Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: i28N/MCxTv7kfxf8xsfajTPPLwI5fOEtHV1omm/+a+8=
Subject key identifier: 04:CB:77:06:4F:A7:A0:E7:A4:C8:50:AF:3D:2D:60:91:4C:4B:44:A1
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 0199FCC62E496393CE19695413439E67F3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:10 +0000
Manifest this update: Sun 19 Oct 2025 14:01:10 +0000
Manifest next update: Mon 20 Oct 2025 14:01:10 +0000
Files and hashes: 1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: zPMJJjPerZMxJqPL8loNz+1P4/EbPhOU8IuaOv5Y2Ps=)
4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2e:49:63:93:ce:19:69:54:13:43:9e:67:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Oct 19 14:01:10 2025 GMT
Not After : Oct 20 14:01:10 2025 GMT
Subject: CN=04cb77064fa7a0e7a4c850af3d2d60914c4b44a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:e4:55:47:9b:9d:4a:c2:4f:b9:09:5f:ed:
6e:da:fb:a2:98:6d:cb:f2:7c:a5:71:6d:4c:8e:33:
46:ab:bd:a2:18:29:f9:d4:75:58:e6:17:f2:4e:91:
8f:26:9a:bc:a5:96:ee:a3:dc:f0:82:55:2a:d1:b7:
39:ad:61:60:16:cc:32:dc:6e:d6:53:ae:52:42:8c:
cd:c6:94:29:25:09:22:1e:56:c8:fe:d2:96:cf:e5:
ed:39:3b:5a:d2:e3:5b:5d:37:18:bd:6e:12:a3:ae:
f7:e1:0e:da:14:1f:11:e5:79:cd:9b:eb:5f:a0:1b:
32:45:64:2b:92:05:b7:a3:14:bd:9f:eb:2d:f9:c0:
69:c8:03:30:cf:e8:74:c6:ab:20:f4:bc:1a:c2:4f:
70:26:b2:56:26:a1:6b:8d:d8:53:f8:a3:ac:19:77:
48:07:56:68:c4:73:2e:01:f6:a3:ab:39:90:8e:24:
8e:ef:47:4f:bd:8d:63:62:08:be:81:1f:c3:e3:a7:
18:57:dd:2a:ec:e4:c7:46:5e:c3:22:cc:05:16:e2:
23:61:33:ff:6d:29:70:e6:73:78:d3:a2:84:15:f7:
53:ae:11:b4:9a:65:7b:79:50:45:09:0b:9f:fc:45:
28:b1:85:5f:bb:a0:f6:e6:b5:7a:1b:61:9a:2f:c8:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:77:06:4F:A7:A0:E7:A4:C8:50:AF:3D:2D:60:91:4C:4B:44:A1
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1a:e0:c9:ef:48:af:43:62:7c:1f:91:f1:a1:27:2c:28:32:
b9:68:ad:db:87:81:72:af:69:29:12:d6:3e:e6:c2:40:f0:68:
a3:8a:d7:3b:dd:80:93:40:ca:80:79:84:a4:0b:e6:7c:54:5e:
6b:86:c3:66:07:ba:ed:1f:67:5c:b0:20:91:62:7f:54:6f:1a:
1a:4d:4e:62:07:76:2b:4c:33:31:23:c7:cb:bf:1d:c3:0d:3a:
34:ac:94:83:d4:44:4d:43:a2:43:f2:de:fe:69:b1:dc:e0:3f:
28:7e:89:32:53:ab:18:86:88:95:cf:76:44:1b:af:75:73:32:
41:9e:1f:26:57:c4:3a:86:dc:11:69:81:5f:99:46:19:02:b8:
82:55:bc:27:b9:2c:b0:e2:34:7b:53:2a:13:9a:d8:a1:85:e0:
ae:cb:33:6a:d4:81:ef:b4:76:c4:a2:a2:3b:b4:d4:f0:33:ff:
3e:44:6d:62:3b:4e:e6:10:5b:98:72:c2:13:95:7f:16:1c:53:
d8:5a:b5:fc:fa:c6:d5:87:aa:25:47:f6:06:3c:6a:ad:b5:68:
11:5d:36:29:c9:03:74:7a:52:d6:65:da:fb:65:91:8a:8e:9f:
09:f2:43:8b:6a:c7:41:22:a1:1f:d3:61:18:0e:db:0f:a4:9c:
59:1e:08:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xi5JY5POGWlUE0OeZ/O8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWZlMWZlZDFmMmI3ZGIyNGEwYzJkMWY2MTAxMDY4NGU5
M2NiZDUwHhcNMjUxMDE5MTQwMTEwWhcNMjUxMDIwMTQwMTEwWjAzMTEwLwYDVQQD
EygwNGNiNzcwNjRmYTdhMGU3YTRjODUwYWYzZDJkNjA5MTRjNGI0NGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+PkVUebnUrCT7kJX+1u2vuimG3L
8nylcW1MjjNGq72iGCn51HVY5hfyTpGPJpq8pZbuo9zwglUq0bc5rWFgFswy3G7W
U65SQozNxpQpJQkiHlbI/tKWz+XtOTta0uNbXTcYvW4So6734Q7aFB8R5XnNm+tf
oBsyRWQrkgW3oxS9n+st+cBpyAMwz+h0xqsg9Lwawk9wJrJWJqFrjdhT+KOsGXdI
B1ZoxHMuAfajqzmQjiSO70dPvY1jYgi+gR/D46cYV90q7OTHRl7DIswFFuIjYTP/
bSlw5nN406KEFfdTrhG0mmV7eVBFCQuf/EUosYVfu6D25rV6G2GaL8gx4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATLdwZPp6DnpMhQrz0tYJFMS0ShMB8GA1UdIwQY
MBaAFKCv4f7R8rfbJKDC0fYQEGhOk8vVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDIt
ZWNhNTNhN2Y3NzYyLzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDItZWNhNTNhN2Y3NzYy
LzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexrgye9I
r0NifB+R8aEnLCgyuWit24eBcq9pKRLWPubCQPBoo4rXO92Ak0DKgHmEpAvmfFRe
a4bDZge67R9nXLAgkWJ/VG8aGk1OYgd2K0wzMSPHy78dww06NKyUg9RETUOiQ/Le
/mmx3OA/KH6JMlOrGIaIlc92RBuvdXMyQZ4fJlfEOobcEWmBX5lGGQK4glW8J7ks
sOI0e1MqE5rYoYXgrsszatSB77R2xKKiO7TU8DP/PkRtYjtO5hBbmHLCE5V/FhxT
2Fq1/PrG1YeqJUf2BjxqrbVoEV02KckDdHpS1mXa+2WRio6fCfJDi2rHQSKhH9Nh
GA7bD6ScWR4IeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:18 2025 by rpki-client