Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json)
Hash identifier: 2HjdRVgKix9nNXZHAZeerNFdvrM1jl04hFRWxgappQY=
Subject key identifier: F2:93:54:CF:0C:A9:77:EF:50:F7:BF:AB:07:D0:C7:3B:B6:0E:D6:5F
Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b
Certificate serial: 019A522C61976F4F89F50312BF86FC8606AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
Manifest number: 075F
Signing time: Wed 05 Nov 2025 04:00:31 +0000
Manifest this update: Wed 05 Nov 2025 04:00:31 +0000
Manifest next update: Thu 06 Nov 2025 04:00:31 +0000
Files and hashes: 1: 6zhmWGIe4Q-ZROn6ekXb0Zv33_A.roa (hash: F27SVg7KmPKSSSpLfMg9+298fdBlmLMbNRr359aPHLc=)
2: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: 1aW3Td5STYtkb9PfSMjg4LxfklJDMjRgq0a/TBoeHBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:61:97:6f:4f:89:f5:03:12:bf:86:fc:86:06:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3802c7987004ae78190e691e370de509ff59127b
Validity
Not Before: Nov 5 04:00:31 2025 GMT
Not After : Nov 6 04:00:31 2025 GMT
Subject: CN=f29354cf0ca977ef50f7bfab07d0c73bb60ed65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:7d:dd:10:ba:84:64:79:fe:86:95:6f:b0:
c8:13:53:bc:a0:5a:38:e0:e8:3f:6a:1f:ba:44:bb:
5d:b4:ee:30:8a:66:ce:89:01:3e:40:86:d1:d2:1d:
97:07:1b:22:f2:a4:9c:be:83:28:97:0f:f5:69:15:
94:bb:32:34:6d:0c:f7:82:72:35:7d:79:60:64:38:
54:3e:0c:de:be:b8:33:d5:b8:22:a3:fd:dc:a6:0b:
f7:7d:f4:86:dd:a9:d0:4f:6d:86:05:9c:6c:2f:ce:
55:48:e0:ea:05:f8:ea:bc:c7:4e:f8:6b:f3:c9:a5:
9d:aa:74:4a:50:a6:97:6c:24:51:e9:4e:39:96:4d:
9c:55:0c:5e:f3:7c:04:c6:cd:1d:4c:39:f8:b3:03:
75:23:6e:82:e8:33:2b:b2:a5:8e:9a:01:47:e7:5d:
2e:2b:c6:aa:c5:1a:34:b7:0c:bc:c8:2d:99:6a:44:
0a:ca:7a:c6:4b:67:3d:6a:26:32:8b:f8:5b:b8:c9:
58:ab:98:61:d9:fb:c1:82:33:ef:f4:d6:42:b3:44:
9a:d9:c5:33:93:16:ae:22:2a:cd:ee:cb:c0:db:fa:
34:91:bf:be:de:ad:a3:73:b9:ac:32:af:37:15:19:
94:4c:56:f5:8b:fc:c7:ea:13:99:bd:b0:f7:85:86:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:93:54:CF:0C:A9:77:EF:50:F7:BF:AB:07:D0:C7:3B:B6:0E:D6:5F
X509v3 Authority Key Identifier:
keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:09:7f:71:0b:ec:a8:ff:81:ea:18:cf:96:5a:2c:95:e4:98:
9f:95:c2:5f:2c:12:30:b5:a9:b5:78:01:00:fe:d5:5b:7c:05:
74:08:73:31:71:fd:ab:ff:0e:0b:b2:21:93:9f:8d:e0:68:a4:
da:ec:b4:78:60:08:a6:4f:c3:a0:2b:4a:97:5c:38:bd:a3:7a:
55:93:ee:87:00:00:51:42:b6:02:12:34:5a:46:70:97:b0:1b:
21:d0:7c:d6:05:2e:24:72:47:d0:c4:d7:da:ca:74:97:c5:77:
7b:52:90:92:8c:9c:cb:2d:e6:c9:e5:40:7e:cb:88:e0:2f:c8:
a3:50:3d:bd:6d:3b:78:9e:b6:84:60:80:4b:8b:b2:27:a7:cd:
0f:c4:7c:bd:93:c8:bd:8d:18:98:e5:6b:d3:5c:fe:8f:ed:2b:
9a:3c:b9:e2:7a:12:28:c3:af:1e:4d:d6:01:94:d8:9e:47:83:
80:5f:6c:73:c1:4a:c9:a5:ec:ec:a8:d5:fc:0d:e2:a9:af:36:
95:40:d4:c0:fd:75:41:bd:a5:36:49:43:49:fc:c5:2b:5f:bf:
94:da:83:b0:db:73:5b:60:ca:87:34:b7:43:24:4b:14:0b:f2:
a7:5d:c5:bb:5f:aa:37:93:61:e5:d2:c6:db:d3:61:c2:62:b0:
da:a2:34:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLGGXb0+J9QMSv4b8hgavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1
OTEyN2IwHhcNMjUxMTA1MDQwMDMxWhcNMjUxMTA2MDQwMDMxWjAzMTEwLwYDVQQD
EyhmMjkzNTRjZjBjYTk3N2VmNTBmN2JmYWIwN2QwYzczYmI2MGVkNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6B93RC6hGR5/oaVb7DIE1O8oFo4
4Og/ah+6RLtdtO4wimbOiQE+QIbR0h2XBxsi8qScvoMolw/1aRWUuzI0bQz3gnI1
fXlgZDhUPgzevrgz1bgio/3cpgv3ffSG3anQT22GBZxsL85VSODqBfjqvMdO+Gvz
yaWdqnRKUKaXbCRR6U45lk2cVQxe83wExs0dTDn4swN1I26C6DMrsqWOmgFH510u
K8aqxRo0twy8yC2ZakQKynrGS2c9aiYyi/hbuMlYq5hh2fvBgjPv9NZCs0Sa2cUz
kxauIirN7svA2/o0kb++3q2jc7msMq83FRmUTFb1i/zH6hOZvbD3hYbZkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKTVM8MqXfvUPe/qwfQxzu2DtZfMB8GA1UdIwQY
MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt
YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz
LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQl/cQvs
qP+B6hjPllosleSYn5XCXywSMLWptXgBAP7VW3wFdAhzMXH9q/8OC7Ihk5+N4Gik
2uy0eGAIpk/DoCtKl1w4vaN6VZPuhwAAUUK2AhI0WkZwl7AbIdB81gUuJHJH0MTX
2sp0l8V3e1KQkoycyy3myeVAfsuI4C/Io1A9vW07eJ62hGCAS4uyJ6fND8R8vZPI
vY0YmOVr01z+j+0rmjy54noSKMOvHk3WAZTYnkeDgF9sc8FKyaXs7KjV/A3iqa82
lUDUwP11Qb2lNklDSfzFK1+/lNqDsNtzW2DKhzS3QyRLFAvyp13Fu1+qN5Nh5dLG
29NhwmKw2qI0Mw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:07 2025 by rpki-client