Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: SV3TAtrQxHeiONWLvqi3f2Zuqje9qa6o8yOUIIbBcKo=
Subject key identifier: 09:D3:A6:A9:32:C1:B8:01:AA:48:7D:0B:71:AE:25:76:62:E5:A4:3A
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 0199FBEB43F86F35C5D66214AAE9328582EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 111C
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: +83W3WED0T35PFxezXva6MJY6B0mPxLuNR6DRnTr9tA=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:43:f8:6f:35:c5:d6:62:14:aa:e9:32:85:82:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=09d3a6a932c1b801aa487d0b71ae257662e5a43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:87:c6:18:74:8c:ec:a2:0e:ba:2c:61:76:
07:c9:fb:14:61:f9:b2:31:f7:a0:96:38:3c:57:eb:
6e:c0:a5:ff:47:17:d2:6f:2d:80:f8:ff:ae:29:ef:
e0:15:b1:c5:95:32:b0:24:f9:fb:91:08:ff:cb:34:
ac:c7:db:8d:5c:5a:44:f6:74:09:77:0e:28:13:2f:
75:c1:3e:8d:b1:ce:ea:b0:58:0d:b7:78:76:dd:dc:
11:6c:ac:1a:3b:b4:de:94:ae:d4:af:b0:df:b4:a3:
94:a5:d8:60:d1:43:73:1a:8d:65:2e:31:24:e1:17:
02:d5:d5:3a:36:18:95:8b:2f:db:fd:88:fb:6b:b0:
1d:12:b2:c6:84:40:b5:cf:1c:97:66:69:02:c6:2f:
33:59:f4:17:83:aa:b8:ab:13:aa:71:4f:28:76:cd:
a6:1d:21:3e:3c:b0:ce:d8:3a:73:a5:de:b0:71:96:
23:d5:7b:8c:ce:9c:e8:d3:bd:08:18:78:23:42:59:
84:fd:04:f5:a4:82:e2:e9:d5:12:08:2e:b1:29:23:
98:a3:59:17:f5:28:c7:e4:68:b2:7f:8f:77:34:ea:
2e:84:c9:c4:8a:6e:2e:5e:da:ae:af:c9:f9:c4:1a:
74:c5:9d:53:df:97:dd:31:23:7e:86:0c:fd:72:b5:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D3:A6:A9:32:C1:B8:01:AA:48:7D:0B:71:AE:25:76:62:E5:A4:3A
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:0e:ed:3e:20:27:d6:c7:d3:70:55:b6:09:fc:0a:c4:fc:
28:8b:53:db:a5:b2:49:1c:c8:92:4f:dc:97:14:a6:4a:10:4a:
89:d2:8a:8c:12:46:cb:f9:bd:7f:b9:0f:28:fc:4f:00:5d:c2:
ad:9b:02:80:11:7b:ab:7c:64:7e:75:36:b1:54:96:aa:9a:0f:
51:47:8e:f5:0c:8e:0a:ba:57:c7:67:52:77:00:8f:06:01:9c:
1b:76:42:cc:ba:36:51:73:c7:00:43:4e:b7:f2:01:2e:be:4b:
cc:44:3e:e1:17:6d:0c:6d:b0:7a:26:93:44:10:3b:fa:3f:59:
a9:05:0e:a3:65:a5:dd:30:e3:a1:d5:95:08:53:14:92:97:af:
31:d9:d0:22:c4:13:0f:33:00:40:7f:43:83:17:ce:d5:50:20:
ef:07:20:8f:da:43:5c:3f:be:49:78:0b:e0:82:d1:26:4a:cc:
35:dd:ec:c0:e0:a3:a3:71:34:00:44:e2:3a:54:64:ce:81:7e:
8f:5e:17:f2:43:06:00:9d:4c:19:75:a6:d3:10:40:82:82:a5:
88:84:cc:db:15:af:58:81:d2:2d:88:69:77:30:0d:3a:d9:fe:
46:7b:4e:90:a4:b6:d5:ab:b4:2e:85:1c:62:5f:2a:bb:6c:4d:
8f:5e:94:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760P4bzXF1mIUqukyhYLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz
YWM2NjkwHhcNMjUxMDE5MTAwMjAzWhcNMjUxMDIwMTAwMjAzWjAzMTEwLwYDVQQD
EygwOWQzYTZhOTMyYzFiODAxYWE0ODdkMGI3MWFlMjU3NjYyZTVhNDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh+Hxhh0jOyiDrosYXYHyfsUYfmy
Mfegljg8V+tuwKX/RxfSby2A+P+uKe/gFbHFlTKwJPn7kQj/yzSsx9uNXFpE9nQJ
dw4oEy91wT6Nsc7qsFgNt3h23dwRbKwaO7TelK7Ur7DftKOUpdhg0UNzGo1lLjEk
4RcC1dU6NhiViy/b/Yj7a7AdErLGhEC1zxyXZmkCxi8zWfQXg6q4qxOqcU8ods2m
HSE+PLDO2Dpzpd6wcZYj1XuMzpzo070IGHgjQlmE/QT1pILi6dUSCC6xKSOYo1kX
9SjH5Giyf493NOouhMnEim4uXtqur8n5xBp0xZ1T35fdMSN+hgz9crVHzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnTpqkywbgBqkh9C3GuJXZi5aQ6MB8GA1UdIwQY
MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt
ZGY0NTA1NGRkOTM0LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0
LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhakO7T4g
J9bH03BVtgn8CsT8KItT26WySRzIkk/clxSmShBKidKKjBJGy/m9f7kPKPxPAF3C
rZsCgBF7q3xkfnU2sVSWqpoPUUeO9QyOCrpXx2dSdwCPBgGcG3ZCzLo2UXPHAENO
t/IBLr5LzEQ+4RdtDG2weiaTRBA7+j9ZqQUOo2Wl3TDjodWVCFMUkpevMdnQIsQT
DzMAQH9DgxfO1VAg7wcgj9pDXD++SXgL4ILRJkrMNd3swOCjo3E0AETiOlRkzoF+
j14X8kMGAJ1MGXWm0xBAgoKliITM2xWvWIHSLYhpdzANOtn+RntOkKS21au0LoUc
Yl8qu2xNj16Udg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:03 2025 by rpki-client