Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: 09ue3gpK4uNAJ7r6wQ04a2UXmYw+jIqPF05Ux4XKTZQ=
Subject key identifier: 85:AD:6E:09:58:D8:CB:74:8B:F2:FF:F6:58:95:D7:57:69:7F:96:25
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 0199FD6B442C1C8F4B8BCD65FB073B3827A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 0422
Signing time: Sun 19 Oct 2025 17:01:29 +0000
Manifest this update: Sun 19 Oct 2025 17:01:29 +0000
Manifest next update: Mon 20 Oct 2025 17:01:29 +0000
Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: lp97yUWgTlIkiXiRSV3Q1kfJ8YI/6+h4LdnUe8AnQ3w=)
2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:44:2c:1c:8f:4b:8b:cd:65:fb:07:3b:38:27:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Oct 19 17:01:29 2025 GMT
Not After : Oct 20 17:01:29 2025 GMT
Subject: CN=85ad6e0958d8cb748bf2fff65895d757697f9625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:7c:60:3c:28:87:16:0c:ff:98:e9:0d:b9:
c7:e2:81:4e:69:2f:5d:67:80:40:bb:8b:d4:d1:54:
96:ae:75:7a:ee:84:b0:58:1f:03:fa:ac:c0:62:ce:
15:b9:b5:9f:73:2d:13:74:d1:86:ff:95:96:3a:ee:
83:18:f0:91:38:13:1f:ba:39:bb:87:5b:66:bc:17:
c0:40:e0:15:34:89:e5:18:82:be:6d:fa:db:19:a3:
0c:40:41:75:94:52:fe:f4:93:7a:c6:14:b7:22:16:
9e:74:f6:4b:3a:c2:e3:cf:19:35:9e:62:5f:7c:9d:
cb:a2:96:fb:a6:18:92:9b:a4:05:61:48:28:98:3c:
13:72:6c:d2:d2:e7:04:1f:be:1b:6d:eb:54:d6:0d:
79:3a:0b:16:17:86:3f:aa:c2:f6:d8:9c:45:45:58:
29:c7:b0:53:0c:48:6d:d8:74:d2:e2:b8:6f:2d:8c:
59:9d:35:c4:bd:d8:46:c2:70:8f:4e:11:f7:db:45:
1a:72:9b:46:c0:62:02:72:b8:8e:c9:cd:90:60:8a:
50:e8:a4:bf:eb:07:aa:68:39:63:76:e5:ae:fd:ab:
e1:1b:d1:0e:56:10:80:a5:ba:ba:2c:d2:d1:1b:12:
e6:ff:b1:1c:cc:12:af:5c:2f:69:16:0b:f0:a0:6c:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:6E:09:58:D8:CB:74:8B:F2:FF:F6:58:95:D7:57:69:7F:96:25
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:88:50:57:ee:43:8d:cb:b9:5c:0d:f2:52:9d:f4:2a:c5:a7:
7a:00:d5:0c:da:52:d8:eb:af:b0:c8:ce:ce:48:4d:24:27:a9:
8a:be:66:8f:72:f5:28:93:df:17:3d:ba:38:b8:47:76:31:1b:
96:a3:e7:cf:6a:d1:62:39:22:df:58:c5:3a:f5:ca:d2:b2:e4:
9f:57:7c:36:37:32:74:d5:cd:92:b1:eb:3c:76:0a:d6:ab:99:
cb:cd:b8:1c:89:39:25:e3:86:5e:a4:87:62:16:0c:bb:e1:b3:
30:07:38:a8:a3:07:9a:23:21:45:03:9c:13:49:2b:af:0d:68:
09:0a:25:69:ce:63:c4:16:21:67:d9:19:3e:17:52:f9:fb:dd:
75:bc:88:d5:d7:b4:4e:fc:cb:90:25:e8:83:99:ca:76:13:4b:
79:38:54:32:39:54:f2:ae:b9:eb:ef:98:d5:04:05:ff:7a:a2:
b7:1a:6a:77:fb:8d:d3:c3:3b:df:3a:63:19:c8:5f:2b:8a:bd:
7a:e4:62:6f:7e:49:4b:16:b3:97:ad:a4:2f:c3:17:28:e7:5e:
54:9f:89:70:4a:bd:7b:21:33:ad:64:3a:39:ad:ca:a7:1b:17:
23:45:11:07:28:65:81:50:58:71:a7:a3:64:46:57:f1:a8:5c:
db:92:34:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9a0QsHI9Li81l+wc7OCejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0
ZTBjOTkwHhcNMjUxMDE5MTcwMTI5WhcNMjUxMDIwMTcwMTI5WjAzMTEwLwYDVQQD
Eyg4NWFkNmUwOTU4ZDhjYjc0OGJmMmZmZjY1ODk1ZDc1NzY5N2Y5NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHp8YDwohxYM/5jpDbnH4oFOaS9d
Z4BAu4vU0VSWrnV67oSwWB8D+qzAYs4VubWfcy0TdNGG/5WWOu6DGPCROBMfujm7
h1tmvBfAQOAVNInlGIK+bfrbGaMMQEF1lFL+9JN6xhS3IhaedPZLOsLjzxk1nmJf
fJ3Lopb7phiSm6QFYUgomDwTcmzS0ucEH74bbetU1g15OgsWF4Y/qsL22JxFRVgp
x7BTDEht2HTS4rhvLYxZnTXEvdhGwnCPThH320UacptGwGICcriOyc2QYIpQ6KS/
6weqaDljduWu/avhG9EOVhCApbq6LNLRGxLm/7EczBKvXC9pFgvwoGzk3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWtbglY2Mt0i/L/9liV11dpf5YlMB8GA1UdIwQY
MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt
OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1
LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYhQV+5D
jcu5XA3yUp30KsWnegDVDNpS2OuvsMjOzkhNJCepir5mj3L1KJPfFz26OLhHdjEb
lqPnz2rRYjki31jFOvXK0rLkn1d8NjcydNXNkrHrPHYK1quZy824HIk5JeOGXqSH
YhYMu+GzMAc4qKMHmiMhRQOcE0krrw1oCQolac5jxBYhZ9kZPhdS+fvddbyI1de0
TvzLkCXog5nKdhNLeThUMjlU8q656++Y1QQF/3qitxpqd/uN08M73zpjGchfK4q9
euRib35JSxazl62kL8MXKOdeVJ+JcEq9eyEzrWQ6Oa3KpxsXI0URByhlgVBYcaej
ZEZX8ahc25I0Zw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:03 2025 by rpki-client