
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
File: oI-OKeBCDnI90dxBjocTyOlgQ9g.mft (raw, json)
Hash identifier: YVPaCJHXX7GQHP3anEQIKTvEIKuxgiTZtfsuXcrDz6c=
Subject key identifier: 55:5B:FE:AC:F5:FC:08:6B:A3:C6:79:E8:1A:C2:63:9F:A3:AF:15:F0
Authority key identifier: A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
Certificate issuer: /CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Certificate serial: 0199FBEAAA2196F73DBE8B983F09A56FE3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: Dgcly8v4CR7-bWoogRwA8Cd0ZgQ.roa (hash: XQw1h6VNbTxzmM1H2Iqg9dXPjJiJyzhNIjXbV7g4seM=)
2: oI-OKeBCDnI90dxBjocTyOlgQ9g.crl (hash: HQmkMEMBQgdRTSVBEfeKbX2+zhuDQpC26DqZj0qKCZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:aa:21:96:f7:3d:be:8b:98:3f:09:a5:6f:e3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08f8e29e0420e723dd1dc418e8713c8e96043d8
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=555bfeacf5fc086ba3c679e81ac2639fa3af15f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:53:0b:57:a4:34:fd:85:04:41:f7:e6:f5:
37:32:25:f1:2e:a2:75:8b:12:ca:3a:08:99:67:5e:
80:75:9f:7c:d7:f4:f8:40:df:38:eb:f6:88:c7:ea:
ba:91:18:f9:85:29:4a:43:8e:f1:ef:d7:be:dc:c2:
ed:be:30:9d:cd:2a:54:a8:20:ad:40:44:ff:99:31:
a8:42:1f:59:25:48:8b:a7:39:19:97:81:bb:b5:15:
2f:48:3f:a9:6b:da:73:e2:be:fd:7c:f3:78:00:69:
62:8f:9b:b8:5c:21:ef:7d:9c:74:11:f5:8b:b6:a7:
71:c9:9d:72:3c:2b:88:85:3f:2a:45:c8:ea:12:33:
7d:51:34:a1:02:0f:df:31:44:32:e0:0d:48:e2:b7:
1b:f1:4d:85:79:c4:91:d1:41:32:89:5b:e7:f2:c8:
78:af:05:c2:6e:6a:b0:2e:24:10:e1:99:01:e5:6f:
dd:30:72:78:8b:8d:e8:fb:43:d7:c0:e3:2b:97:f1:
75:04:88:53:7d:09:7f:95:09:fb:fc:5c:9a:48:0f:
b3:9f:8c:cd:c9:24:f6:d4:9d:39:59:33:ba:17:39:
e7:52:1d:3e:6e:fd:be:cb:5a:90:2f:a4:e2:bc:4e:
4c:e3:4b:e9:4c:e8:48:10:af:a1:ac:3f:22:a1:e1:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5B:FE:AC:F5:FC:08:6B:A3:C6:79:E8:1A:C2:63:9F:A3:AF:15:F0
X509v3 Authority Key Identifier:
keyid:A0:8F:8E:29:E0:42:0E:72:3D:D1:DC:41:8E:87:13:C8:E9:60:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI-OKeBCDnI90dxBjocTyOlgQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9f1503-f77d-4f78-8c9f-a8ab5d5737df/1/oI-OKeBCDnI90dxBjocTyOlgQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5c:8f:1a:ad:f0:31:8e:a9:53:b9:17:40:ca:7b:ad:d7:e8:
f9:ce:32:e1:04:87:b8:b5:df:a9:79:93:1a:bd:8a:68:35:b8:
a6:0e:d1:b6:1e:d1:4f:97:4e:41:a4:da:5f:d7:30:38:40:7b:
32:af:1b:ed:90:72:7c:a2:df:54:9a:1b:f8:b6:6b:40:ff:f2:
21:fb:49:5d:20:1b:a5:1a:a3:05:84:21:de:31:fc:14:38:2c:
f4:40:0b:19:28:8f:78:55:fb:99:c7:62:e3:05:c1:41:1e:0e:
53:3a:cc:dc:6f:0e:28:42:29:85:5d:e7:0b:9e:3b:d3:48:19:
66:87:57:8b:59:0c:b3:39:c6:91:bd:ee:74:80:05:47:b5:9a:
3a:de:60:1c:99:17:11:ca:45:c5:a9:07:b7:a9:1d:f4:03:1e:
01:37:e3:a7:e1:d7:e6:3b:d4:bc:fe:bd:11:56:84:88:51:d7:
a4:a7:fb:21:bb:bf:8e:73:96:fd:b7:0e:e6:b2:7f:f0:00:ee:
5c:a9:49:0d:2f:f4:73:ea:21:d2:9d:2a:05:67:ef:aa:03:21:
c7:f3:42:b5:5c:5a:c1:81:ff:0b:00:43:e4:6e:97:19:62:b1:
f6:40:45:37:b9:ae:9d:34:55:fd:b0:b6:04:c0:f4:00:44:9e:
e6:3a:fd:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qohlvc9vouYPwmlb+PtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGY4ZTI5ZTA0MjBlNzIzZGQxZGM0MThlODcxM2M4ZTk2
MDQzZDgwHhcNMjUxMDE5MTAwMTI0WhcNMjUxMDIwMTAwMTI0WjAzMTEwLwYDVQQD
Eyg1NTViZmVhY2Y1ZmMwODZiYTNjNjc5ZTgxYWMyNjM5ZmEzYWYxNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx5TC1ekNP2FBEH35vU3MiXxLqJ1
ixLKOgiZZ16AdZ981/T4QN846/aIx+q6kRj5hSlKQ47x79e+3MLtvjCdzSpUqCCt
QET/mTGoQh9ZJUiLpzkZl4G7tRUvSD+pa9pz4r79fPN4AGlij5u4XCHvfZx0EfWL
tqdxyZ1yPCuIhT8qRcjqEjN9UTShAg/fMUQy4A1I4rcb8U2FecSR0UEyiVvn8sh4
rwXCbmqwLiQQ4ZkB5W/dMHJ4i43o+0PXwOMrl/F1BIhTfQl/lQn7/FyaSA+zn4zN
yST21J05WTO6FznnUh0+bv2+y1qQL6TivE5M40vpTOhIEK+hrD8ioeGCBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVb/qz1/Ahro8Z56BrCY5+jrxXwMB8GA1UdIwQY
MBaAFKCPjingQg5yPdHcQY6HE8jpYEPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYt
YThhYjVkNTczN2RmLzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZjE1MDMtZjc3ZC00Zjc4LThjOWYtYThhYjVkNTczN2Rm
LzEvb0ktT0tlQkNEbkk5MGR4QmpvY1R5T2xnUTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlyPGq3w
MY6pU7kXQMp7rdfo+c4y4QSHuLXfqXmTGr2KaDW4pg7Rth7RT5dOQaTaX9cwOEB7
Mq8b7ZByfKLfVJob+LZrQP/yIftJXSAbpRqjBYQh3jH8FDgs9EALGSiPeFX7mcdi
4wXBQR4OUzrM3G8OKEIphV3nC54700gZZodXi1kMsznGkb3udIAFR7WaOt5gHJkX
EcpFxakHt6kd9AMeATfjp+HX5jvUvP69EVaEiFHXpKf7Ibu/jnOW/bcO5rJ/8ADu
XKlJDS/0c+oh0p0qBWfvqgMhx/NCtVxawYH/CwBD5G6XGWKx9kBFN7munTRV/bC2
BMD0AESe5jr9Mw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:22 2025 by rpki-client