Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: 0VNfrMgb3XPXA6lfwyG7s/PbJPIPrUiavCJ0uUbPD9g=
Subject key identifier: 5E:9C:B0:C3:35:EE:24:C2:09:5E:F9:99:32:80:1F:8D:9B:AA:8E:A5
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 0199FE1025FA1B8EDC8D0C51B7D0D6AB659F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 20:01:35 +0000
Manifest this update: Sun 19 Oct 2025 20:01:35 +0000
Manifest next update: Mon 20 Oct 2025 20:01:35 +0000
Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: t/PQlZdUgZLVA1j8984HzKvXZP3a95nuoWN90ySBPYo=)
2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:25:fa:1b:8e:dc:8d:0c:51:b7:d0:d6:ab:65:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Oct 19 20:01:35 2025 GMT
Not After : Oct 20 20:01:35 2025 GMT
Subject: CN=5e9cb0c335ee24c2095ef99932801f8d9baa8ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:c9:b6:19:10:15:dd:97:fe:d0:bb:df:69:
51:79:20:33:30:a9:ed:5b:95:3d:34:76:3f:0b:a7:
d0:e9:41:39:cb:02:45:e0:85:02:97:43:20:1c:e5:
ca:95:97:dd:3a:33:2f:55:5b:8e:d8:28:68:f8:47:
6a:1e:80:ff:fc:22:c0:fd:67:61:fb:84:ab:59:26:
43:ff:6a:c9:d0:cf:4e:d3:8b:2d:d1:fb:77:17:94:
2a:17:b3:90:7d:87:fa:99:0b:6a:96:06:dd:e6:5e:
e9:10:fb:42:d6:ac:de:5b:b4:81:4d:9e:8b:23:2c:
d9:c5:14:82:5a:ae:ae:5b:e0:73:ae:5d:c6:9d:03:
ad:c7:67:1f:b1:fe:d3:9d:2b:f4:f2:c7:e9:f2:94:
1d:96:fd:3f:85:eb:cb:3b:89:f0:d2:42:58:18:07:
2c:6e:17:fe:e6:77:fd:08:ad:f6:a8:49:a7:1e:f5:
d4:a1:15:24:b6:7e:ed:35:2c:fb:f2:29:90:4e:55:
6e:a3:ae:e5:e2:7d:7e:a3:9c:67:72:f3:a5:6d:39:
aa:ae:de:fb:a5:99:ae:9e:a4:4b:0f:46:bb:c6:b5:
5e:7d:f7:8e:77:12:e8:48:4d:e4:1f:1b:68:7e:2a:
eb:b2:99:27:7a:a1:af:14:90:80:2e:f9:2c:30:95:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9C:B0:C3:35:EE:24:C2:09:5E:F9:99:32:80:1F:8D:9B:AA:8E:A5
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f5:b2:1c:51:40:f1:a3:f5:1f:77:fc:e7:74:24:fb:e5:4b:
0e:f9:08:a7:86:a8:b9:8e:3c:e0:06:fd:47:94:81:3b:65:fd:
ef:13:aa:33:5d:c6:83:7f:8b:b2:c1:85:04:08:ed:58:6e:74:
b0:f2:7c:ea:4b:71:71:f4:e6:78:e8:19:d6:78:e5:7d:d8:96:
72:ef:25:f7:14:a6:0a:6a:3e:ad:b0:64:65:26:6a:d0:20:b3:
36:0b:9c:1d:ac:da:6e:b3:3f:98:7f:90:85:9e:d4:0b:71:f5:
58:5b:81:50:ce:be:b2:44:23:6f:6c:31:51:7c:ab:3f:44:ad:
fc:16:bf:a8:b0:d2:64:27:58:ec:e8:fe:5d:28:38:8d:3e:0f:
b2:cc:d5:39:60:0e:b0:b8:0d:7d:b8:6b:1b:77:91:6e:a4:dc:
b6:96:89:cd:61:3f:f8:84:79:71:41:ce:68:b9:56:3e:4e:bd:
4b:73:bc:9f:18:2f:9a:01:d8:c4:38:60:63:ee:95:d0:57:45:
ea:e9:76:5d:78:b4:db:54:89:d8:03:d4:97:40:e3:74:e6:4c:
a7:61:eb:4c:45:f6:2e:9c:74:aa:1c:20:c4:4e:7c:3f:08:42:
18:6c:1d:fb:dd:15:a4:7c:b2:ce:dd:bf:3b:1c:ed:40:8b:1c:
9a:6f:be:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+ECX6G47cjQxRt9DWq2WfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjUyOGFiMWNkMWI2ZGM3M2MwYjA5YjY3ZDNlN2UzNTg0
ZjM2M2QwHhcNMjUxMDE5MjAwMTM1WhcNMjUxMDIwMjAwMTM1WjAzMTEwLwYDVQQD
Eyg1ZTljYjBjMzM1ZWUyNGMyMDk1ZWY5OTkzMjgwMWY4ZDliYWE4ZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvbJthkQFd2X/tC732lReSAzMKnt
W5U9NHY/C6fQ6UE5ywJF4IUCl0MgHOXKlZfdOjMvVVuO2Cho+EdqHoD//CLA/Wdh
+4SrWSZD/2rJ0M9O04st0ft3F5QqF7OQfYf6mQtqlgbd5l7pEPtC1qzeW7SBTZ6L
IyzZxRSCWq6uW+Bzrl3GnQOtx2cfsf7TnSv08sfp8pQdlv0/hevLO4nw0kJYGAcs
bhf+5nf9CK32qEmnHvXUoRUktn7tNSz78imQTlVuo67l4n1+o5xncvOlbTmqrt77
pZmunqRLD0a7xrVeffeOdxLoSE3kHxtofirrspkneqGvFJCALvksMJXVCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6csMM17iTCCV75mTKAH42bqo6lMB8GA1UdIwQY
MBaAFDglKKsc0bbcc8Cwm2fT5+NYTzY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMt
M2EwMmEyNDJmNDQ0LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMtM2EwMmEyNDJmNDQ0
LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfWyHFFA
8aP1H3f853Qk++VLDvkIp4aouY484Ab9R5SBO2X97xOqM13Gg3+LssGFBAjtWG50
sPJ86ktxcfTmeOgZ1njlfdiWcu8l9xSmCmo+rbBkZSZq0CCzNgucHazabrM/mH+Q
hZ7UC3H1WFuBUM6+skQjb2wxUXyrP0St/Ba/qLDSZCdY7Oj+XSg4jT4PsszVOWAO
sLgNfbhrG3eRbqTctpaJzWE/+IR5cUHOaLlWPk69S3O8nxgvmgHYxDhgY+6V0FdF
6ul2XXi021SJ2APUl0DjdOZMp2HrTEX2Lpx0qhwgxE58PwhCGGwd+90VpHyyzt2/
OxztQIscmm++QQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:28 2025 by rpki-client