Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json)
Hash identifier: 8Jrb6wVTk+dibFRJd1IfypIVuh6zL2U78QFHIYqWcmc=
Subject key identifier: 37:B4:A8:EC:AA:F3:4F:B7:63:D6:DF:D7:0B:F5:90:48:FD:EA:30:88
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 0199FC5902EDE875A4A670C849E675F53353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
Manifest number: 0D60
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: Mbpk8QVkIW5FKgYutE5nhEuorhg.roa (hash: XJAfJvP6njUJvUjL+QeRVdBXhasJwe6UWIW0OOiZ2es=)
2: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: Z3SQB2t179zwc6Aqrw+H9LyrZtoEU3fcvPNryzE7z1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:02:ed:e8:75:a4:a6:70:c8:49:e6:75:f5:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=37b4a8ecaaf34fb763d6dfd70bf59048fdea3088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:ab:e2:fa:02:96:91:7d:b7:36:3e:92:72:
7c:0a:d6:34:d3:b8:f9:eb:21:b8:9d:f2:7a:e7:6a:
ee:31:f2:47:bb:16:a8:63:8a:59:a3:87:41:7d:2c:
73:c6:56:eb:ef:ba:72:0c:e7:20:86:72:69:6c:23:
e8:ae:c3:93:7b:37:9c:84:90:37:2d:62:9b:29:0b:
df:37:f8:1e:ce:cb:c6:6b:1b:d3:50:20:7b:59:64:
9b:a8:51:3a:f8:53:1e:60:6d:53:c7:d4:30:7f:d1:
4a:3f:b7:d6:a2:6c:ab:66:3e:00:60:23:34:6f:68:
de:cc:43:31:90:7e:0f:0a:d4:3c:ee:74:e6:ba:c2:
e7:f2:56:7f:59:2f:e6:1a:cf:8e:35:83:50:92:9c:
70:50:29:13:25:58:37:ed:d4:12:9c:fc:65:6f:4f:
93:52:29:cf:c2:b9:d4:d6:fb:71:99:ae:22:ad:76:
6b:2c:91:bd:cf:6a:7d:1f:3e:10:3c:54:5d:60:dc:
3b:c6:dc:11:4e:e1:d4:96:f0:56:18:97:21:c9:ad:
d2:f9:a4:22:36:15:3b:2e:79:9c:40:97:6d:db:b9:
b5:fa:e8:14:dd:6e:92:97:42:fc:82:55:5d:8e:c1:
8b:e9:dd:e9:41:1e:45:d8:d1:73:7f:27:9e:d9:e1:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:A8:EC:AA:F3:4F:B7:63:D6:DF:D7:0B:F5:90:48:FD:EA:30:88
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:79:4c:22:e3:4b:d9:9c:39:77:8b:47:02:21:6d:a2:59:7e:
fb:08:16:15:ca:cb:c2:08:18:2f:40:9b:0e:c0:7e:6d:40:7b:
98:7b:24:76:11:c6:8e:43:4f:9a:d4:12:cd:b6:aa:0f:5c:fc:
e1:30:1a:51:cb:61:bf:7a:0e:26:04:c5:9f:16:b8:71:27:81:
5f:9e:42:eb:6d:91:de:37:e2:11:14:ea:ca:c5:f5:63:ea:c2:
1e:d5:79:90:a3:5a:a0:0d:d6:34:a4:ad:3c:86:92:d8:a1:31:
40:b6:c1:b4:fc:9e:5c:be:4c:d4:5b:c5:e7:cb:b3:ec:17:1a:
00:ab:48:bd:7e:0c:e7:08:78:56:69:7c:db:77:ff:54:54:72:
1b:f6:c2:c3:1b:9b:4e:ec:3c:8c:8a:f5:14:b1:f0:dd:a2:dc:
08:e3:18:a6:f2:b1:f6:2d:fb:b5:60:88:c4:70:d5:4d:94:c1:
d2:3a:0b:58:36:a1:4e:4f:e9:a3:3a:44:94:9d:34:d9:38:db:
ef:d8:47:b2:50:47:fe:b9:a6:19:33:73:5f:e0:22:ce:e5:9d:
95:ef:ee:d2:18:94:b1:4e:d6:0c:71:23:79:21:f8:62:ea:91:
8d:5b:e3:5d:a3:8d:28:55:ee:e3:05:2e:0a:de:4b:c4:f5:af:
5b:36:60:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQLt6HWkpnDISeZ19TNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODM3ZTQ4YWFmNTk4YmNhYjU0YTVmYzhhZTQzYjE3YmUy
NTQyMjkwHhcNMjUxMDE5MTIwMTU1WhcNMjUxMDIwMTIwMTU1WjAzMTEwLwYDVQQD
EygzN2I0YThlY2FhZjM0ZmI3NjNkNmRmZDcwYmY1OTA0OGZkZWEzMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5er4voClpF9tzY+knJ8CtY007j5
6yG4nfJ652ruMfJHuxaoY4pZo4dBfSxzxlbr77pyDOcghnJpbCPorsOTezechJA3
LWKbKQvfN/gezsvGaxvTUCB7WWSbqFE6+FMeYG1Tx9Qwf9FKP7fWomyrZj4AYCM0
b2jezEMxkH4PCtQ87nTmusLn8lZ/WS/mGs+ONYNQkpxwUCkTJVg37dQSnPxlb0+T
UinPwrnU1vtxma4irXZrLJG9z2p9Hz4QPFRdYNw7xtwRTuHUlvBWGJchya3S+aQi
NhU7LnmcQJdt27m1+ugU3W6Sl0L8glVdjsGL6d3pQR5F2NFzfyee2eH9IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe0qOyq80+3Y9bf1wv1kEj96jCIMB8GA1UdIwQY
MBaAFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgt
MzFlYTIwOTRiNTU3LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgtMzFlYTIwOTRiNTU3
LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnlMIuNL
2Zw5d4tHAiFtoll++wgWFcrLwggYL0CbDsB+bUB7mHskdhHGjkNPmtQSzbaqD1z8
4TAaUcthv3oOJgTFnxa4cSeBX55C622R3jfiERTqysX1Y+rCHtV5kKNaoA3WNKSt
PIaS2KExQLbBtPyeXL5M1FvF58uz7BcaAKtIvX4M5wh4Vml823f/VFRyG/bCwxub
Tuw8jIr1FLHw3aLcCOMYpvKx9i37tWCIxHDVTZTB0joLWDahTk/pozpElJ002Tjb
79hHslBH/rmmGTNzX+AizuWdle/u0hiUsU7WDHEjeSH4YuqRjVvjXaONKFXu4wUu
Ct5LxPWvWzZgDw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:48 2025 by rpki-client