Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: BEBVF5AnRtrs2nenNHHiIyAatsmtLTOfodW9hVJ7ovg=
Subject key identifier: 3C:57:4A:9C:7D:61:54:0F:0F:EC:50:62:DA:73:4F:FA:D7:AF:DE:65
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 0199FCC655C6863C6BAA785B940F987A1131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: YWu+tolVC/ynPvUYhODu03xeVzfr+LqDYBqESSUeamg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:55:c6:86:3c:6b:aa:78:5b:94:0f:98:7a:11:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=3c574a9c7d61540f0fec5062da734ffad7afde65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:4e:42:93:41:b6:32:20:eb:8e:54:93:79:
24:71:31:a1:85:45:2e:80:05:81:5c:d6:c6:f5:ac:
07:4f:c4:f4:7d:cb:75:85:21:fa:4c:90:53:12:56:
7d:bf:72:c2:22:69:f8:01:24:59:99:da:14:69:9f:
89:ab:b1:93:81:ed:a0:6d:b7:d4:a6:b6:89:df:74:
08:7c:41:a1:b3:ad:83:04:f0:cf:b9:2f:ba:7e:60:
9b:00:ae:75:cd:20:9f:7a:75:27:ea:b1:6d:3e:22:
bd:c6:a7:00:96:2f:fe:82:85:d6:0c:63:71:14:e7:
36:50:b6:22:b6:bd:7b:d1:33:ab:ae:9e:fb:40:88:
bd:60:73:25:cd:04:b5:a9:47:e0:17:1b:db:91:4c:
b8:80:dc:b0:52:d8:9f:c1:35:09:80:33:d2:f2:2b:
da:6c:d1:9e:f9:47:d5:b7:3b:1e:c5:42:ea:7d:94:
35:ee:06:5c:2c:f9:4b:fd:c3:b5:b9:e8:df:7c:aa:
ed:7d:9c:ef:ec:5e:00:fa:6f:20:b7:2b:84:eb:07:
bd:da:92:ff:77:46:84:ac:e2:3e:c7:1f:93:b5:0a:
38:60:f0:fe:a8:69:ce:96:01:04:c7:c3:a8:ec:7d:
63:87:a9:d7:db:ad:ff:40:47:fb:f7:e8:16:f5:e6:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:4A:9C:7D:61:54:0F:0F:EC:50:62:DA:73:4F:FA:D7:AF:DE:65
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6d:d8:d0:a4:7d:a4:03:33:05:38:f0:ca:c1:5c:90:fb:48:
fb:60:95:51:ac:93:1d:20:c4:aa:98:04:51:06:57:b7:77:4e:
64:73:93:74:7e:99:31:75:23:39:bb:03:13:b9:8b:47:6d:e6:
a5:71:be:69:58:28:33:0f:59:02:49:81:9e:99:0f:03:17:1e:
2f:e0:8e:b9:0c:5e:a5:eb:67:25:95:7c:4c:7e:64:9c:c9:4e:
06:fa:4c:ff:4a:a7:06:e4:b5:77:94:12:74:f2:43:d7:7d:28:
1d:34:cd:82:4d:0c:13:4f:0e:25:46:54:84:22:d8:c4:e7:3b:
60:f3:fb:a1:74:8a:fd:f7:60:05:04:e0:ee:a4:0a:20:34:73:
e1:d6:47:ee:76:d2:99:75:ba:a9:90:9d:a8:48:4f:c9:f3:fc:
a1:5b:dc:f3:41:6d:22:02:a1:7b:85:6b:49:95:b6:d1:41:cf:
3d:a0:e0:a4:60:ca:0a:a6:6d:65:74:a1:04:66:05:9f:2e:66:
d4:5b:19:fa:aa:da:49:ad:85:cd:f1:35:12:7b:aa:de:5e:29:
c5:96:30:c2:c2:f9:77:56:da:ea:bd:fc:ad:b6:37:17:2f:c3:
83:48:2f:28:db:0d:bb:d8:42:10:b4:ca:73:93:af:95:f4:8d:
00:21:28:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xlXGhjxrqnhblA+YehExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi
ZWIyMDgwHhcNMjUxMDE5MTQwMTIwWhcNMjUxMDIwMTQwMTIwWjAzMTEwLwYDVQQD
EygzYzU3NGE5YzdkNjE1NDBmMGZlYzUwNjJkYTczNGZmYWQ3YWZkZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMtOQpNBtjIg645Uk3kkcTGhhUUu
gAWBXNbG9awHT8T0fct1hSH6TJBTElZ9v3LCImn4ASRZmdoUaZ+Jq7GTge2gbbfU
praJ33QIfEGhs62DBPDPuS+6fmCbAK51zSCfenUn6rFtPiK9xqcAli/+goXWDGNx
FOc2ULYitr170TOrrp77QIi9YHMlzQS1qUfgFxvbkUy4gNywUtifwTUJgDPS8iva
bNGe+UfVtzsexULqfZQ17gZcLPlL/cO1uejffKrtfZzv7F4A+m8gtyuE6we92pL/
d0aErOI+xx+TtQo4YPD+qGnOlgEEx8Oo7H1jh6nX263/QEf79+gW9eY7twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxXSpx9YVQPD+xQYtpzT/rXr95lMB8GA1UdIwQY
MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt
ODY2NjA3YWYyZmE1LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2YtODY2NjA3YWYyZmE1
LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhm3Y0KR9
pAMzBTjwysFckPtI+2CVUayTHSDEqpgEUQZXt3dOZHOTdH6ZMXUjObsDE7mLR23m
pXG+aVgoMw9ZAkmBnpkPAxceL+COuQxepetnJZV8TH5knMlOBvpM/0qnBuS1d5QS
dPJD130oHTTNgk0ME08OJUZUhCLYxOc7YPP7oXSK/fdgBQTg7qQKIDRz4dZH7nbS
mXW6qZCdqEhPyfP8oVvc80FtIgKhe4VrSZW20UHPPaDgpGDKCqZtZXShBGYFny5m
1FsZ+qraSa2FzfE1Enuq3l4pxZYwwsL5d1ba6r38rbY3Fy/Dg0gvKNsNu9hCELTK
c5OvlfSNACEoNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:48 2025 by rpki-client