Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: uXdPLpkzZz46N7uQm7XFnR3vgHFk3C1wqiExPWn3tGo=
Subject key identifier: 87:A5:2F:EE:5A:F3:03:FB:3A:21:D6:FA:CE:7D:52:6C:C3:BE:10:96
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 019A00352114ECCCC93C62753CBE5C9907CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 0BA4
Signing time: Mon 20 Oct 2025 06:01:13 +0000
Manifest this update: Mon 20 Oct 2025 06:01:13 +0000
Manifest next update: Tue 21 Oct 2025 06:01:13 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: oG5Cc51x9l2NsnMfK71nstLSrAuQohD6KHAOut2jAoI=)
2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:21:14:ec:cc:c9:3c:62:75:3c:be:5c:99:07:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Oct 20 06:01:13 2025 GMT
Not After : Oct 21 06:01:13 2025 GMT
Subject: CN=87a52fee5af303fb3a21d6face7d526cc3be1096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:0f:45:ad:20:f9:26:ad:79:bb:88:65:f5:
63:28:37:9e:be:73:f0:5b:bc:09:eb:e9:bd:6c:bf:
d7:e5:d3:c9:da:61:5e:75:fb:15:3a:b3:17:14:be:
64:e5:5b:ed:20:f9:61:9c:43:22:71:8a:72:5f:8c:
18:52:66:bd:45:e0:15:d7:38:01:bf:7a:7e:f1:69:
1a:4c:e3:b3:3b:f8:d7:9c:bd:70:f4:19:27:b5:a4:
58:eb:a5:04:a0:72:01:10:8d:e8:c1:dd:29:ea:1b:
62:d1:97:23:07:cb:85:5e:c2:0d:6f:53:c4:1e:56:
43:33:3c:cb:6b:bd:f2:51:d4:dc:5d:cf:2c:b0:30:
44:91:ef:7d:a3:76:5e:96:f8:1a:4d:c7:4c:94:1f:
8a:84:bd:4c:49:52:44:15:87:f6:c7:3f:2a:64:d9:
d3:b6:11:34:65:78:97:17:74:22:a5:df:39:ea:3a:
76:ac:47:70:5c:c5:5e:11:d3:ae:40:5e:05:c4:60:
40:40:b2:f7:58:99:7f:51:d5:50:36:28:bc:69:2f:
5d:4d:29:2f:d9:31:3a:17:33:0e:71:1d:55:ce:1c:
0d:43:06:f1:ff:74:45:4e:57:ea:cd:02:b5:25:f2:
a1:ba:5a:91:46:0f:5c:4b:4b:65:0d:e4:21:5e:93:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:2F:EE:5A:F3:03:FB:3A:21:D6:FA:CE:7D:52:6C:C3:BE:10:96
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3f:b5:b4:c1:08:96:d9:7e:54:73:a5:77:75:e4:15:21:ed:
fa:b6:84:c8:62:9d:53:8f:71:06:8f:53:d7:7c:03:d1:ba:65:
0c:ff:91:12:e3:83:88:82:02:bc:89:7b:3f:1c:6c:4e:5b:24:
31:0e:ad:93:83:d7:2f:21:3e:04:cd:6a:01:e1:3c:7f:a9:a4:
3a:2b:0e:71:42:90:9a:b6:c9:ed:7a:87:1b:7d:32:9e:a6:65:
e0:a9:8a:54:4c:b5:f3:e3:28:6e:f3:2b:ca:7a:17:34:70:84:
37:ad:45:2a:95:a0:9e:52:78:73:11:34:28:c1:17:b0:29:49:
9c:0e:4a:2e:96:bc:07:49:a5:64:0a:97:63:e0:6d:13:ee:36:
ef:11:c7:20:3c:0d:1d:3b:82:15:f0:c9:b7:d2:42:89:59:dd:
48:17:91:18:79:f5:df:ed:36:8b:a7:fb:30:16:78:1a:c5:51:
f4:f8:9a:6d:0f:75:8f:05:4a:5e:f9:4a:93:35:5a:50:36:9b:
9e:a5:a2:d2:08:85:17:fb:f8:37:1a:d6:d2:72:56:3c:ba:59:
8e:ba:9e:5b:ce:9c:aa:2b:15:ae:f9:74:e0:6e:c9:74:5b:2c:
c9:f9:21:b1:0c:3b:63:1a:0a:3e:a9:be:8b:30:c9:98:7a:b2:
fb:ed:17:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANSEU7MzJPGJ1PL5cmQfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjUxMDIwMDYwMTEzWhcNMjUxMDIxMDYwMTEzWjAzMTEwLwYDVQQD
Eyg4N2E1MmZlZTVhZjMwM2ZiM2EyMWQ2ZmFjZTdkNTI2Y2MzYmUxMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4APRa0g+SatebuIZfVjKDeevnPw
W7wJ6+m9bL/X5dPJ2mFedfsVOrMXFL5k5VvtIPlhnEMicYpyX4wYUma9ReAV1zgB
v3p+8WkaTOOzO/jXnL1w9BkntaRY66UEoHIBEI3owd0p6hti0ZcjB8uFXsINb1PE
HlZDMzzLa73yUdTcXc8ssDBEke99o3ZelvgaTcdMlB+KhL1MSVJEFYf2xz8qZNnT
thE0ZXiXF3Qipd856jp2rEdwXMVeEdOuQF4FxGBAQLL3WJl/UdVQNii8aS9dTSkv
2TE6FzMOcR1VzhwNQwbx/3RFTlfqzQK1JfKhulqRRg9cS0tlDeQhXpMIBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIelL+5a8wP7OiHW+s59UmzDvhCWMB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT+1tMEI
ltl+VHOld3XkFSHt+raEyGKdU49xBo9T13wD0bplDP+REuODiIICvIl7PxxsTlsk
MQ6tk4PXLyE+BM1qAeE8f6mkOisOcUKQmrbJ7XqHG30ynqZl4KmKVEy18+MobvMr
ynoXNHCEN61FKpWgnlJ4cxE0KMEXsClJnA5KLpa8B0mlZAqXY+BtE+427xHHIDwN
HTuCFfDJt9JCiVndSBeRGHn13+02i6f7MBZ4GsVR9PiabQ91jwVKXvlKkzVaUDab
nqWi0giFF/v4NxrW0nJWPLpZjrqeW86cqisVrvl04G7JdFssyfkhsQw7YxoKPqm+
izDJmHqy++0XVw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:29 2025 by rpki-client