c2:99:04:47:a4:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1F:D2:CD:0D:8A:C4:BE:03:5E:42:3C:A8:3F:A3:E4:E4:DF:06:F5
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:77:8b:40:df:25:d2:7f:a3:89:b0:f1:53:83:28:22:de:da:
6a:94:40:a7:99:b2:91:4e:b1:6d:4d:0e:ce:06:4f:9a:6c:c7:
2e:8c:37:0a:46:0c:79:40:40:80:fa:4e:a0:b3:21:2d:cc:c5:
f1:6c:5e:d2:2a:89:fd:9f:07:4a:19:ee:47:0f:cf:4b:5d:f5:
c5:b6:fc:4e:81:ec:7e:95:de:a7:1b:f8:62:e1:fb:a1:78:26:
d4:20:41:16:8e:9e:75:65:13:91:d6:c9:d4:9b:a2:3e:b2:41:
ca:b7:0a:a1:6d:53:44:19:4e:88:3b:51:d3:0c:e2:97:16:bd:
09:f6:06:5a:fe:68:c0:89:0b:48:44:09:db:63:83:93:63:fb:
d1:e4:ae:be:9d:33:42:90:f3:74:c9:f2:2b:53:31:e4:d7:d3:
62:38:e6:f2:1f:5a:5d:2a:92:54:a9:db:b8:60:85:4a:6b:98:
92:dd:85:7c:fe:e6:87:ab:ec:6a:9d:f5:64:20:2c:1d:2e:8f:
a3:c7:01:85:d7:3b:98:ba:49:d4:49:77:9e:72:c1:b5:26:1e:
02:75:46:3c:14:b5:23:7e:9f:61:c0:34:3b:05:db:b8:fe:b3:
63:74:0b:58:14:0e:6f:84:c7:de:9e:c1:16:23:29:8d:f5:80:
99:1f:fa:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fM7JHArszqE3fSCEvomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjA2YjhhYWQ1NTNmMDk0OGM3YTg5NGQ2ODY3MTg3MGVi
ODJjYjAwHhcNMjUxMTA0MDgwMDQ0WhcNMjUxMTA1MDgwMDQ0WjAzMTEwLwYDVQQD
Eyg2MzFmZDJjZDBkOGFjNGJlMDM1ZTQyM2NhODNmYTNlNGU0ZGYwNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YNZKnrFCf7HGQXyxykeIvnbFexZ
JwreeDZ6iQQF3Crz6amlo/QF9XA6u0DXrDNvle6DMNC8djFyZ9fKwKfuQxOBdfTU
/BahaENTtzR+po746NlIYepv2RTSF+YtfxhUOP9fw5ciJrA/kMN3yWGNzlPzJ+yj
a7klYRMLiqjigHSf5Ez5Z1bxY3XmkK1T4xk3NermIWQ/8ZXoA/6Wcctte+A2Vf1x
b2aTzfn9ebx9z+kECWTGbAMz+xSLAcB4pB1bAz2xzhHQDwXrhwhR+OejdR6wirGV
ePJnxY9tAmoFxJVHUk9VVTpuNnke9qepY6AKeOZcFA48Sod6wpkER6TOkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMf0s0NisS+A15CPKg/o+Tk3wb1MB8GA1UdIwQY
MBaAFKBga4qtVT8JSMeolNaGcYcOuCywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYt
YmIzNDMxZmUwMjg1LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYtYmIzNDMxZmUwMjg1
LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXeLQN8l
0n+jibDxU4MoIt7aapRAp5mykU6xbU0OzgZPmmzHLow3CkYMeUBAgPpOoLMhLczF
8Wxe0iqJ/Z8HShnuRw/PS131xbb8ToHsfpXepxv4YuH7oXgm1CBBFo6edWUTkdbJ
1JuiPrJByrcKoW1TRBlOiDtR0wzilxa9CfYGWv5owIkLSEQJ22ODk2P70eSuvp0z
QpDzdMnyK1Mx5NfTYjjm8h9aXSqSVKnbuGCFSmuYkt2FfP7mh6vsap31ZCAsHS6P
o8cBhdc7mLpJ1El3nnLBtSYeAnVGPBS1I36fYcA0OwXbuP6zY3QLWBQOb4TH3p7B
FiMpjfWAmR/64w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:56 2025 by rpki-client