Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: 6DrdtcwgQyFNCQkxIzacnx8ikO+Mz740k6dH8MElivg=
Subject key identifier: CC:55:05:BE:A3:37:71:B2:CF:C6:C3:6A:CB:9B:68:66:B4:13:1C:D2
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 019A00DA385175098B739DFF6814AD5549B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 04A8
Signing time: Mon 20 Oct 2025 09:01:32 +0000
Manifest this update: Mon 20 Oct 2025 09:01:32 +0000
Manifest next update: Tue 21 Oct 2025 09:01:32 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 7BKIgTqeavj5qV2keigjwyvKGhdxmCb90jnatl1OEUw=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:38:51:75:09:8b:73:9d:ff:68:14:ad:55:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Oct 20 09:01:32 2025 GMT
Not After : Oct 21 09:01:32 2025 GMT
Subject: CN=cc5505bea33771b2cfc6c36acb9b6866b4131cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:69:c7:88:de:b6:6b:2b:8b:df:a4:fe:25:
a0:3d:2f:6c:3c:e2:b7:ca:21:b4:36:ed:0d:92:a1:
10:b2:d6:68:8d:ec:de:ab:81:93:89:b2:14:ee:1c:
ef:70:75:91:3b:6e:4b:0e:20:1f:51:0f:e0:a2:c8:
c6:bc:3e:21:5c:f5:8d:50:55:8b:22:da:20:ec:13:
6f:1d:b6:64:36:3e:90:2b:d7:26:30:b6:9e:22:b9:
91:47:60:a5:d0:68:c2:5e:7c:48:bc:07:7f:10:d4:
3f:b3:5e:10:1f:5b:58:ac:4b:6d:08:e4:ee:b4:2a:
dd:eb:9c:51:dd:28:9d:cf:6e:34:cb:22:ac:d3:c7:
94:2a:75:fd:d1:14:6c:77:c6:84:a6:c1:ed:15:d5:
5a:ed:76:29:95:1e:03:49:72:72:d8:62:44:85:c0:
5a:67:86:d4:c0:99:5c:a8:af:bc:40:4b:84:b0:84:
86:b0:45:22:d6:3b:7a:6d:e7:6c:35:57:eb:93:1e:
49:34:7a:62:df:3a:c8:c1:c0:a6:5a:b0:32:22:69:
cb:42:56:f4:f1:85:5c:6e:ad:36:2e:0f:01:38:2f:
a9:d4:b5:16:e9:b6:d9:39:70:b1:67:fc:0e:9f:ea:
fb:f5:b8:bb:b7:b2:26:47:59:0a:f2:8c:ec:10:4a:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:05:BE:A3:37:71:B2:CF:C6:C3:6A:CB:9B:68:66:B4:13:1C:D2
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:be:20:35:2d:d6:ce:d2:49:9a:d3:20:29:63:da:b1:dc:4a:
24:9c:cb:35:20:bb:80:2b:1f:c1:f3:67:68:2e:0c:4a:98:df:
8a:25:c6:8d:0e:eb:f1:95:d5:ae:5d:86:4d:b6:60:e7:ea:35:
11:5f:32:0c:ba:fd:a6:93:f2:bf:89:ec:4d:c7:72:0b:0e:4a:
e2:85:fa:a0:0d:cc:c1:7e:bf:96:cb:9d:51:d1:29:46:60:12:
a2:54:b4:10:a2:b9:49:b6:35:ca:5a:ab:81:32:75:1a:57:64:
7d:f5:12:da:c7:7f:77:93:48:e2:d4:e7:f2:e9:54:51:79:a0:
cf:9d:75:4e:4b:91:f2:2d:5d:59:0e:c1:bb:91:51:1f:b0:75:
cc:7c:1c:47:d7:81:a0:e4:ff:0a:11:53:d6:84:ee:37:69:57:
19:38:77:81:0e:a2:4f:f3:97:eb:6c:69:65:b5:11:54:15:26:
c0:a6:9f:96:ab:a7:3c:f3:2b:6d:f1:e2:bb:bd:43:c0:f1:37:
74:d0:e7:73:87:ce:50:9a:ad:a0:94:8c:84:ba:26:ce:73:39:
ba:43:a8:10:c2:08:1d:ec:20:be:ac:30:a8:68:2b:35:9d:03:
26:83:6c:3b:13:45:97:da:28:07:8f:6d:2a:21:e8:94:9c:31:
8f:dd:34:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2jhRdQmLc53/aBStVUm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy
NDk4ZWYwHhcNMjUxMDIwMDkwMTMyWhcNMjUxMDIxMDkwMTMyWjAzMTEwLwYDVQQD
EyhjYzU1MDViZWEzMzc3MWIyY2ZjNmMzNmFjYjliNjg2NmI0MTMxY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHNpx4jetmsri9+k/iWgPS9sPOK3
yiG0Nu0NkqEQstZojezeq4GTibIU7hzvcHWRO25LDiAfUQ/gosjGvD4hXPWNUFWL
Itog7BNvHbZkNj6QK9cmMLaeIrmRR2Cl0GjCXnxIvAd/ENQ/s14QH1tYrEttCOTu
tCrd65xR3Sidz240yyKs08eUKnX90RRsd8aEpsHtFdVa7XYplR4DSXJy2GJEhcBa
Z4bUwJlcqK+8QEuEsISGsEUi1jt6bedsNVfrkx5JNHpi3zrIwcCmWrAyImnLQlb0
8YVcbq02Lg8BOC+p1LUW6bbZOXCxZ/wOn+r79bi7t7ImR1kK8ozsEEpsZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxVBb6jN3Gyz8bDasubaGa0ExzSMB8GA1UdIwQY
MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt
NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh
LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANb4gNS3W
ztJJmtMgKWPasdxKJJzLNSC7gCsfwfNnaC4MSpjfiiXGjQ7r8ZXVrl2GTbZg5+o1
EV8yDLr9ppPyv4nsTcdyCw5K4oX6oA3MwX6/lsudUdEpRmASolS0EKK5SbY1ylqr
gTJ1GldkffUS2sd/d5NI4tTn8ulUUXmgz511TkuR8i1dWQ7Bu5FRH7B1zHwcR9eB
oOT/ChFT1oTuN2lXGTh3gQ6iT/OX62xpZbURVBUmwKaflqunPPMrbfHiu71DwPE3
dNDnc4fOUJqtoJSMhLomznM5ukOoEMIIHewgvqwwqGgrNZ0DJoNsOxNFl9ooB49t
KiHolJwxj900qg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:42 2025 by rpki-client