Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier: Bje9WOYvl6OFXADghTdyYvS9zokXVR80uI4bjdutBdc=
Subject key identifier: AB:9D:9F:94:FD:4B:F6:B0:4A:9F:0D:6C:86:0C:ED:F2:19:84:47:7B
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 0199FCC621AEEB27A0278089DDB49366444A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number: 14E8
Signing time: Sun 19 Oct 2025 14:01:07 +0000
Manifest this update: Sun 19 Oct 2025 14:01:07 +0000
Manifest next update: Mon 20 Oct 2025 14:01:07 +0000
Files and hashes: 1: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (hash: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=)
2: ZkYwAX8sFU0tx7MlmzFWDuReNoo.roa (hash: 1bC+YhGSYAmLg99m2lBrTp2m6aERC4TuVMQpOPNQzNM=)
3: coBIhj-g7a4t_QkFPEnA3t3TN8U.roa (hash: FMtCmhYv8BwdhkKpNroPbCbepJ79NGcx+1J9x7kaHKA=)
4: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: 443F4pOQY3wU36ijtY33/d2JuRJQpI5H2uy9u18117E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:21:ae:eb:27:a0:27:80:89:dd:b4:93:66:44:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Oct 19 14:01:07 2025 GMT
Not After : Oct 20 14:01:07 2025 GMT
Subject: CN=ab9d9f94fd4bf6b04a9f0d6c860cedf21984477b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:59:ea:c7:ab:08:d2:d8:78:1a:a8:51:ad:
6b:72:de:14:2f:33:be:92:1f:23:ef:2f:4f:3b:ac:
df:c1:47:0f:22:14:ce:94:2a:af:83:f8:30:c7:f6:
04:65:57:74:5f:23:a3:5e:b1:3a:dd:d4:bc:0d:56:
6f:f6:67:fa:de:ef:37:b6:71:24:cf:62:55:b4:70:
48:49:7a:16:f9:c3:cd:4e:6d:15:a0:07:3c:01:b1:
4d:22:e1:c7:b8:8a:97:20:b1:d8:41:2e:87:b4:07:
cb:60:a8:96:40:dd:69:dd:84:5c:b9:47:0a:5a:9c:
4c:5b:73:cc:42:e5:07:8e:9e:1f:90:0b:02:f0:3a:
57:1d:aa:f9:b2:af:ea:a4:2c:dd:d3:db:67:8d:9e:
7d:c3:c3:b0:10:20:48:08:85:d6:a9:3e:5f:e6:66:
ca:8b:db:74:6e:86:12:77:7e:42:40:86:65:66:85:
dc:b9:27:3e:e9:ce:e5:76:a5:c2:7c:20:cf:af:43:
c2:87:61:9f:1d:be:c3:d0:9d:ad:9c:cf:ac:32:2a:
23:23:ab:35:26:5d:31:de:79:f1:79:f3:ba:55:b2:
72:8b:2f:0d:53:1c:10:10:5f:fe:4a:f5:30:08:54:
c4:77:77:35:83:cb:cc:34:bd:a8:7a:18:46:61:2e:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9D:9F:94:FD:4B:F6:B0:4A:9F:0D:6C:86:0C:ED:F2:19:84:47:7B
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:18:e6:28:e6:f8:23:ea:2e:9f:46:1e:7f:24:e1:e0:52:48:
f5:57:61:e4:71:76:9f:f4:be:3f:44:ef:73:f8:5e:f5:f7:d7:
1c:06:95:8d:d1:68:ad:f1:0a:d6:4b:88:41:97:2d:e8:4c:aa:
97:16:b8:fe:29:6b:f9:5d:6c:79:55:da:90:63:ba:81:d7:83:
ff:48:96:1a:4e:f4:3e:07:58:a2:ec:70:49:b3:6c:6e:ae:5a:
68:fb:37:af:9a:e1:ec:ae:52:ce:b1:3b:4f:ff:31:2a:bd:65:
1d:2c:be:a8:ed:e4:da:7b:e9:a9:70:2e:1f:4b:8e:9c:6e:53:
17:75:96:6c:6f:34:a4:22:70:67:78:78:68:e7:bb:b3:44:03:
28:a7:58:58:5a:6c:85:de:ce:f2:a8:a8:f7:c7:53:60:91:aa:
1a:56:05:7c:c7:d2:b4:b6:f2:33:2c:40:21:f4:da:c4:01:d1:
97:1f:67:71:50:e7:c5:6e:52:69:58:d3:50:86:ab:5d:20:21:
be:f4:44:92:24:d3:8d:e5:43:28:c7:c2:5a:da:cb:66:f2:d2:
01:f1:97:c5:3e:13:86:86:c1:d2:67:75:e8:33:ac:ba:0a:8e:
78:d4:9d:08:b3:21:5a:78:7d:dd:d6:b2:ff:0c:4e:27:9e:ab:
2e:c6:b7:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xiGu6yegJ4CJ3bSTZkRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjA2YjhhYWQ1NTNmMDk0OGM3YTg5NGQ2ODY3MTg3MGVi
ODJjYjAwHhcNMjUxMDE5MTQwMTA3WhcNMjUxMDIwMTQwMTA3WjAzMTEwLwYDVQQD
EyhhYjlkOWY5NGZkNGJmNmIwNGE5ZjBkNmM4NjBjZWRmMjE5ODQ0NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtclZ6serCNLYeBqoUa1rct4ULzO+
kh8j7y9PO6zfwUcPIhTOlCqvg/gwx/YEZVd0XyOjXrE63dS8DVZv9mf63u83tnEk
z2JVtHBISXoW+cPNTm0VoAc8AbFNIuHHuIqXILHYQS6HtAfLYKiWQN1p3YRcuUcK
WpxMW3PMQuUHjp4fkAsC8DpXHar5sq/qpCzd09tnjZ59w8OwECBICIXWqT5f5mbK
i9t0boYSd35CQIZlZoXcuSc+6c7ldqXCfCDPr0PCh2GfHb7D0J2tnM+sMiojI6s1
Jl0x3nnxefO6VbJyiy8NUxwQEF/+SvUwCFTEd3c1g8vMNL2oehhGYS7cRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKudn5T9S/awSp8NbIYM7fIZhEd7MB8GA1UdIwQY
MBaAFKBga4qtVT8JSMeolNaGcYcOuCywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYt
YmIzNDMxZmUwMjg1LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85ZTJkZmQtZjJlOS00MTZkLThmMWYtYmIzNDMxZmUwMjg1
LzEvb0dCcmlxMVZQd2xJeDZpVTFvWnhodzY0TExBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBjmKOb4
I+oun0YefyTh4FJI9Vdh5HF2n/S+P0Tvc/he9ffXHAaVjdForfEK1kuIQZct6Eyq
lxa4/ilr+V1seVXakGO6gdeD/0iWGk70PgdYouxwSbNsbq5aaPs3r5rh7K5SzrE7
T/8xKr1lHSy+qO3k2nvpqXAuH0uOnG5TF3WWbG80pCJwZ3h4aOe7s0QDKKdYWFps
hd7O8qio98dTYJGqGlYFfMfStLbyMyxAIfTaxAHRlx9ncVDnxW5SaVjTUIarXSAh
vvREkiTTjeVDKMfCWtrLZvLSAfGXxT4ThobB0md16DOsugqOeNSdCLMhWnh93day
/wxOJ56rLsa33g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:57 2025 by rpki-client