
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: PhBzG7dmi0h/IIrsPQpmqmIpv4YpOHrU1hacDWyCQ58=
Subject key identifier: C6:6A:E6:F6:C7:AA:6B:F2:65:F6:7B:90:CF:B8:F3:7B:39:5C:EB:D3
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 0199FE7E053E64D18915B55FAD7D1A4F30CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: 06fKvJ6DXtLQkPRF_5x6h3y4T5U.roa (hash: pwXaDGNXY2yyDJWetIQvjmX4OTShxo8fPOC9bn7nYwE=)
2: GAcb3_GTi9es4ti94Ex9da8Yuuo.roa (hash: hXt1K6MNNmm3FVbMZur0tZVjSZe1csXYHc6pvZG31yI=)
3: IPfQIXhx-EVpYevUCH6nRlI1vEk.roa (hash: aoDfqoJzdh17Itb5jDuQwg4ZtT6PxaA9lD3xjUMRLF4=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: dRcHBiaiL8SytyDjgA2sucNjWZlOrNe7SM9AU5CaBUI=)
5: S7F8i1yEfNMFg3wpeOW0-FZBtwg.roa (hash: Rx3B3lYVZPumB8Nlts1azVOM9+RgsZGpcLJHsf7VfhM=)
6: nd6lHNAwUs4ZI74-h5aLN2zFa-w.roa (hash: X+qt5MDK/JQj57z8c3vd0NZATrYmJ74WqiXy7QQvbTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:05:3e:64:d1:89:15:b5:5f:ad:7d:1a:4f:30:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=c66ae6f6c7aa6bf265f67b90cfb8f37b395cebd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:c3:1d:64:ba:42:0f:56:93:e6:ce:c7:a9:
b1:b7:cd:ac:7f:01:57:cf:ff:58:be:51:6e:b0:1d:
f1:b9:dc:ec:24:b5:f6:7d:0d:9a:e3:dc:28:3f:23:
54:5d:e8:3b:0b:6e:a2:ab:40:42:04:d0:79:8e:13:
a4:69:c4:97:5f:95:38:6b:95:04:df:ce:b3:18:e6:
45:42:04:7c:04:7b:30:bb:da:89:8d:af:8e:f4:3f:
8f:06:72:70:f3:bb:a9:bf:4d:28:e8:e6:9d:09:02:
73:fc:a8:74:4e:e3:1e:98:c3:49:33:f2:05:2e:44:
05:5b:b0:d3:c1:69:3a:9d:76:11:e2:61:0e:4e:dd:
e0:44:13:1a:ae:f8:bd:1f:53:0e:d5:37:e8:ef:ac:
89:2b:cd:1b:70:07:e1:a0:c5:43:7e:e7:5a:3d:2d:
e7:04:8f:31:39:2f:2f:ba:2d:bc:2e:3d:e1:41:ae:
79:09:29:c7:82:53:10:59:9e:fe:5a:e8:2c:69:50:
ed:b2:fc:9a:59:52:d2:53:61:fe:b1:7b:46:75:f8:
1a:fe:21:cf:74:02:de:f0:5f:de:85:fc:b2:4d:81:
10:2b:8d:1c:34:49:40:af:ca:ea:b7:ef:4c:9d:46:
4f:bb:58:70:11:d3:b1:f8:81:62:fb:0b:0b:2e:91:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6A:E6:F6:C7:AA:6B:F2:65:F6:7B:90:CF:B8:F3:7B:39:5C:EB:D3
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c3:d4:44:67:ef:de:c6:ba:92:b6:1f:7c:64:62:10:63:25:
15:4d:e0:c3:14:63:36:2e:1d:3a:68:bd:21:9e:2b:ef:3f:c5:
5a:92:79:81:16:75:84:6c:16:79:3b:f3:43:28:88:c1:89:88:
41:15:e9:e7:41:b5:fa:16:ce:5e:ed:15:be:08:66:d6:fc:5e:
78:ab:3c:3b:c2:8f:9c:f9:fa:ad:90:46:93:2d:34:79:1e:00:
d9:86:55:b2:ee:29:b4:77:0a:17:7f:8c:d5:0c:ca:40:d3:29:
c0:bd:ef:92:5b:ae:86:cf:c9:c3:da:dc:c5:90:35:aa:68:79:
37:9b:7f:f6:6d:a8:02:d8:bc:d7:8e:24:29:82:d2:10:b6:06:
e1:e4:91:31:21:57:d8:4e:65:a4:96:f1:fb:8d:d7:2b:69:29:
d0:9e:66:ba:a6:75:59:24:fd:8c:87:aa:79:e4:2f:1d:e3:b3:
78:ea:1a:a9:1a:86:ff:1d:71:1f:7e:d4:f3:74:ed:6d:97:0d:
8c:4f:b2:5b:ee:a5:15:82:cd:d2:16:bc:4a:24:70:46:42:e5:
bb:28:fe:20:3a:60:70:7e:5d:c9:75:70:8b:1a:f8:88:45:cb:
6b:14:e3:d8:b0:59:5e:d3:ea:c4:6e:57:be:c1:04:d4:2f:c8:
0d:89:b3:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fgU+ZNGJFbVfrX0aTzDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjUxMDE5MjIwMTM1WhcNMjUxMDIwMjIwMTM1WjAzMTEwLwYDVQQD
EyhjNjZhZTZmNmM3YWE2YmYyNjVmNjdiOTBjZmI4ZjM3YjM5NWNlYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1evDHWS6Qg9Wk+bOx6mxt82sfwFX
z/9YvlFusB3xudzsJLX2fQ2a49woPyNUXeg7C26iq0BCBNB5jhOkacSXX5U4a5UE
386zGOZFQgR8BHswu9qJja+O9D+PBnJw87upv00o6OadCQJz/Kh0TuMemMNJM/IF
LkQFW7DTwWk6nXYR4mEOTt3gRBMarvi9H1MO1Tfo76yJK80bcAfhoMVDfudaPS3n
BI8xOS8vui28Lj3hQa55CSnHglMQWZ7+WugsaVDtsvyaWVLSU2H+sXtGdfga/iHP
dALe8F/ehfyyTYEQK40cNElAr8rqt+9MnUZPu1hwEdOx+IFi+wsLLpG3iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZq5vbHqmvyZfZ7kM+483s5XOvTMB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8PURGfv
3sa6krYffGRiEGMlFU3gwxRjNi4dOmi9IZ4r7z/FWpJ5gRZ1hGwWeTvzQyiIwYmI
QRXp50G1+hbOXu0Vvghm1vxeeKs8O8KPnPn6rZBGky00eR4A2YZVsu4ptHcKF3+M
1QzKQNMpwL3vkluuhs/Jw9rcxZA1qmh5N5t/9m2oAti8144kKYLSELYG4eSRMSFX
2E5lpJbx+43XK2kp0J5muqZ1WST9jIeqeeQvHeOzeOoaqRqG/x1xH37U83TtbZcN
jE+yW+6lFYLN0ha8SiRwRkLluyj+IDpgcH5dyXVwixr4iEXLaxTj2LBZXtPqxG5X
vsEE1C/IDYmzQQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:32:34 2025 by rpki-client