
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json)
Hash identifier: OYRS4bHR3piVh4ECuR67VkvEkpGD+L1cODT2DUx3ASs=
Subject key identifier: FF:FC:69:1C:8E:3C:27:15:5F:89:F2:6F:3A:CA:38:57:25:93:8B:0E
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 0199FBEAA27CB6F9FECDE9BB300CBBAA2C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
Manifest number: 05D4
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: rgaCWmEZ3/RSEsWRuqySV31MaYya89skh5aJTnKIYC8=)
2: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (hash: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a2:7c:b6:f9:fe:cd:e9:bb:30:0c:bb:aa:2c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=fffc691c8e3c27155f89f26f3aca385725938b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:31:78:cd:31:db:5a:a5:3b:d4:32:1a:31:
ae:bb:b4:e5:b8:01:e9:c1:86:0f:68:c4:0b:01:45:
f2:6c:85:6f:21:3d:f7:c2:83:e4:7b:c3:df:48:9c:
b1:f2:68:50:53:8c:78:70:17:16:27:66:ef:dc:54:
7f:51:da:9d:5f:6d:ec:a6:00:40:64:75:47:8b:5d:
1b:54:d0:71:c7:25:81:46:c6:5b:6f:bf:32:b8:ec:
68:8f:ad:41:9f:20:f8:06:23:c0:a0:8f:2f:93:e2:
f1:56:e9:c6:ef:db:cb:4a:01:66:7e:bb:75:82:ea:
74:c1:48:53:6a:ca:7d:7a:e1:10:6b:5c:bd:fe:0e:
24:0e:6b:91:b6:48:3a:f9:8c:d1:12:fc:06:d5:05:
bf:ee:90:6b:e6:6c:d6:a6:39:06:cc:c8:41:68:d9:
58:63:40:82:9f:c8:39:49:a8:44:04:fc:a5:da:22:
32:a7:64:10:ac:c3:7b:ed:a3:06:49:28:a4:73:2b:
3e:f7:c1:36:4b:7e:da:ba:e5:7e:aa:5d:b8:f0:50:
c8:32:23:36:ce:ca:95:3e:e6:98:47:1a:c9:8e:44:
89:9f:1e:6a:43:8e:d0:6f:9e:70:eb:02:64:b7:c5:
94:bf:a0:f8:36:04:76:55:eb:b3:a8:55:24:78:0c:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:69:1C:8E:3C:27:15:5F:89:F2:6F:3A:CA:38:57:25:93:8B:0E
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:0c:c1:02:de:37:6a:4e:c3:81:97:cd:ab:44:03:ed:aa:
4a:14:8a:6c:57:a8:2b:3b:50:38:71:84:31:b9:d7:d8:52:76:
5f:46:09:ed:d8:1a:98:ed:65:f6:60:c0:f3:9f:2c:f2:23:0d:
3a:f1:8e:a3:cf:a6:c5:8a:c1:19:39:eb:0b:a7:6c:e7:69:10:
43:72:df:ed:7a:77:9b:4e:73:5c:ff:d9:3b:b4:fa:e8:ea:00:
5c:d0:5a:a9:fc:a5:a3:56:3c:a2:f8:14:e1:d2:64:af:31:fb:
25:5e:b1:83:10:13:9e:fc:37:da:a6:8a:11:a2:1a:e6:b3:ab:
2b:4c:fb:85:a0:6a:89:70:68:16:df:e1:ca:04:9f:1d:ea:07:
f4:fe:59:fd:00:e7:ea:87:60:6a:9a:d8:d1:4f:2f:95:6c:ad:
5e:00:7e:36:ab:dd:d8:f7:f7:84:75:2b:3d:48:38:2c:e6:4d:
4b:91:fd:b2:d0:95:36:27:b6:7e:51:e0:47:66:9b:03:20:0f:
bc:a6:8c:5c:2a:f1:31:e1:16:95:b0:ec:ba:d4:91:dd:44:66:
73:79:e2:4f:36:82:99:f8:e2:6b:5d:c2:2b:a8:db:d6:38:c8:
ae:64:ec:60:d3:92:a4:fd:52:1c:83:7b:10:ef:27:d7:11:6c:
e3:2b:f6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qJ8tvn+zem7MAy7qiwTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMzE0OWRhMGExMmJkYmYxYmVmNTk4YjA0NjMwOTA3ODAy
MDZjZTAwHhcNMjUxMDE5MTAwMTIyWhcNMjUxMDIwMTAwMTIyWjAzMTEwLwYDVQQD
EyhmZmZjNjkxYzhlM2MyNzE1NWY4OWYyNmYzYWNhMzg1NzI1OTM4YjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxAxeM0x21qlO9QyGjGuu7TluAHp
wYYPaMQLAUXybIVvIT33woPke8PfSJyx8mhQU4x4cBcWJ2bv3FR/UdqdX23spgBA
ZHVHi10bVNBxxyWBRsZbb78yuOxoj61BnyD4BiPAoI8vk+LxVunG79vLSgFmfrt1
gup0wUhTasp9euEQa1y9/g4kDmuRtkg6+YzREvwG1QW/7pBr5mzWpjkGzMhBaNlY
Y0CCn8g5SahEBPyl2iIyp2QQrMN77aMGSSikcys+98E2S37auuV+ql248FDIMiM2
zsqVPuaYRxrJjkSJnx5qQ47Qb55w6wJkt8WUv6D4NgR2VeuzqFUkeAxiaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/8aRyOPCcVX4nybzrKOFclk4sOMB8GA1UdIwQY
MBaAFDoxSdoKEr2/G+9ZiwRjCQeAIGzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kODhhYWUtNjhjMy00OTA5LTlmOGEt
MDdlODNjZDViNjBkLzEvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kODhhYWUtNjhjMy00OTA5LTlmOGEtMDdlODNjZDViNjBk
LzEvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdUMwQLe
N2pOw4GXzatEA+2qShSKbFeoKztQOHGEMbnX2FJ2X0YJ7dgamO1l9mDA858s8iMN
OvGOo8+mxYrBGTnrC6ds52kQQ3Lf7Xp3m05zXP/ZO7T66OoAXNBaqfylo1Y8ovgU
4dJkrzH7JV6xgxATnvw32qaKEaIa5rOrK0z7haBqiXBoFt/hygSfHeoH9P5Z/QDn
6odgaprY0U8vlWytXgB+Nqvd2Pf3hHUrPUg4LOZNS5H9stCVNie2flHgR2abAyAP
vKaMXCrxMeEWlbDsutSR3URmc3niTzaCmfjia13CK6jb1jjIrmTsYNOSpP1SHIN7
EO8n1xFs4yv2+g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:45 2025 by rpki-client