
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier: nIo+NYxnKTZjcAYAd0Kw7Sg/P71dbzNob75gSaoz+EU=
Subject key identifier: E5:C0:F0:12:80:4A:0E:EA:AE:6B:D3:47:E3:DD:F7:C2:62:46:50:09
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 0199FCC63D8DE38C1081E2DD1DCEB06FB30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: 0i27NjvnFtlwbFJL8brWgH_dw8U.roa (hash: YML80PmXT345DJiCwX4apNsJ7UtnB8nEMX5Dpv2Ctsw=)
2: 1kY2nGT8PP1V1pxbzH8gDFZHRGw.roa (hash: pbZtP+N8idLMQTinI/aHUKYzG+cdVac5nacfjqhyPdo=)
3: OfxxmNtzJcdCBkWeVovM4im8aiY.roa (hash: WRZK3jUR3eiSqkPuuJOy87KYkFs/X19TJQecAHmPTCA=)
4: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: xzDXHSgpqhyuJoMaAzzmfqc21Mr1WAbjmH0zwczCYAs=)
5: ct0UdU9tbjVu5vnRCDtuTGBSo4c.roa (hash: 2wetSh/WjuBgx0H+sbj7Aow3E9vqoUt+MG+BDwetShE=)
6: pZwUUb6x4Lez1tW_jvxd_X_PyY8.roa (hash: weF+c7Ta8anbMKz4f67ACPq7m1FTdbmyMymH/ZhAy3g=)
7: vFVZ9av3BvQ-ws_7EVciDYDt6Rw.roa (hash: 1s2dWFQ6yIEmp8FiTPqLYuMVpLoqmko/eqoHIt276/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3d:8d:e3:8c:10:81:e2:dd:1d:ce:b0:6f:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=e5c0f012804a0eeaae6bd347e3ddf7c262465009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:d4:ba:b0:93:2f:b0:9e:32:6f:4d:38:c3:
b4:b5:c8:91:76:14:11:b0:a4:68:7f:b9:da:03:c1:
13:ac:39:a7:a6:b9:16:29:6c:58:7b:68:ab:11:3f:
e0:6d:d1:7e:37:a4:97:39:57:7a:82:71:cc:81:02:
ef:5b:bb:57:9c:94:22:e8:f4:94:47:8a:10:29:5e:
39:19:92:ba:78:48:6d:da:12:65:7e:04:6b:65:bf:
da:1f:f8:e9:3b:3b:21:da:f8:36:ab:ec:63:7f:fd:
f4:44:5b:1a:8f:e7:54:1b:3b:7f:52:d6:6f:fc:59:
2b:e8:04:69:95:f8:b7:86:0f:af:29:2c:12:43:27:
f6:fb:dd:31:ba:9a:89:39:1c:b6:f2:5b:b2:ac:32:
8a:4a:31:71:53:4d:ba:5f:7f:ac:43:52:fd:1f:6a:
d3:0c:08:ba:5e:34:9f:18:84:ae:c9:95:de:51:73:
cf:6f:a4:ea:1a:79:9a:2b:74:fe:83:b4:f4:98:4a:
10:c1:70:41:63:9a:14:0e:6d:e6:66:19:43:6f:57:
68:3c:d5:83:61:3d:32:63:85:46:72:74:df:ab:cb:
2a:f2:c1:3b:e0:7b:64:2f:c9:24:bb:02:5f:fc:a3:
8f:da:5e:5d:b1:44:43:99:cd:07:94:ee:17:fa:34:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C0:F0:12:80:4A:0E:EA:AE:6B:D3:47:E3:DD:F7:C2:62:46:50:09
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:1d:9b:44:ba:9c:7d:e8:d6:17:f7:f9:bf:83:e2:bf:ff:
02:a5:1b:5b:f6:54:d6:79:71:d7:ff:16:bb:1c:4c:93:c9:cc:
e0:1b:35:40:18:99:b8:19:e2:23:3c:e9:02:6e:0a:cf:f8:e2:
8a:53:26:b0:7d:72:7b:38:3f:66:71:c5:12:fa:a8:23:28:40:
ba:e6:b5:45:42:c0:c0:6d:e7:77:e0:52:e7:b0:1a:bc:2c:1f:
af:91:2c:52:38:15:61:5c:9a:76:81:a5:2d:ef:78:00:b7:a9:
93:ad:9a:2a:e2:7f:b2:1b:6a:97:34:20:c6:43:b8:df:c1:54:
26:c8:6b:09:be:b4:7f:59:e0:95:83:4b:2f:78:c7:df:79:14:
3c:d5:4d:6b:f5:89:c5:0f:12:2b:72:7c:07:3a:7d:d6:ee:96:
24:e5:9f:e0:d6:13:49:6c:9e:3d:bf:e2:49:48:db:b8:4b:6b:
11:0f:36:9e:12:69:2c:10:16:3b:1d:25:50:39:39:27:68:96:
88:a7:cb:3f:61:d6:0a:a0:28:1a:f5:4d:b1:dc:03:ff:5a:03:
52:ef:55:07:fe:25:fb:ae:68:37:8c:13:92:dd:b0:a5:93:f8:
89:4c:f9:26:ee:0d:b1:ae:26:97:4e:59:ad:2d:1c:78:b5:a4:
53:b8:9f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xj2N44wQgeLdHc6wb7MNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz
OGI4NWEwHhcNMjUxMDE5MTQwMTE0WhcNMjUxMDIwMTQwMTE0WjAzMTEwLwYDVQQD
EyhlNWMwZjAxMjgwNGEwZWVhYWU2YmQzNDdlM2RkZjdjMjYyNDY1MDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBfUurCTL7CeMm9NOMO0tciRdhQR
sKRof7naA8ETrDmnprkWKWxYe2irET/gbdF+N6SXOVd6gnHMgQLvW7tXnJQi6PSU
R4oQKV45GZK6eEht2hJlfgRrZb/aH/jpOzsh2vg2q+xjf/30RFsaj+dUGzt/UtZv
/Fkr6ARplfi3hg+vKSwSQyf2+90xupqJORy28luyrDKKSjFxU026X3+sQ1L9H2rT
DAi6XjSfGISuyZXeUXPPb6TqGnmaK3T+g7T0mEoQwXBBY5oUDm3mZhlDb1doPNWD
YT0yY4VGcnTfq8sq8sE74HtkL8kkuwJf/KOP2l5dsURDmc0HlO4X+jROeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXA8BKASg7qrmvTR+Pd98JiRlAJMB8GA1UdIwQY
MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt
MzMxZDdmYzc3YmQ0LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0
LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz4dm0S6
nH3o1hf3+b+D4r//AqUbW/ZU1nlx1/8WuxxMk8nM4Bs1QBiZuBniIzzpAm4Kz/ji
ilMmsH1yezg/ZnHFEvqoIyhAuua1RULAwG3nd+BS57AavCwfr5EsUjgVYVyadoGl
Le94ALepk62aKuJ/shtqlzQgxkO438FUJshrCb60f1nglYNLL3jH33kUPNVNa/WJ
xQ8SK3J8Bzp91u6WJOWf4NYTSWyePb/iSUjbuEtrEQ82nhJpLBAWOx0lUDk5J2iW
iKfLP2HWCqAoGvVNsdwD/1oDUu9VB/4l+65oN4wTkt2wpZP4iUz5Ju4Nsa4ml05Z
rS0ceLWkU7ifqQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:12 2025 by rpki-client