Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: OLEZJDJ25KAp993FXT9j2gFYE3/o0iHgllR7o+9OVKY=
Subject key identifier: 64:87:53:32:EC:FA:B3:D9:77:D2:49:B2:81:10:27:82:6E:A5:EC:1B
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 0199FC21501858B1A4E91F8C47722FC60D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 0307
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: xghTefpD0n63qPs6iEDbAIpkTOkCSO3bP5Djh8Jzk1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:50:18:58:b1:a4:e9:1f:8c:47:72:2f:c6:0d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=64875332ecfab3d977d249b2811027826ea5ec1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:4b:e5:23:9d:e1:cd:cb:6b:fe:73:4d:0f:
24:f8:92:81:d8:8f:69:f4:15:46:a4:f7:8c:18:fe:
67:7e:09:98:bb:98:9d:d5:1c:05:14:0c:3a:8f:bf:
62:3c:4e:6e:35:7d:4b:de:46:d7:0b:db:f3:80:59:
2a:bd:01:d5:7a:68:ba:65:dd:2d:04:5e:13:b9:8e:
c3:05:41:aa:9b:ae:bd:28:9c:77:ab:b9:a6:24:62:
7b:c4:2f:a5:d9:cc:d5:43:01:22:ef:bc:e3:92:72:
d8:08:ac:c5:4d:46:eb:af:ef:0d:69:66:4e:a4:d4:
bc:96:61:dc:5a:6d:99:95:d1:93:1e:b9:19:da:b8:
7a:df:63:aa:b9:f6:73:01:d5:65:2b:73:21:ba:d1:
45:82:03:b5:9d:ee:5a:27:43:3d:17:72:30:ed:52:
07:13:a5:70:e5:25:c7:d3:9e:22:78:2a:96:4e:3d:
9c:73:80:ab:5b:bb:78:b4:3d:9c:85:d0:0f:7e:84:
77:69:e9:08:bc:f4:61:59:b6:48:70:87:1c:64:8b:
dc:2b:7c:9a:0a:f2:6a:ab:11:ae:97:72:e1:47:4d:
56:c5:f9:3a:33:59:26:76:ad:b5:27:cc:80:4d:c9:
a3:32:1f:81:87:ea:30:c4:36:c0:52:cd:4b:8b:2c:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:53:32:EC:FA:B3:D9:77:D2:49:B2:81:10:27:82:6E:A5:EC:1B
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:46:5b:8b:70:0c:1f:1c:bf:7e:97:c1:81:6e:66:81:13:c7:
d4:cf:86:8f:02:8d:77:b2:5f:de:0c:fe:79:05:b5:76:f4:5c:
4b:ec:d6:46:d1:63:0d:6d:dd:32:a5:1f:49:95:b2:7e:5f:0d:
cf:99:2d:22:ab:ef:a6:32:69:9b:fe:dc:2a:95:95:81:d0:96:
ed:c0:72:0e:fb:54:0d:bf:26:15:60:c0:1e:ac:13:b9:20:5d:
fb:20:86:10:27:1f:78:c3:f7:d2:33:07:96:61:9b:31:fb:2c:
5a:c1:ce:ed:63:d6:93:62:6c:0e:34:8e:24:3e:ac:9e:bd:09:
d6:23:4c:f2:cd:6c:eb:ab:f0:39:bc:49:71:15:c1:81:49:4f:
38:bd:55:5b:de:93:d7:a5:69:72:67:d1:84:34:91:22:32:17:
b1:30:a6:d3:d1:44:c2:60:bb:32:62:f4:43:5d:c5:ec:58:52:
e6:35:a1:4e:c3:30:4b:3d:06:73:fd:a1:86:18:90:67:24:04:
5c:a2:9f:63:84:19:4a:e9:4c:a7:46:b1:0a:3c:d0:fb:b2:ab:
d4:5e:f3:b0:e7:2a:dd:ae:dc:ec:b9:1c:0c:44:3e:d0:bf:e4:
c8:2a:e9:68:2d:8e:19:e1:98:aa:34:0f:62:f1:be:6e:5a:61:
12:46:6e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVAYWLGk6R+MR3Ivxg1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODM4MjRmZGMyOWViZTRhYzI4NmNhMDE4NDRkZjg2ZDRk
NzVlYzAwHhcNMjUxMDE5MTEwMTA1WhcNMjUxMDIwMTEwMTA1WjAzMTEwLwYDVQQD
Eyg2NDg3NTMzMmVjZmFiM2Q5NzdkMjQ5YjI4MTEwMjc4MjZlYTVlYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ApL5SOd4c3La/5zTQ8k+JKB2I9p
9BVGpPeMGP5nfgmYu5id1RwFFAw6j79iPE5uNX1L3kbXC9vzgFkqvQHVemi6Zd0t
BF4TuY7DBUGqm669KJx3q7mmJGJ7xC+l2czVQwEi77zjknLYCKzFTUbrr+8NaWZO
pNS8lmHcWm2ZldGTHrkZ2rh632OqufZzAdVlK3MhutFFggO1ne5aJ0M9F3Iw7VIH
E6Vw5SXH054ieCqWTj2cc4CrW7t4tD2chdAPfoR3aekIvPRhWbZIcIccZIvcK3ya
CvJqqxGul3LhR01Wxfk6M1kmdq21J8yATcmjMh+Bh+owxDbAUs1Liyy7kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSHUzLs+rPZd9JJsoEQJ4JupewbMB8GA1UdIwQY
MBaAFK6Dgk/cKevkrChsoBhE34bU117AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTkt
OTcwMDU0NmI1NzExLzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTktOTcwMDU0NmI1NzEx
LzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEZbi3AM
Hxy/fpfBgW5mgRPH1M+GjwKNd7Jf3gz+eQW1dvRcS+zWRtFjDW3dMqUfSZWyfl8N
z5ktIqvvpjJpm/7cKpWVgdCW7cByDvtUDb8mFWDAHqwTuSBd+yCGECcfeMP30jMH
lmGbMfssWsHO7WPWk2JsDjSOJD6snr0J1iNM8s1s66vwObxJcRXBgUlPOL1VW96T
16VpcmfRhDSRIjIXsTCm09FEwmC7MmL0Q13F7FhS5jWhTsMwSz0Gc/2hhhiQZyQE
XKKfY4QZSulMp0axCjzQ+7Kr1F7zsOcq3a7c7LkcDEQ+0L/kyCrpaC2OGeGYqjQP
YvG+blphEkZuGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:13 2025 by rpki-client