Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: 0lc4sDiMzO95fudA+T/Zr6X5Q8OQBdgixxxoBRrb0zA=
Subject key identifier: E7:3F:E2:27:4E:46:48:7E:DA:71:D6:9F:C1:6B:9F:7F:D0:9A:CE:4D
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019A0035A7FBC83B444C61AD5D1801A12208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 01A6
Signing time: Mon 20 Oct 2025 06:01:47 +0000
Manifest this update: Mon 20 Oct 2025 06:01:47 +0000
Manifest next update: Tue 21 Oct 2025 06:01:47 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: 6mkbURHJnjN5YW2dbe+BrhOqgxql4YvwTblSufPeCoQ=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:a7:fb:c8:3b:44:4c:61:ad:5d:18:01:a1:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Oct 20 06:01:47 2025 GMT
Not After : Oct 21 06:01:47 2025 GMT
Subject: CN=e73fe2274e46487eda71d69fc16b9f7fd09ace4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:0b:94:c1:f0:ce:c0:9a:ca:dd:69:b3:8a:
58:68:02:c0:ce:02:10:a0:87:95:6d:e9:36:83:56:
c2:b4:de:10:22:d1:54:8e:c3:37:b5:f2:d5:9e:0f:
2e:79:be:62:64:6b:2c:38:f1:17:2d:df:86:07:7f:
ed:4c:01:69:2a:a5:84:34:4f:08:a6:b0:af:48:19:
da:e2:65:a3:48:cd:36:09:fd:62:4e:1d:78:92:3f:
a7:da:02:ec:94:c3:94:2c:b3:13:ce:47:77:ba:46:
01:27:b5:27:18:01:78:b4:a3:5f:52:41:73:4c:ef:
9c:67:22:19:32:85:e8:8e:1f:d3:ff:c9:1e:e2:07:
4c:14:f6:29:3b:1f:6c:39:bf:6e:04:fb:7d:cb:fd:
23:2b:10:0b:8d:32:73:2e:0f:fe:ad:75:82:70:b7:
04:d4:8e:d1:9f:ca:4b:3c:98:01:70:b8:31:42:91:
c7:af:cc:3f:52:05:75:42:84:c5:c1:7c:07:c0:2f:
d4:81:d5:60:c6:a1:d1:85:3e:43:2a:a0:1f:47:94:
64:f2:1b:28:e3:1a:71:e1:ce:df:cd:82:1c:da:83:
30:c1:f2:a3:2a:d0:2b:40:15:45:da:c3:58:cb:26:
83:74:46:83:6a:b3:f0:a3:33:e9:8d:9d:ec:45:8c:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3F:E2:27:4E:46:48:7E:DA:71:D6:9F:C1:6B:9F:7F:D0:9A:CE:4D
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:50:4a:2d:4f:95:98:21:cc:6f:a6:44:7f:38:71:be:b8:fa:
3d:8b:f9:8c:f3:ab:e2:1f:20:71:27:85:80:1c:92:38:84:49:
54:c8:ea:43:51:f6:9c:8a:b4:5e:0d:8a:d6:49:f9:bb:05:13:
8a:af:63:28:b6:96:db:3c:07:6d:d8:23:b3:2a:a1:93:91:69:
fd:61:d7:38:98:75:49:a9:81:96:dc:11:37:8c:0c:c7:1b:90:
ef:eb:49:e2:5d:3a:7d:e5:7c:05:a7:af:63:aa:d3:cc:cc:84:
4c:da:a1:fa:c9:03:80:27:d4:80:03:c7:0b:d5:5a:48:67:5c:
d4:43:0a:b7:12:90:db:30:6f:d8:4c:bc:dd:95:88:30:28:f3:
05:b4:fa:74:59:4f:73:c1:e3:1e:60:f5:a5:be:d7:c2:e7:f9:
07:4b:29:7e:da:fc:24:09:2e:a4:cc:0c:92:46:9b:1e:6e:48:
b3:e7:47:8f:ec:23:15:4d:e5:f7:6c:7d:6e:a5:f7:9c:0a:4a:
ea:53:c2:80:64:eb:95:1d:96:61:f1:be:36:32:80:c6:78:c9:
be:4a:0d:97:5a:a1:e3:da:59:bf:b7:53:0c:b4:ab:22:6e:74:
43:1c:b9:10:f7:44:50:04:f1:81:c4:90:0c:b2:cb:1f:91:bd:
ec:d7:3b:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANaf7yDtETGGtXRgBoSIIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGYwZTBhOGUwMGYxYTZkOGMxYzI2NmUzZjQzNmQ0NmU3
MWU4NzcwHhcNMjUxMDIwMDYwMTQ3WhcNMjUxMDIxMDYwMTQ3WjAzMTEwLwYDVQQD
EyhlNzNmZTIyNzRlNDY0ODdlZGE3MWQ2OWZjMTZiOWY3ZmQwOWFjZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K8LlMHwzsCayt1ps4pYaALAzgIQ
oIeVbek2g1bCtN4QItFUjsM3tfLVng8ueb5iZGssOPEXLd+GB3/tTAFpKqWENE8I
prCvSBna4mWjSM02Cf1iTh14kj+n2gLslMOULLMTzkd3ukYBJ7UnGAF4tKNfUkFz
TO+cZyIZMoXojh/T/8ke4gdMFPYpOx9sOb9uBPt9y/0jKxALjTJzLg/+rXWCcLcE
1I7Rn8pLPJgBcLgxQpHHr8w/UgV1QoTFwXwHwC/UgdVgxqHRhT5DKqAfR5Rk8hso
4xpx4c7fzYIc2oMwwfKjKtArQBVF2sNYyyaDdEaDarPwozPpjZ3sRYzRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc/4idORkh+2nHWn8Frn3/Qms5NMB8GA1UdIwQY
MBaAFNAPDgqOAPGm2MHCZuP0NtRuceh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAt
NjVhYjBkMzUxZjI3LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAtNjVhYjBkMzUxZjI3
LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVBKLU+V
mCHMb6ZEfzhxvrj6PYv5jPOr4h8gcSeFgBySOIRJVMjqQ1H2nIq0Xg2K1kn5uwUT
iq9jKLaW2zwHbdgjsyqhk5Fp/WHXOJh1SamBltwRN4wMxxuQ7+tJ4l06feV8Baev
Y6rTzMyETNqh+skDgCfUgAPHC9VaSGdc1EMKtxKQ2zBv2Ey83ZWIMCjzBbT6dFlP
c8HjHmD1pb7Xwuf5B0spftr8JAkupMwMkkabHm5Is+dHj+wjFU3l92x9bqX3nApK
6lPCgGTrlR2WYfG+NjKAxnjJvkoNl1qh49pZv7dTDLSrIm50Qxy5EPdEUATxgcSQ
DLLLH5G97Nc7ew==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:53:17 2025 by rpki-client