Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: DATy3Etqwe8BHsFCsDCDXpkYAj3lwqTnX8zQOLabaVE=
Subject key identifier: 46:03:58:E4:9C:BC:7D:DA:FC:FA:24:43:F8:08:AA:7C:72:E8:DF:D2
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 0199FCFD561E8BAA6E3BD5ECF83A1A647609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 08F5
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: pZDCTrGrHNtubUPs3dUZz5ZzTPS32QuE+D3onPE1E8c=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:56:1e:8b:aa:6e:3b:d5:ec:f8:3a:1a:64:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=460358e49cbc7ddafcfa2443f808aa7c72e8dfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:c2:f4:ea:27:e6:44:8d:47:3a:d6:1b:5e:
45:17:fa:71:ec:c8:8d:85:99:53:92:5d:59:25:8d:
c4:9d:18:89:9d:f9:1f:96:36:4f:40:8e:a7:d3:1b:
a7:de:67:cc:e4:20:99:6d:63:a6:24:e6:fc:72:12:
80:a3:5f:e5:f2:1d:08:6d:24:a4:98:e1:60:13:d2:
6a:29:21:a2:9e:94:a9:16:a1:87:42:27:1e:6f:5b:
da:99:52:12:c7:35:30:bc:5c:4b:64:3d:40:e4:c5:
d6:71:6c:2f:40:24:17:2e:61:05:99:82:82:7c:80:
4a:03:03:ff:ac:c1:a0:db:c8:27:b7:d0:8b:ad:70:
ee:db:05:ea:4a:b9:11:fe:09:6c:52:93:a7:4d:41:
f8:98:a4:7a:83:28:1f:e7:d6:4c:78:f9:9a:e5:09:
02:e7:40:c1:0d:bd:a1:81:4b:2f:42:6d:5c:32:fe:
c2:c4:33:52:0f:9d:44:63:f1:64:c4:83:3b:27:a4:
46:c3:07:b7:e1:5a:44:6e:a1:29:4d:cb:da:2b:fc:
5c:54:6e:03:cb:07:57:db:60:66:7d:f6:9c:5b:cd:
dd:04:dd:99:04:6b:70:34:65:eb:f0:ff:4c:f7:eb:
38:27:76:68:b2:84:d2:30:91:57:7a:f4:4a:41:0f:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:58:E4:9C:BC:7D:DA:FC:FA:24:43:F8:08:AA:7C:72:E8:DF:D2
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7a:af:8c:d8:ba:ec:98:4c:09:c8:07:22:d3:aa:af:b3:80:
2d:e1:05:f6:b4:e5:5e:d4:ae:0a:70:93:82:91:6f:55:c6:b7:
9a:f6:72:21:d6:7d:8b:6e:26:47:22:e3:6c:2d:f5:8f:c7:29:
42:80:72:43:26:04:ee:ea:ec:30:49:f9:f6:fd:66:c9:1c:70:
21:a4:30:06:6f:37:70:c4:bc:71:1d:93:d6:5f:6a:08:77:68:
0b:d0:e9:bd:52:65:ba:34:3b:58:e3:c1:d7:cd:1f:61:3f:99:
db:56:8a:75:16:1d:8a:d7:6c:00:ec:df:98:67:9a:c4:51:5f:
23:8d:5b:c7:63:c2:f5:87:bd:4b:49:dc:68:53:42:ec:86:59:
a8:0a:67:cb:54:de:f5:82:1b:4a:81:06:1e:4b:9d:a4:82:da:
8c:03:22:a2:36:58:73:b9:00:e7:01:8b:97:c4:53:d1:f8:26:
47:b5:e4:0c:21:12:1c:80:72:5d:63:76:1b:31:e4:76:01:5a:
8e:aa:cf:06:bf:64:5b:2e:ad:07:f0:21:31:96:93:c2:91:03:
b2:23:16:a2:49:c6:23:1f:86:7d:19:92:00:f4:89:84:55:02:
89:8a:00:79:a7:08:56:20:75:76:41:f7:0d:c9:c3:11:8c:d2:
f8:0e:94:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VYei6puO9Xs+DoaZHYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODE2NGQ5OTYxYTE2ZDJlZmY3NzNmNTAyNzgyMWU5ZDJi
ZDM3NDAwHhcNMjUxMDE5MTUwMTI1WhcNMjUxMDIwMTUwMTI1WjAzMTEwLwYDVQQD
Eyg0NjAzNThlNDljYmM3ZGRhZmNmYTI0NDNmODA4YWE3YzcyZThkZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnHC9Oon5kSNRzrWG15FF/px7MiN
hZlTkl1ZJY3EnRiJnfkfljZPQI6n0xun3mfM5CCZbWOmJOb8chKAo1/l8h0IbSSk
mOFgE9JqKSGinpSpFqGHQiceb1vamVISxzUwvFxLZD1A5MXWcWwvQCQXLmEFmYKC
fIBKAwP/rMGg28gnt9CLrXDu2wXqSrkR/glsUpOnTUH4mKR6gygf59ZMePma5QkC
50DBDb2hgUsvQm1cMv7CxDNSD51EY/FkxIM7J6RGwwe34VpEbqEpTcvaK/xcVG4D
ywdX22BmffacW83dBN2ZBGtwNGXr8P9M9+s4J3ZosoTSMJFXevRKQQ8F3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYDWOScvH3a/PokQ/gIqnxy6N/SMB8GA1UdIwQY
MBaAFKGBZNmWGhbS7/dz9QJ4IenSvTdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUt
MTUyMzgwM2ZhZGFmLzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUtMTUyMzgwM2ZhZGFm
LzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3qvjNi6
7JhMCcgHItOqr7OALeEF9rTlXtSuCnCTgpFvVca3mvZyIdZ9i24mRyLjbC31j8cp
QoByQyYE7ursMEn59v1myRxwIaQwBm83cMS8cR2T1l9qCHdoC9DpvVJlujQ7WOPB
180fYT+Z21aKdRYditdsAOzfmGeaxFFfI41bx2PC9Ye9S0ncaFNC7IZZqApny1Te
9YIbSoEGHkudpILajAMiojZYc7kA5wGLl8RT0fgmR7XkDCESHIByXWN2GzHkdgFa
jqrPBr9kWy6tB/AhMZaTwpEDsiMWoknGIx+GfRmSAPSJhFUCiYoAeacIViB1dkH3
DcnDEYzS+A6UNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:33 2025 by rpki-client