Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: NOdgNW2jP4zPB4Kj5ckBFNm5p2/UGY2J+rzeX2QnClM=
Subject key identifier: 57:49:F4:4C:22:91:8D:BE:2A:31:3C:06:D3:B8:44:CF:2E:E9:2A:B7
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 0199FB0F3E0A790F97EF91B5743041BD6031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 09F6
Signing time: Sun 19 Oct 2025 06:01:43 +0000
Manifest this update: Sun 19 Oct 2025 06:01:43 +0000
Manifest next update: Mon 20 Oct 2025 06:01:43 +0000
Files and hashes: 1: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: vAsWpGWwOfIf9nPXDltrl6+nT7sOn9+dsD/Iw6yjW98=)
2: zPHYYf64cnazRpEP2DM-tC5zi20.roa (hash: KRY5tyMHgi4pvRx1DdmJaDKEtzRxICuicXJ6HWfF+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:3e:0a:79:0f:97:ef:91:b5:74:30:41:bd:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Oct 19 06:01:43 2025 GMT
Not After : Oct 20 06:01:43 2025 GMT
Subject: CN=5749f44c22918dbe2a313c06d3b844cf2ee92ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:05:89:3d:2c:79:79:e4:e2:a9:89:76:d3:
8c:95:91:78:cc:a4:fe:ad:72:fb:b8:a4:66:00:84:
9a:b3:81:fa:f3:0e:44:19:d3:84:ac:da:35:b8:a6:
39:57:69:82:57:e1:db:d7:7b:35:e7:de:a2:dd:40:
16:8a:6a:eb:25:57:09:f8:8f:38:9e:0c:be:86:0c:
00:6c:e6:a4:56:4c:57:79:db:06:d1:fd:54:ce:1a:
1b:28:af:4e:8a:9c:7a:94:37:4b:b0:75:5a:8f:29:
51:1e:61:25:df:eb:67:00:f3:08:63:08:a4:e0:22:
27:e4:7e:b9:b3:67:7d:c7:ef:d5:87:62:10:ca:2a:
90:8c:51:1a:a3:f0:ce:65:78:bd:8e:4d:09:cd:f7:
85:64:f7:3c:68:02:d9:7a:dc:06:64:c9:e0:a1:5e:
01:07:19:73:fa:b7:ff:e5:97:c2:bb:92:a1:52:ab:
fb:59:d3:a0:82:70:f9:df:09:aa:9f:c3:05:9d:46:
03:1d:d9:2d:8f:eb:64:cc:53:4b:a1:62:68:c8:5d:
07:60:f6:5a:83:f7:27:96:03:dd:ca:21:ab:42:92:
c3:f4:d9:ad:77:50:4a:93:a4:c2:49:05:b6:26:a0:
82:6f:7d:eb:6e:09:af:12:a8:4d:f0:1f:ad:96:fb:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:F4:4C:22:91:8D:BE:2A:31:3C:06:D3:B8:44:CF:2E:E9:2A:B7
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4d:92:4b:68:4d:9d:bb:f9:46:e3:81:fe:67:6e:09:47:c8:
89:ee:bc:52:0b:82:47:b9:ec:5d:12:25:5a:47:3c:b7:67:7f:
cd:a6:5a:29:f6:8a:05:94:96:61:45:fe:04:a7:5d:c6:de:0f:
d1:60:ae:ab:a9:ec:96:73:b4:79:54:92:d5:f3:07:8e:07:97:
c0:60:12:19:5c:70:f0:6c:d9:3d:05:d0:7a:c6:f9:ab:73:4c:
a7:01:ef:87:dd:b3:91:ef:08:12:d2:86:1c:6f:9b:12:ca:da:
5e:46:ee:78:71:ad:17:b5:e5:6b:77:3e:a7:bf:ab:a8:0e:f3:
2d:d8:6e:d3:28:fb:f3:0c:bd:2d:41:98:08:3e:1b:1a:93:8b:
d4:9b:8d:6c:cf:82:c5:e8:2a:5b:b4:85:79:75:2e:a5:b8:ab:
10:09:52:f3:99:29:64:b7:4d:ce:07:08:cb:c5:a8:fe:94:d0:
32:68:1f:1a:12:29:37:ab:82:31:28:c0:7d:ae:5f:c3:0f:f6:
29:dd:bf:d5:57:8e:42:35:d2:42:d1:33:69:65:bf:c5:8c:5a:
60:10:e7:e3:7f:9a:94:78:ad:33:6a:20:e7:c6:01:b4:e7:6a:
68:ca:47:e6:4e:95:ec:c7:ee:d0:d4:4e:a1:ee:7c:39:1a:48:
5e:02:1b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dz4KeQ+X75G1dDBBvWAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjFjOGI2MWZmNGFiOTc1YTJmNmM2N2QwYmNlNjM3OTM2
MmUyZmUwHhcNMjUxMDE5MDYwMTQzWhcNMjUxMDIwMDYwMTQzWjAzMTEwLwYDVQQD
Eyg1NzQ5ZjQ0YzIyOTE4ZGJlMmEzMTNjMDZkM2I4NDRjZjJlZTkyYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDwFiT0seXnk4qmJdtOMlZF4zKT+
rXL7uKRmAISas4H68w5EGdOErNo1uKY5V2mCV+Hb13s1596i3UAWimrrJVcJ+I84
ngy+hgwAbOakVkxXedsG0f1UzhobKK9Oipx6lDdLsHVajylRHmEl3+tnAPMIYwik
4CIn5H65s2d9x+/Vh2IQyiqQjFEao/DOZXi9jk0JzfeFZPc8aALZetwGZMngoV4B
Bxlz+rf/5ZfCu5KhUqv7WdOggnD53wmqn8MFnUYDHdktj+tkzFNLoWJoyF0HYPZa
g/cnlgPdyiGrQpLD9Nmtd1BKk6TCSQW2JqCCb33rbgmvEqhN8B+tlvvIFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdJ9EwikY2+KjE8BtO4RM8u6Sq3MB8GA1UdIwQY
MBaAFDthyLYf9KuXWi9sZ9C85jeTYuL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYzBlZDEtNTY2Ni00YmI3LWJiN2Mt
N2I2Mjc1ODJmZDJkLzEvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mYzBlZDEtNTY2Ni00YmI3LWJiN2MtN2I2Mjc1ODJmZDJk
LzEvTzJISXRoXzBxNWRhTDJ4bjBMem1ONU5pNHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE2SS2hN
nbv5RuOB/mduCUfIie68UguCR7nsXRIlWkc8t2d/zaZaKfaKBZSWYUX+BKddxt4P
0WCuq6nslnO0eVSS1fMHjgeXwGASGVxw8GzZPQXQesb5q3NMpwHvh92zke8IEtKG
HG+bEsraXkbueHGtF7Xla3c+p7+rqA7zLdhu0yj78wy9LUGYCD4bGpOL1JuNbM+C
xegqW7SFeXUupbirEAlS85kpZLdNzgcIy8Wo/pTQMmgfGhIpN6uCMSjAfa5fww/2
Kd2/1VeOQjXSQtEzaWW/xYxaYBDn43+alHitM2og58YBtOdqaMpH5k6V7Mfu0NRO
oe58ORpIXgIbbw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:49 2025 by rpki-client