Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: p9o8DO57kGHCtAk78WcS2NJNh3139V6IAQKfYO9rp5k=
Subject key identifier: EF:C3:2D:9B:A2:AB:7E:C1:C9:29:C1:49:52:2A:9A:AA:73:47:74:72
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 0199FB462E606FCCF2EC6BEAD3BC890FFCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:44 +0000
Manifest this update: Sun 19 Oct 2025 07:01:44 +0000
Manifest next update: Mon 20 Oct 2025 07:01:44 +0000
Files and hashes: 1: O3UwipOzhbcra36OR7wqsPRc0eI.roa (hash: r6js7pxWhUJ5O0hB/bSR9JVoNUKTp5yLnXbbvCl45RM=)
2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: x233OY+/bZpMJMGFfeMEg65Y2l1PrLXjRue1F6FNrE0=)
3: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:2e:60:6f:cc:f2:ec:6b:ea:d3:bc:89:0f:fc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Oct 19 07:01:44 2025 GMT
Not After : Oct 20 07:01:44 2025 GMT
Subject: CN=efc32d9ba2ab7ec1c929c149522a9aaa73477472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:03:97:ed:2a:52:8f:24:cf:98:70:5f:d2:
5e:d7:c4:4a:78:fa:c1:7c:6a:10:ff:67:94:85:c8:
32:9a:3e:b4:ae:6c:ac:d2:5a:6f:e7:62:75:d8:87:
8e:2e:b6:b7:8d:cd:d1:3b:74:12:5f:c5:b8:17:98:
33:5d:83:95:af:43:bc:b6:63:47:c3:97:13:37:fc:
e7:1e:9f:ef:10:aa:56:4b:7c:0f:fb:b9:c9:01:5a:
e4:ae:89:56:06:e6:a9:c9:2f:96:22:bb:40:f3:6a:
91:39:b3:56:fb:4a:49:a1:b3:c7:6e:98:72:cb:ba:
d8:23:01:a1:5d:93:be:e6:44:67:d7:c4:a9:51:d0:
ab:c3:5f:e7:e4:04:ad:44:a1:42:a3:c8:a4:56:df:
4c:21:3b:cd:8a:14:60:ba:82:a5:c3:14:61:73:bd:
bb:4a:2f:dd:08:88:c0:da:14:28:6e:09:7a:05:79:
1b:16:5f:d1:98:8f:99:57:9e:b7:8e:dc:95:88:4e:
10:ad:71:c7:e2:6d:1e:6c:ef:4c:66:cf:54:ca:de:
15:2c:68:15:e5:60:c3:2f:b4:10:18:1d:77:41:62:
62:30:55:ba:c1:10:84:e3:dc:32:f8:09:82:64:30:
d3:31:ed:db:aa:b6:d9:5e:09:80:88:0b:ec:56:f2:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:2D:9B:A2:AB:7E:C1:C9:29:C1:49:52:2A:9A:AA:73:47:74:72
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7f:f5:ea:d5:ca:6c:fa:69:03:c3:48:90:47:0e:0c:81:24:
50:17:f6:cd:01:a0:43:84:55:b2:d2:ed:99:a8:31:84:50:3b:
3b:0c:b2:2d:2d:91:d8:36:92:d3:c5:e8:f5:e5:4b:3b:96:79:
e0:e1:bd:12:0b:67:fa:70:cf:11:0f:aa:85:17:2e:1f:94:60:
44:31:4a:92:00:b6:16:60:fc:ca:c3:7a:1e:8b:5b:55:70:0e:
47:cc:af:e2:68:f3:50:b9:01:b0:5e:7a:7b:26:38:93:98:aa:
02:d9:56:50:a5:64:5a:e2:27:e0:f8:e7:51:3a:99:01:40:20:
a0:e0:2c:6f:28:9c:b3:e7:ab:8d:50:81:11:cd:fc:a1:68:81:
0a:51:a0:b4:46:5a:b7:60:b6:43:2b:f4:07:f7:d1:b9:5b:62:
44:fc:90:db:c4:bd:94:71:c5:b9:07:b5:12:cb:87:2a:6e:48:
37:cf:46:f4:51:50:74:43:a1:58:ef:92:00:af:0c:04:e8:80:
ad:aa:27:ad:3f:3e:e5:b9:29:58:f8:c5:5d:f0:e7:3b:73:a4:
31:38:85:24:15:68:8a:b4:93:e6:eb:e3:72:db:b8:95:9d:d4:
ee:f4:91:33:82:69:ae:d8:0e:75:07:b5:89:bd:d8:cb:13:36:
37:9e:c1:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Ri5gb8zy7Gvq07yJD/zfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTIwNmFjMDhkODQwYzI4YmY0YWM1Njg5OWYyYTI4Zjhm
ZGNjYzUwHhcNMjUxMDE5MDcwMTQ0WhcNMjUxMDIwMDcwMTQ0WjAzMTEwLwYDVQQD
EyhlZmMzMmQ5YmEyYWI3ZWMxYzkyOWMxNDk1MjJhOWFhYTczNDc3NDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1okDl+0qUo8kz5hwX9Je18RKePrB
fGoQ/2eUhcgymj60rmys0lpv52J12IeOLra3jc3RO3QSX8W4F5gzXYOVr0O8tmNH
w5cTN/znHp/vEKpWS3wP+7nJAVrkrolWBuapyS+WIrtA82qRObNW+0pJobPHbphy
y7rYIwGhXZO+5kRn18SpUdCrw1/n5AStRKFCo8ikVt9MITvNihRguoKlwxRhc727
Si/dCIjA2hQobgl6BXkbFl/RmI+ZV563jtyViE4QrXHH4m0ebO9MZs9Uyt4VLGgV
5WDDL7QQGB13QWJiMFW6wRCE49wy+AmCZDDTMe3bqrbZXgmAiAvsVvL0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/DLZuiq37BySnBSVIqmqpzR3RyMB8GA1UdIwQY
MBaAFDhSBqwI2EDCi/SsVomfKij4/czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMt
ZTFlYjc5ODk5MjQyLzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMtZTFlYjc5ODk5MjQy
LzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3/16tXK
bPppA8NIkEcODIEkUBf2zQGgQ4RVstLtmagxhFA7OwyyLS2R2DaS08Xo9eVLO5Z5
4OG9Egtn+nDPEQ+qhRcuH5RgRDFKkgC2FmD8ysN6HotbVXAOR8yv4mjzULkBsF56
eyY4k5iqAtlWUKVkWuIn4PjnUTqZAUAgoOAsbyics+erjVCBEc38oWiBClGgtEZa
t2C2Qyv0B/fRuVtiRPyQ28S9lHHFuQe1EsuHKm5IN89G9FFQdEOhWO+SAK8MBOiA
raonrT8+5bkpWPjFXfDnO3OkMTiFJBVoirST5uvjctu4lZ3U7vSRM4JprtgOdQe1
ib3YyxM2N57BVA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:47 2025 by rpki-client