Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
File: 0KOFQs_bHubgdermsQHnu1sUxDY.mft (raw, json)
Hash identifier: 0l5KvlkNysOhFOAXj7XesvpgivliN0AvzRrcYUdZFVA=
Subject key identifier: 79:94:1B:15:2F:9B:1F:4C:5F:76:9A:AB:7C:55:78:90:0D:99:06:53
Authority key identifier: D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
Certificate issuer: /CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Certificate serial: 0199FBEBA0E5F6F408892488767C84DF067A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
Manifest number: 137A
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: 0KOFQs_bHubgdermsQHnu1sUxDY.crl (hash: /eSreYlYS+LiGA728zP9EW9zzy5JmXlB72X0W/874Zo=)
2: KrQvju8wsP_1pgegWQDfP_dBbsE.roa (hash: 41ILiMyCbiBXLBStCWRCt8ZnN2evNZdt0aku7rFi6gM=)
3: MT4hr9PSkUajZkci1pWS9v2orok.roa (hash: qezGbt2cfl90iVziKgXNGmy2fO9q+dUTbPbEn9xA5FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a0:e5:f6:f4:08:89:24:88:76:7c:84:df:06:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a38542cfdb1ee6e075eae6b101e7bb5b14c436
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=79941b152f9b1f4c5f769aab7c5578900d990653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:d1:5c:97:74:d0:ae:dd:ce:60:3f:68:af:
0e:3d:7e:69:3f:67:3b:8b:48:e6:2c:81:f9:f4:c4:
26:0a:1b:59:db:81:5f:1f:62:71:a5:0c:3e:fd:e5:
a2:7e:0d:92:1f:4b:25:fc:f5:fe:05:f2:07:1d:83:
1e:6f:39:0b:a4:a0:2a:c1:82:66:76:ff:87:53:79:
2c:8d:16:49:56:1b:37:4d:b5:79:0e:b4:91:60:8e:
70:38:bd:a7:e0:23:c6:eb:94:e9:13:1b:2c:fd:03:
e5:f0:96:2f:55:f9:ec:7f:8c:55:e3:82:19:17:5b:
b7:77:55:e7:a9:7d:10:96:06:e6:99:d3:bb:ba:ae:
0c:45:74:89:61:a0:0a:bd:cf:b8:aa:5a:a7:e7:10:
bd:15:67:ee:e8:f0:f5:1b:ca:0c:ae:5e:7e:47:b0:
51:e0:2b:9c:0b:01:16:9e:14:a0:10:d4:99:b0:1a:
94:ab:7f:75:2e:67:c7:47:b6:98:0c:36:d7:2b:dc:
2d:83:05:a5:83:3a:0f:6f:51:43:22:d8:d8:cf:5b:
65:11:8e:5c:6b:a6:bf:00:00:58:3a:65:3a:cd:51:
2f:30:35:c6:5b:f4:cb:ef:3f:58:aa:ca:87:93:85:
93:38:5c:cb:09:24:fd:8b:cd:20:cc:43:f0:9c:de:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:94:1B:15:2F:9B:1F:4C:5F:76:9A:AB:7C:55:78:90:0D:99:06:53
X509v3 Authority Key Identifier:
keyid:D0:A3:85:42:CF:DB:1E:E6:E0:75:EA:E6:B1:01:E7:BB:5B:14:C4:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KOFQs_bHubgdermsQHnu1sUxDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3f04c9-e6e1-4506-b8fa-40d1911fa7f3/1/0KOFQs_bHubgdermsQHnu1sUxDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a4:d7:70:7d:72:ec:92:41:29:92:fb:bf:4c:c9:9f:88:1c:
