Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: 9l9Yu1nHKZuEZUXYYEEWp6DhOCxx10h3VjJI6e9SVBI=
Subject key identifier: FE:52:6B:46:8B:FF:07:C7:1C:09:9A:41:95:7A:CE:01:B1:14:7B:20
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 0199FBEAD3BD06207B0133E99FAECC69FEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0A41
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: 5Ut0b0NCsET_SBcrRZDGmpxguZ8.roa (hash: yFP/8VV88RGdYS/1gMV2xguqReDrDsPUy9So1+AmUlY=)
2: 5govGzTOoEOkHW5AQQBeXhEslnY.roa (hash: WSesnMfx5MzV8mfpr2Kk+2TovkIoHzCJWKSulEHwHA0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: mQaH2DwAn5/weKgkF1HjWHXxHYxxo3mVoBA9/ZD/ZrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d3:bd:06:20:7b:01:33:e9:9f:ae:cc:69:fe:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=fe526b468bff07c71c099a41957ace01b1147b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:6e:90:d1:dd:c0:97:7e:da:a9:00:89:8a:
dc:8b:7f:74:f2:d1:36:88:c5:54:d4:a3:bb:74:de:
50:5a:c0:8a:a8:a3:41:d3:ef:3c:fa:a5:9c:ac:c1:
83:39:64:4f:0a:ca:de:31:ed:ac:e2:33:68:ba:0f:
90:4c:9d:91:77:ab:e6:d0:53:73:2f:1c:33:5d:d3:
48:f8:a6:5a:cd:c0:b7:30:6b:72:ca:0a:ff:03:67:
5e:f8:19:3c:cc:0a:e5:a4:41:42:62:bc:a1:c7:f9:
8a:62:31:f5:a2:93:41:eb:83:e5:a8:d1:00:64:ae:
e2:13:ee:10:48:2d:ed:59:2f:7d:59:2d:02:45:f3:
4e:62:9c:1f:0c:60:e0:cf:2f:5c:61:a7:51:fc:b4:
e6:99:3f:99:d9:32:f6:67:75:0e:d9:bd:50:34:e2:
3e:40:17:1f:be:7c:3f:d5:f0:ba:c8:47:d5:92:c1:
59:ac:06:c3:13:3e:20:e0:d1:32:31:44:7e:a7:3a:
ed:be:20:17:2e:ca:d8:24:64:6a:9f:49:4d:33:7a:
ca:81:ca:0b:89:c5:dd:7e:03:65:87:ec:ed:26:ff:
3c:ef:8f:8b:05:0a:e8:9b:5c:8a:52:75:d3:ae:32:
c1:9b:bd:b9:bc:f5:9d:ea:48:ac:dd:49:fc:10:37:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:52:6B:46:8B:FF:07:C7:1C:09:9A:41:95:7A:CE:01:B1:14:7B:20
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:60:b2:36:42:24:ee:d4:2f:db:a5:38:8e:f1:2b:a5:43:75:
4b:b7:b5:22:79:aa:a1:1e:43:79:64:53:fb:f8:38:e2:82:99:
12:5e:b2:1f:c8:b6:6d:75:3d:84:87:a7:f0:c5:4b:22:a6:eb:
fa:e9:52:ce:d4:30:26:8c:de:33:9f:02:1a:f3:04:9b:4f:97:
78:09:7f:f1:b9:bd:d8:f6:2f:1c:08:11:11:02:f0:2d:ae:9a:
40:b7:8e:dc:19:dd:40:8d:0a:b6:f2:1a:60:98:07:46:66:dc:
27:21:5e:56:87:7c:94:ce:b7:a5:5e:3e:da:e3:18:f5:57:a0:
7e:2c:66:ba:49:b5:9f:66:b9:54:32:ac:a0:df:71:4d:04:44:
f3:80:05:7a:f8:84:ef:13:ad:f1:58:52:f3:16:f4:df:1d:39:
f6:6d:22:8d:20:6f:08:af:9a:7b:f7:b1:a0:23:5f:ac:1a:97:
3f:68:43:9a:ad:0e:5d:79:73:4c:53:2a:6c:3f:db:a5:8a:46:
57:72:b4:43:40:89:98:4d:bb:fa:ed:cd:05:3b:a1:b4:53:94:
5b:79:4c:15:4e:b7:90:70:70:2a:ff:3d:d0:3c:73:b9:a4:80:
ff:32:16:ed:61:97:4e:f9:2f:12:6d:de:8b:d7:c4:87:7d:92:
67:34:ba:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tO9BiB7ATPpn67Maf75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmU1MzMwMzNiM2NlOTVlNDk3MmJmMjM4MmRkYWMyOTNj
MmRjMDEwHhcNMjUxMDE5MTAwMTM0WhcNMjUxMDIwMTAwMTM0WjAzMTEwLwYDVQQD
EyhmZTUyNmI0NjhiZmYwN2M3MWMwOTlhNDE5NTdhY2UwMWIxMTQ3YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdRukNHdwJd+2qkAiYrci3908tE2
iMVU1KO7dN5QWsCKqKNB0+88+qWcrMGDOWRPCsreMe2s4jNoug+QTJ2Rd6vm0FNz
LxwzXdNI+KZazcC3MGtyygr/A2de+Bk8zArlpEFCYryhx/mKYjH1opNB64PlqNEA
ZK7iE+4QSC3tWS99WS0CRfNOYpwfDGDgzy9cYadR/LTmmT+Z2TL2Z3UO2b1QNOI+
QBcfvnw/1fC6yEfVksFZrAbDEz4g4NEyMUR+pzrtviAXLsrYJGRqn0lNM3rKgcoL
icXdfgNlh+ztJv8874+LBQrom1yKUnXTrjLBm725vPWd6kis3Un8EDdYsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5Sa0aL/wfHHAmaQZV6zgGxFHsgMB8GA1UdIwQY
MBaAFDguUzAzs86V5Jcr8jgt2sKTwtwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMGZhZTEtNDBlZS00MTkxLWIyZDQt
ZWFhMDkwNTE0YjUyLzEvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hMGZhZTEtNDBlZS00MTkxLWIyZDQtZWFhMDkwNTE0YjUy
LzEvT0M1VE1ET3p6cFhrbHl2eU9DM2F3cFBDM0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWCyNkIk
7tQv26U4jvErpUN1S7e1InmqoR5DeWRT+/g44oKZEl6yH8i2bXU9hIen8MVLIqbr
+ulSztQwJozeM58CGvMEm0+XeAl/8bm92PYvHAgREQLwLa6aQLeO3BndQI0KtvIa
YJgHRmbcJyFeVod8lM63pV4+2uMY9Vegfixmukm1n2a5VDKsoN9xTQRE84AFeviE
7xOt8VhS8xb03x059m0ijSBvCK+ae/exoCNfrBqXP2hDmq0OXXlzTFMqbD/bpYpG
V3K0Q0CJmE27+u3NBTuhtFOUW3lMFU63kHBwKv890DxzuaSA/zIW7WGXTvkvEm3e
i9fEh32SZzS6yw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:55:16 2025 by rpki-client