Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
File: OOf0e7m5Flflcmv8st74qtlz4mg.mft (raw, json)
Hash identifier: 4L5g81a5GsA343QJUYie40GCwkKgUhcsrs/vwrPakB0=
Subject key identifier: EB:77:53:36:8D:4E:0B:C1:93:C7:81:3E:5B:AF:98:CE:ED:3E:6F:41
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 0199FC8FBD047C227E05C918EB53A46E2CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: Ao4f98uIFcgkhdxyPOpQgAuwN9w.roa (hash: ttNIa0Xruypw+Nr5sYx69ADzUxbcLDOTo777VDuXgok=)
2: OOf0e7m5Flflcmv8st74qtlz4mg.crl (hash: G7Au8mc2JD8hjnd5UP2NBeR0wfURBdm+BceptRPjjkc=)
3: bf5JniBkyKbSSiSrUK6PpsjkA_o.roa (hash: G/EVvuIiKK3u39WnHajT6FKjkBStN9/ciaxEIQanbJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bd:04:7c:22:7e:05:c9:18:eb:53:a4:6e:2c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=eb7753368d4e0bc193c7813e5baf98ceed3e6f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:95:4a:2a:f4:fe:9f:2b:8c:06:a1:9f:3a:
ac:9c:d2:f4:81:4e:ba:74:4c:a3:82:e7:7e:35:fa:
ab:cf:20:06:e6:b4:69:53:b3:63:aa:38:7f:49:7b:
8e:c9:44:b7:9c:e0:c4:e1:ce:9e:4a:b4:cf:8d:18:
d6:c3:b7:f6:a7:5c:36:70:d5:64:57:82:50:a6:94:
ec:da:9b:d5:40:87:9c:6f:ad:4a:34:83:79:65:b4:
ac:35:54:6f:b0:8d:84:ce:0c:88:93:07:8a:d3:e3:
21:de:a3:98:00:63:46:8f:7f:f8:a2:ff:86:56:0f:
59:26:db:aa:46:d0:28:84:76:2a:f4:56:b9:27:9c:
c4:60:fe:6f:00:b4:6a:98:4d:4b:2d:b8:48:7e:c4:
e8:dc:4b:8e:c2:6b:1f:01:eb:7b:19:9e:03:f9:54:
10:da:7d:b5:c0:48:f0:42:5e:b7:d6:56:33:cb:2f:
d8:f7:70:3e:7a:95:d3:13:69:5f:10:1b:a1:7c:8d:
c6:45:1a:85:52:a5:36:3a:e5:94:36:a3:3c:9d:e1:
3f:2f:41:5a:2c:51:37:38:94:30:2d:34:50:8c:df:
6e:17:e2:13:40:66:68:cf:ff:99:52:d1:26:3f:f2:
21:00:a2:22:30:48:ca:ea:35:9a:eb:bc:6a:d6:a6:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:53:36:8D:4E:0B:C1:93:C7:81:3E:5B:AF:98:CE:ED:3E:6F:41
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bc:f0:e2:35:28:82:41:a8:97:6f:01:c3:bf:4e:88:88:b8:
aa:09:c5:a0:9f:3b:bd:e8:08:95:3b:9d:c2:df:3e:47:b7:ad:
a6:c9:1f:ec:fe:9d:99:2d:f8:a0:14:5e:83:d0:cb:fc:aa:96:
2d:e7:f9:1b:e9:e0:4d:38:77:1a:67:e8:09:e5:12:b9:fe:46:
2a:0d:97:e9:ae:df:31:d7:3f:6f:c5:af:9f:e8:7b:2e:c9:d4:
19:fa:c5:9a:50:cd:da:2b:27:5b:3b:e6:fa:ca:95:fc:e8:64:
cc:96:0b:58:bd:3e:67:08:3b:31:91:80:c3:50:24:88:40:e5:
a0:0f:f3:0b:23:b0:ca:32:9b:66:cd:e6:2d:4b:13:11:73:a1:
05:9d:1c:b3:4a:7c:58:52:0d:56:ee:5c:b2:27:63:59:49:f5:
ba:d1:cb:e9:3d:0d:9b:91:45:d7:1b:b7:d7:87:00:15:1d:d1:
70:65:05:44:6a:d0:fa:56:20:cd:25:c3:25:28:e5:1a:8c:f4:
7e:ab:fb:03:5a:61:77:c3:90:82:4e:4e:90:98:b9:5c:59:49:
6f:51:0e:6c:e2:09:52:37:b6:49:a9:28:43:b3:6d:ba:5f:8e:
2d:11:0e:3e:40:c1:5f:66:90:6e:6a:6c:93:ca:67:ba:47:d8:
ec:b8:78:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j70EfCJ+BckY61OkbiztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjUxMDE5MTMwMTQyWhcNMjUxMDIwMTMwMTQyWjAzMTEwLwYDVQQD
EyhlYjc3NTMzNjhkNGUwYmMxOTNjNzgxM2U1YmFmOThjZWVkM2U2ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE+VSir0/p8rjAahnzqsnNL0gU66
dEyjgud+NfqrzyAG5rRpU7Njqjh/SXuOyUS3nODE4c6eSrTPjRjWw7f2p1w2cNVk
V4JQppTs2pvVQIecb61KNIN5ZbSsNVRvsI2EzgyIkweK0+Mh3qOYAGNGj3/4ov+G
Vg9ZJtuqRtAohHYq9Fa5J5zEYP5vALRqmE1LLbhIfsTo3EuOwmsfAet7GZ4D+VQQ
2n21wEjwQl631lYzyy/Y93A+epXTE2lfEBuhfI3GRRqFUqU2OuWUNqM8neE/L0Fa
LFE3OJQwLTRQjN9uF+ITQGZoz/+ZUtEmP/IhAKIiMEjK6jWa67xq1qbYYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt3UzaNTgvBk8eBPluvmM7tPm9BMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrzw4jUo
gkGol28Bw79OiIi4qgnFoJ87vegIlTudwt8+R7etpskf7P6dmS34oBReg9DL/KqW
Lef5G+ngTTh3GmfoCeUSuf5GKg2X6a7fMdc/b8Wvn+h7LsnUGfrFmlDN2isnWzvm
+sqV/OhkzJYLWL0+Zwg7MZGAw1AkiEDloA/zCyOwyjKbZs3mLUsTEXOhBZ0cs0p8
WFINVu5csidjWUn1utHL6T0Nm5FF1xu314cAFR3RcGUFRGrQ+lYgzSXDJSjlGoz0
fqv7A1phd8OQgk5OkJi5XFlJb1EObOIJUje2SakoQ7Ntul+OLREOPkDBX2aQbmps
k8pnukfY7Lh4pg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:46 2025 by rpki-client