Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: MF4i4z3Hg5sLKkfJbRLsRbUwWWn9oU+ViAyqjiQJoaE=
Subject key identifier: CD:19:CE:97:30:F9:CB:0E:C3:96:DC:34:B3:0C:4E:E2:08:B7:DF:23
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 0199FC21BA41E6B81D1F35C3A5C3BD3EDF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0584
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: VT5FWmV7PVQBdtRt7aAGA4ik6v6ODYVmAxWpP1qk49M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ba:41:e6:b8:1d:1f:35:c3:a5:c3:bd:3e:df:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=cd19ce9730f9cb0ec396dc34b30c4ee208b7df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:dd:f6:00:83:e2:94:c4:1e:d0:bb:ee:35:19:
e1:1e:7a:36:82:94:9d:b1:80:9a:b1:29:b2:17:4b:
b7:fe:cd:37:c6:b0:fa:d8:5e:ca:5e:57:3e:0b:8a:
01:74:39:da:d2:15:67:3c:34:4f:5f:47:e2:c9:77:
dc:52:4e:e8:ad:60:d7:78:38:03:22:94:0d:41:3d:
10:b1:aa:2f:30:5b:f2:19:74:a3:74:53:9a:ae:a5:
ab:0d:c6:f9:e5:31:30:e8:57:47:ac:b7:48:8e:9c:
09:4a:96:c6:3a:13:4a:15:46:87:97:39:b7:30:36:
e6:8c:bc:9b:91:80:e7:43:ab:a5:33:82:a6:51:b0:
a1:5e:82:5d:8b:29:c4:74:96:98:38:52:f0:44:0b:
a2:71:7f:b7:af:7d:f1:db:c1:b6:f0:dc:08:f7:0f:
38:73:0e:73:16:9f:c9:63:41:b7:d4:3e:0b:b3:d9:
2c:c4:a4:ef:d8:1c:78:71:e5:7e:95:89:0d:87:f7:
1e:d9:d3:7d:bd:d3:24:25:4b:6f:c2:6b:a9:cc:04:
dc:70:a1:ae:8b:bf:22:af:13:ef:fd:01:49:de:82:
31:32:7a:de:dd:be:31:0c:cf:12:94:cc:62:0b:4d:
26:e4:8f:6e:42:1f:97:49:8f:d6:07:1d:f3:2a:0f:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:19:CE:97:30:F9:CB:0E:C3:96:DC:34:B3:0C:4E:E2:08:B7:DF:23
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ad:e3:62:15:76:99:f8:8d:03:56:15:cc:96:e6:b8:ba:4f:
6c:83:09:df:22:35:2c:5f:f2:bd:80:d0:eb:5a:a5:d7:aa:c3:
f3:18:fc:a5:82:fa:d1:e9:6c:d4:fb:1d:35:6b:66:9b:e3:13:
1f:ba:40:18:b1:75:73:e2:2e:19:8d:c1:ee:f0:93:26:3d:77:
dc:80:ab:f6:ad:71:5f:5c:35:9d:a8:4f:99:da:62:48:93:16:
96:15:b0:47:65:45:03:25:81:9b:75:23:5d:33:9d:1f:4f:07:
b9:61:9c:3b:b4:11:cc:d7:22:51:af:8d:ab:06:3e:c4:1c:2b:
78:39:d7:70:8d:de:46:52:a7:50:eb:a9:2f:eb:81:b5:71:bd:
cd:ae:06:1d:1e:f4:86:51:fd:6e:0b:c6:18:74:52:ef:57:24:
0f:56:ff:6e:50:84:6b:79:71:50:cb:da:51:57:27:76:bc:ac:
94:12:67:67:bb:b8:65:99:a3:20:72:f6:9c:ef:42:36:b4:c8:
89:00:ca:a7:7c:b3:03:4f:33:14:bb:37:09:9d:73:e7:18:c3:
c7:7d:65:e6:5f:15:71:d2:75:83:87:b3:b8:f1:0b:86:31:f1:
ef:e1:82:4e:88:86:1b:d8:28:77:56:47:be:97:20:43:e1:07:
8c:c3:85:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbpB5rgdHzXDpcO9Pt+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi
NmE1YWUwHhcNMjUxMDE5MTEwMTMyWhcNMjUxMDIwMTEwMTMyWjAzMTEwLwYDVQQD
EyhjZDE5Y2U5NzMwZjljYjBlYzM5NmRjMzRiMzBjNGVlMjA4YjdkZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9932AIPilMQe0LvuNRnhHno2gpSd
sYCasSmyF0u3/s03xrD62F7KXlc+C4oBdDna0hVnPDRPX0fiyXfcUk7orWDXeDgD
IpQNQT0QsaovMFvyGXSjdFOarqWrDcb55TEw6FdHrLdIjpwJSpbGOhNKFUaHlzm3
MDbmjLybkYDnQ6ulM4KmUbChXoJdiynEdJaYOFLwRAuicX+3r33x28G28NwI9w84
cw5zFp/JY0G31D4Ls9ksxKTv2Bx4ceV+lYkNh/ce2dN9vdMkJUtvwmupzATccKGu
i78irxPv/QFJ3oIxMnre3b4xDM8SlMxiC00m5I9uQh+XSY/WBx3zKg9B0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0Zzpcw+csOw5bcNLMMTuIIt98jMB8GA1UdIwQY
MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt
M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1
LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAga3jYhV2
mfiNA1YVzJbmuLpPbIMJ3yI1LF/yvYDQ61ql16rD8xj8pYL60els1PsdNWtmm+MT
H7pAGLF1c+IuGY3B7vCTJj133ICr9q1xX1w1nahPmdpiSJMWlhWwR2VFAyWBm3Uj
XTOdH08HuWGcO7QRzNciUa+NqwY+xBwreDnXcI3eRlKnUOupL+uBtXG9za4GHR70
hlH9bgvGGHRS71ckD1b/blCEa3lxUMvaUVcndryslBJnZ7u4ZZmjIHL2nO9CNrTI
iQDKp3yzA08zFLs3CZ1z5xjDx31l5l8VcdJ1g4ezuPELhjHx7+GCToiGG9god1ZH
vpcgQ+EHjMOFZA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:32 2025 by rpki-client