88:47:76:15:25:ef:27:24:39:53:f5:f6:33:fe:d9:6b:f9:9f:
6d:54:1a:67:cc:e1:99:19:f5:21:55:93:8d:e9:2f:59:72:cf:
67:7b:90:84:0f:9f:16:6c:28:ec:8f:e0:36:69:22:f1:cd:f2:
e3:10:cd:56:b7:85:29:81:2b:6b:67:88:9e:40:ce:33:a3:d4:
50:8e:31:db:69:93:b1:c8:74:97:fe:aa:18:74:a0:b9:a5:71:
f2:3e:e5:dc:63:31:61:4c:a1:7e:90:6d:2f:84:bb:a6:89:57:
fb:29:3d:8e:27:37:66:6e:2d:ab:4f:52:72:8e:c8:55:21:3d:
98:41:3a:64:61:f7:bc:a2:c1:89:b9:a5:f1:3a:f8:05:0c:54:
8b:a2:22:08:08:e0:1c:93:69:ae:15:62:f1:3f:f3:ef:dc:1f:
d3:0d:4c:2f:fa:fc:51:85:44:d4:cc:a3:52:5b:c6:7a:38:91:
27:ec:ff:e3:8b:34:e8:4a:9b:cc:7a:99:06:4b:44:58:76:ea:
5c:43:3e:9d:5d:a1:5a:1f:94:a4:a9:e5:f8:6b:19:8b:23:ca:
ac:55:7f:22:3b:ea:18:da:5f:d7:3f:8c:1a:99:3f:b1:6e:3e:
78:7f:fe:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766Dl9vQIiSSIdnyE3wZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTM4NTQyY2ZkYjFlZTZlMDc1ZWFlNmIxMDFlN2JiNWIx
NGM0MzYwHhcNMjUxMDE5MTAwMjI3WhcNMjUxMDIwMTAwMjI3WjAzMTEwLwYDVQQD
Eyg3OTk0MWIxNTJmOWIxZjRjNWY3NjlhYWI3YzU1Nzg5MDBkOTkwNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsDRXJd00K7dzmA/aK8OPX5pP2c7
i0jmLIH59MQmChtZ24FfH2JxpQw+/eWifg2SH0sl/PX+BfIHHYMebzkLpKAqwYJm
dv+HU3ksjRZJVhs3TbV5DrSRYI5wOL2n4CPG65TpExss/QPl8JYvVfnsf4xV44IZ
F1u3d1XnqX0QlgbmmdO7uq4MRXSJYaAKvc+4qlqn5xC9FWfu6PD1G8oMrl5+R7BR
4CucCwEWnhSgENSZsBqUq391LmfHR7aYDDbXK9wtgwWlgzoPb1FDItjYz1tlEY5c
a6a/AABYOmU6zVEvMDXGW/TL7z9YqsqHk4WTOFzLCST9i80gzEPwnN7kBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmUGxUvmx9MX3aaq3xVeJANmQZTMB8GA1UdIwQY
MBaAFNCjhULP2x7m4HXq5rEB57tbFMQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEt
NDBkMTkxMWZhN2YzLzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zZjA0YzktZTZlMS00NTA2LWI4ZmEtNDBkMTkxMWZhN2Yz
LzEvMEtPRlFzX2JIdWJnZGVybXNRSG51MXNVeERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaTXcH1y
7JJBKZL7v0zJn4gciEd2FSXvJyQ5U/X2M/7Za/mfbVQaZ8zhmRn1IVWTjekvWXLP
Z3uQhA+fFmwo7I/gNmki8c3y4xDNVreFKYEra2eInkDOM6PUUI4x22mTsch0l/6q
GHSguaVx8j7l3GMxYUyhfpBtL4S7polX+yk9jic3Zm4tq09Sco7IVSE9mEE6ZGH3
vKLBibml8Tr4BQxUi6IiCAjgHJNprhVi8T/z79wf0w1ML/r8UYVE1MyjUlvGejiR
J+z/44s06EqbzHqZBktEWHbqXEM+nV2hWh+UpKnl+GsZiyPKrFV/IjvqGNpf1z+M
Gpk/sW4+eH/+iA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:44 2025 by rpki-client