
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File: ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier: usqXt03zEUPwDxP42woXbyki/1TsrFPp5bIN8DzAPRw=
Subject key identifier: A4:DF:ED:C3:4F:8C:CF:A5:AF:BD:C5:BB:28:F3:DB:DB:9A:B9:05:B8
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 0199FCC6059473FD01BA88B21FEE2395D5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number: 1684
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: 8XG55/6qnQZyyLT37eIWdjmLlQmZmkBM7aVuiFTK960=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:05:94:73:fd:01:ba:88:b2:1f:ee:23:95:d5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=a4dfedc34f8ccfa5afbdc5bb28f3dbdb9ab905b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:1c:7b:ca:d8:53:f9:5f:08:91:28:fd:ac:
18:79:d9:3f:a0:91:f7:0a:44:12:2a:59:6e:83:96:
33:a5:91:0d:dd:0a:d3:3a:1b:60:be:18:05:ff:2d:
dc:09:d8:fd:72:3a:46:13:1a:ed:2a:99:0e:70:36:
1d:ee:9a:95:da:5c:88:51:ea:b2:b9:3e:80:c1:94:
0f:8d:75:91:56:85:4f:08:54:b9:e8:87:eb:37:c4:
20:70:e9:6e:70:be:e7:57:33:8f:12:9a:53:be:52:
1d:cc:2c:b0:d7:c5:52:be:8b:79:4a:6d:03:37:17:
1e:ca:47:14:7e:99:b4:de:b8:34:b4:25:55:93:4a:
ae:ea:1a:23:88:46:34:0a:96:ba:b3:f9:ee:8f:33:
17:ca:8e:63:80:ca:b7:fe:d9:bf:77:fc:34:d6:75:
8d:94:9a:4b:db:f9:76:22:3a:e3:97:0b:f7:74:57:
af:b9:46:60:8c:b7:ed:8e:26:a5:a6:d7:4d:8f:f1:
7d:ac:ec:8b:73:db:22:a9:9f:86:db:ad:29:ce:28:
88:8d:b9:2a:4b:2a:36:60:74:bb:ac:13:fc:06:49:
53:0a:f3:9a:f9:4b:96:92:e4:49:09:17:a2:7e:57:
98:59:23:72:2c:eb:a4:85:43:92:c0:b6:ae:48:2b:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DF:ED:C3:4F:8C:CF:A5:AF:BD:C5:BB:28:F3:DB:DB:9A:B9:05:B8
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:54:13:12:eb:3c:87:43:27:0f:ca:3e:65:88:15:47:25:4a:
ee:5f:db:a0:1e:72:53:8a:48:db:d1:dc:c5:d7:ad:e3:9c:16:
02:95:14:e3:16:63:ed:a4:e6:4c:f3:0f:98:90:a9:8f:66:10:
83:2f:eb:f1:44:10:40:c0:3b:c5:25:09:b0:6c:23:0c:4b:11:
00:50:f2:1d:f9:b7:02:41:27:b9:2d:25:7d:76:c4:20:f6:5e:
05:4b:bb:5c:14:7d:52:75:94:96:5b:16:38:25:94:94:84:56:
cf:2a:d5:5e:36:3a:d6:8a:0c:e4:e5:ad:28:f8:af:12:a1:07:
f9:cb:c0:69:fe:86:f8:0e:9e:0b:87:49:9f:5d:42:48:e4:ec:
35:29:ca:e7:76:fe:76:7c:aa:ae:0a:b8:35:50:f6:66:fa:9d:
dc:d3:d5:8d:83:a0:94:df:06:3e:dc:70:5e:22:da:29:2e:6e:
bd:9b:76:38:a4:09:e5:0b:3d:0c:a0:32:f4:b1:ad:cb:0f:a3:
e5:c8:42:b5:ef:6f:40:39:c0:29:7d:e0:39:a1:5d:2e:6e:24:
37:8f:02:bd:09:46:44:58:c0:e6:ac:4b:d4:49:f0:57:71:7d:
dd:a9:78:aa:35:c6:fc:2c:3a:22:61:b7:6b:4b:7d:c8:3d:17:
3a:50:76:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xgWUc/0BuoiyH+4jldWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz
M2ZjMTIwHhcNMjUxMDE5MTQwMDU5WhcNMjUxMDIwMTQwMDU5WjAzMTEwLwYDVQQD
EyhhNGRmZWRjMzRmOGNjZmE1YWZiZGM1YmIyOGYzZGJkYjlhYjkwNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFgce8rYU/lfCJEo/awYedk/oJH3
CkQSKllug5YzpZEN3QrTOhtgvhgF/y3cCdj9cjpGExrtKpkOcDYd7pqV2lyIUeqy
uT6AwZQPjXWRVoVPCFS56IfrN8QgcOlucL7nVzOPEppTvlIdzCyw18VSvot5Sm0D
NxceykcUfpm03rg0tCVVk0qu6hojiEY0Cpa6s/nujzMXyo5jgMq3/tm/d/w01nWN
lJpL2/l2Ijrjlwv3dFevuUZgjLftjialptdNj/F9rOyLc9siqZ+G260pziiIjbkq
Syo2YHS7rBP8BklTCvOa+UuWkuRJCReifleYWSNyLOukhUOSwLauSCuJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTf7cNPjM+lr73Fuyjz29uauQW4MB8GA1UdIwQY
MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt
MTgxNDIyM2Q5MmNlLzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl
LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1QTEus8
h0MnD8o+ZYgVRyVK7l/boB5yU4pI29Hcxdet45wWApUU4xZj7aTmTPMPmJCpj2YQ
gy/r8UQQQMA7xSUJsGwjDEsRAFDyHfm3AkEnuS0lfXbEIPZeBUu7XBR9UnWUllsW
OCWUlIRWzyrVXjY61ooM5OWtKPivEqEH+cvAaf6G+A6eC4dJn11CSOTsNSnK53b+
dnyqrgq4NVD2Zvqd3NPVjYOglN8GPtxwXiLaKS5uvZt2OKQJ5Qs9DKAy9LGtyw+j
5chCte9vQDnAKX3gOaFdLm4kN48CvQlGRFjA5qxL1EnwV3F93al4qjXG/Cw6ImG3
a0t9yD0XOlB2ow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:13 2025 by rpki-client