
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File: OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier: wTsfkfmWYjsWvdVGaY3UlGSeOrzeSq3nNSUGDO6Ad6U=
Subject key identifier: 8D:7C:C2:81:2F:2E:DC:80:5E:B3:00:93:81:ED:AC:57:E5:4E:62:FF
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer: /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial: 0199FC2198AFAB25A531F110B151033F0ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number: 0332
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: 8KumveroXX2bDx0ea6N72ugK8WCdbfrjjR05rXZxaXc=)
2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:98:af:ab:25:a5:31:f1:10:b1:51:03:3f:0a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=8d7cc2812f2edc805eb3009381edac57e54e62ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:a0:f4:14:4e:8e:6e:13:dc:98:d0:85:c2:
a5:16:00:78:e6:c7:c0:ee:97:34:b0:79:0c:a1:15:
d5:ea:bb:13:f5:43:a1:41:2a:dc:b1:44:5b:98:61:
65:fd:81:d1:cc:1a:cc:ca:61:ad:6f:96:21:eb:49:
a8:53:6b:13:a7:2c:f3:65:35:91:57:e8:3f:ef:f8:
bd:26:0e:79:a6:b8:dc:d1:61:79:5e:08:71:79:65:
c1:70:42:47:70:88:28:92:da:81:fc:64:56:60:6f:
67:ed:ee:6b:42:5b:a4:1a:4e:76:04:d7:88:75:2d:
76:44:d5:17:a4:8b:e2:01:aa:fd:c3:81:1b:80:16:
98:e6:68:cb:12:3a:a8:ba:32:78:92:20:0f:3f:02:
dc:75:c9:84:39:a3:41:f8:23:47:7d:d5:14:8c:ce:
f6:f6:d5:b8:6e:46:2c:95:1f:e8:a0:45:5b:a9:77:
3e:66:e6:86:5d:c3:e1:8b:b0:88:4b:8b:ef:58:83:
aa:7e:77:3e:06:c5:d5:99:18:14:1c:e0:7b:e3:68:
2c:9e:8b:e3:8c:5d:71:93:0e:87:8d:aa:be:19:4e:
11:be:a2:b3:84:22:58:b2:b2:40:1a:50:e8:e7:68:
ff:ae:55:7c:d7:c6:bb:6d:89:c2:3b:30:eb:20:f3:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7C:C2:81:2F:2E:DC:80:5E:B3:00:93:81:ED:AC:57:E5:4E:62:FF
X509v3 Authority Key Identifier:
keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7c:09:75:1e:f9:92:97:a8:3b:8b:21:b2:c1:26:2b:e0:90:
fb:f5:36:20:49:36:2e:8a:84:f8:99:3a:66:69:53:33:d3:a2:
8c:79:c8:eb:e6:07:01:70:62:e1:84:0e:6f:4f:39:36:f2:ed:
f6:f3:14:b6:cc:c7:c2:5e:ca:d0:70:ad:9e:8f:dd:ff:cf:91:
8b:64:f2:c9:1b:36:77:73:d5:29:11:54:90:e9:a6:91:72:11:
fe:e3:0c:5c:8b:ff:a2:a6:dd:68:34:74:ba:6b:49:cf:29:3a:
b3:f3:1a:8e:f1:21:b2:93:45:e0:e4:65:79:db:aa:15:7c:01:
b7:ab:a0:36:ce:da:05:54:f9:cc:f0:26:6b:12:a9:53:71:ad:
b3:ca:bf:ee:da:c0:ac:79:16:84:ee:7b:15:65:6d:e8:12:85:
8e:bd:d2:43:f0:1d:06:23:01:db:45:86:67:c9:f0:eb:6e:eb:
48:b1:e0:17:15:60:76:13:1a:e4:c6:a5:93:c7:aa:01:71:8a:
30:8c:b2:de:37:9d:4d:b2:88:87:44:4c:20:bd:a8:08:06:ef:
6c:04:10:a9:cc:04:c4:c0:6c:53:b2:c6:4c:c9:92:f8:23:33:
fb:52:f5:20:c0:45:17:cc:20:7f:c7:12:f5:17:62:57:a8:70:
4c:5a:83:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZivqyWlMfEQsVEDPwq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTUwNWJmYzdmZDkxNzY4NmIxYzhiM2EyMThmNTUwOGY1
YTM3MGEwHhcNMjUxMDE5MTEwMTI0WhcNMjUxMDIwMTEwMTI0WjAzMTEwLwYDVQQD
Eyg4ZDdjYzI4MTJmMmVkYzgwNWViMzAwOTM4MWVkYWM1N2U1NGU2MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUGg9BROjm4T3JjQhcKlFgB45sfA
7pc0sHkMoRXV6rsT9UOhQSrcsURbmGFl/YHRzBrMymGtb5Yh60moU2sTpyzzZTWR
V+g/7/i9Jg55prjc0WF5XghxeWXBcEJHcIgoktqB/GRWYG9n7e5rQlukGk52BNeI
dS12RNUXpIviAar9w4EbgBaY5mjLEjqoujJ4kiAPPwLcdcmEOaNB+CNHfdUUjM72
9tW4bkYslR/ooEVbqXc+ZuaGXcPhi7CIS4vvWIOqfnc+BsXVmRgUHOB742gsnovj
jF1xkw6Hjaq+GU4RvqKzhCJYsrJAGlDo52j/rlV818a7bYnCOzDrIPPg8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI18woEvLtyAXrMAk4HtrFflTmL/MB8GA1UdIwQY
MBaAFDrlBb/H/ZF2hrHIs6IY9VCPWjcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUt
YTFjNzhhMGE2YmZkLzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUtYTFjNzhhMGE2YmZk
LzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnwJdR75
kpeoO4shssEmK+CQ+/U2IEk2LoqE+Jk6ZmlTM9OijHnI6+YHAXBi4YQOb085NvLt
9vMUtszHwl7K0HCtno/d/8+Ri2TyyRs2d3PVKRFUkOmmkXIR/uMMXIv/oqbdaDR0
umtJzyk6s/MajvEhspNF4ORleduqFXwBt6ugNs7aBVT5zPAmaxKpU3Gts8q/7trA
rHkWhO57FWVt6BKFjr3SQ/AdBiMB20WGZ8nw627rSLHgFxVgdhMa5Malk8eqAXGK
MIyy3jedTbKIh0RMIL2oCAbvbAQQqcwExMBsU7LGTMmS+CMz+1L1IMBFF8wgf8cS
9RdiV6hwTFqDVA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:40 2025 by rpki-client