Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: KZX0mL9LL6eCqPkmNuq0A5W9BdUe/QKytkTXkHxVczs=
Subject key identifier: 63:07:EC:76:AE:B8:0D:5A:7F:E6:3F:65:E6:04:6B:9B:30:5B:CA:5A
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019A00A2D97A9E0CA0223574D4E5BDB09DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 08:01:03 +0000
Manifest this update: Mon 20 Oct 2025 08:01:03 +0000
Manifest next update: Tue 21 Oct 2025 08:01:03 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: EUSuf0vnqmvu7QrAYIICPiu0dk7qsa+CtCzNXEdsilQ=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:d9:7a:9e:0c:a0:22:35:74:d4:e5:bd:b0:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Oct 20 08:01:03 2025 GMT
Not After : Oct 21 08:01:03 2025 GMT
Subject: CN=6307ec76aeb80d5a7fe63f65e6046b9b305bca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:06:ad:2d:bb:16:aa:5e:a6:e9:15:26:76:
a0:c6:c1:d5:42:57:d9:64:44:c7:1d:07:50:d0:a3:
9c:45:b5:57:03:66:bb:ac:d1:33:c7:b0:ac:86:19:
fc:0b:39:e5:07:73:9f:a3:0a:11:2f:1d:65:74:5e:
8c:c3:87:4c:23:79:f3:23:93:18:a5:86:df:db:e5:
cb:35:1e:f0:37:4c:61:dd:89:e8:0f:e6:be:22:fd:
d5:45:7c:78:f0:a8:e9:33:1c:6d:78:a2:2f:c5:a5:
a9:c0:53:82:c6:bc:d3:00:ae:68:90:c3:55:be:ed:
9d:48:c4:c8:f4:65:83:64:71:b9:a5:45:e7:f3:6a:
f9:73:4c:b5:81:36:c0:ac:d0:88:12:19:53:a1:4c:
d1:23:b3:3f:25:8e:95:3c:1e:ba:9d:6a:a8:c0:4f:
a0:a2:29:58:07:f2:35:82:c4:fb:a0:8e:c2:6a:a6:
7f:62:c8:5a:f0:ed:3d:69:9d:35:0f:98:ca:32:0e:
dd:92:17:d9:e2:2d:2d:bd:0b:64:91:40:94:0d:bf:
cc:40:3d:5f:68:d6:1b:91:fa:91:0f:00:2c:a1:88:
d6:83:96:55:c6:88:74:f4:d6:27:c1:9f:59:3e:ec:
69:08:6b:d1:09:e3:5b:39:3d:48:2a:b4:9b:fd:cf:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:EC:76:AE:B8:0D:5A:7F:E6:3F:65:E6:04:6B:9B:30:5B:CA:5A
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f5:19:de:e9:6c:52:ad:55:9d:13:92:a0:31:ee:4a:78:98:
8e:e8:fd:64:9e:2a:87:a8:45:db:b6:d1:9f:36:1c:ac:05:72:
27:30:ca:b5:68:4d:51:82:a4:f2:f5:fc:3f:d0:97:0a:e4:6f:
9d:03:fe:c6:b4:37:a9:9f:e5:ed:49:74:6b:31:a9:8d:1e:11:
65:ca:ff:11:d6:dc:1b:a6:cd:b8:9f:36:9c:c7:30:65:20:8b:
9e:33:e0:3e:2b:26:1a:17:fc:be:01:ae:ca:a8:f0:b0:f9:84:
6c:44:56:60:45:ae:e7:8b:98:7e:4f:88:af:41:35:3c:3e:71:
97:ca:ab:60:16:2d:56:88:45:32:67:55:cb:86:0b:12:93:dc:
5b:3f:ca:6b:2d:4e:3e:0d:9c:9b:da:b2:41:12:6b:76:8a:ce:
98:b7:ff:24:24:67:e6:61:e8:c5:f8:2c:c6:83:78:10:e1:c9:
26:49:4c:47:ae:16:54:a4:22:b9:a1:fa:41:9d:4a:2d:99:15:
1c:7e:5f:62:93:d1:d9:39:23:ef:ce:a9:99:97:16:f1:41:97:
b5:f5:e2:31:54:7b:ad:45:8f:47:c9:a6:e8:19:89:83:91:fd:
a6:1e:e4:08:3a:18:1a:c8:13:19:7a:3b:96:82:b3:e7:bb:94:
ae:e8:35:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAotl6ngygIjV01OW9sJ25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYTMyZWUwMTI2NmUwMThkMjM2NWMzYmJhMTc3MmY0MjQx
NzlhYzIwHhcNMjUxMDIwMDgwMTAzWhcNMjUxMDIxMDgwMTAzWjAzMTEwLwYDVQQD
Eyg2MzA3ZWM3NmFlYjgwZDVhN2ZlNjNmNjVlNjA0NmI5YjMwNWJjYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwwGrS27FqpepukVJnagxsHVQlfZ
ZETHHQdQ0KOcRbVXA2a7rNEzx7Cshhn8CznlB3OfowoRLx1ldF6Mw4dMI3nzI5MY
pYbf2+XLNR7wN0xh3YnoD+a+Iv3VRXx48KjpMxxteKIvxaWpwFOCxrzTAK5okMNV
vu2dSMTI9GWDZHG5pUXn82r5c0y1gTbArNCIEhlToUzRI7M/JY6VPB66nWqowE+g
oilYB/I1gsT7oI7CaqZ/Ysha8O09aZ01D5jKMg7dkhfZ4i0tvQtkkUCUDb/MQD1f
aNYbkfqRDwAsoYjWg5ZVxoh09NYnwZ9ZPuxpCGvRCeNbOT1IKrSb/c8aaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMH7HauuA1af+Y/ZeYEa5swW8paMB8GA1UdIwQY
MBaAFDqjLuASZuAY0jZcO7oXcvQkF5rCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTIt
OTQ5ZGJlOWI1N2ZlLzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTItOTQ5ZGJlOWI1N2Zl
LzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/UZ3uls
Uq1VnROSoDHuSniYjuj9ZJ4qh6hF27bRnzYcrAVyJzDKtWhNUYKk8vX8P9CXCuRv
nQP+xrQ3qZ/l7Ul0azGpjR4RZcr/EdbcG6bNuJ82nMcwZSCLnjPgPismGhf8vgGu
yqjwsPmEbERWYEWu54uYfk+Ir0E1PD5xl8qrYBYtVohFMmdVy4YLEpPcWz/Kay1O
Pg2cm9qyQRJrdorOmLf/JCRn5mHoxfgsxoN4EOHJJklMR64WVKQiuaH6QZ1KLZkV
HH5fYpPR2Tkj786pmZcW8UGXtfXiMVR7rUWPR8mm6BmJg5H9ph7kCDoYGsgTGXo7
loKz57uUrug1xg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:07:28 2025 by rpki-client