Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: PQ8X36XivTsJ3jgRBm2DLtjhLzOI2EL9nIJTwGnQnzo=
Subject key identifier: 90:C7:05:DF:9F:F1:54:D5:F6:C3:DE:69:9F:AC:C2:A5:BD:69:DC:43
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 0199FFC76CDFF337D21FC7EF189D34D2F9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:01:23 +0000
Manifest this update: Mon 20 Oct 2025 04:01:23 +0000
Manifest next update: Tue 21 Oct 2025 04:01:23 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: kvP5LcpWib2tUCAGiVZ7Lg8XSSQ1IJR8hrdYYVuJLVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:6c:df:f3:37:d2:1f:c7:ef:18:9d:34:d2:f9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Oct 20 04:01:23 2025 GMT
Not After : Oct 21 04:01:23 2025 GMT
Subject: CN=90c705df9ff154d5f6c3de699facc2a5bd69dc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:03:18:90:f9:49:14:e9:e9:be:18:7d:26:
f0:19:ce:1d:eb:b1:4b:d0:8c:37:3d:0f:61:b5:b6:
a3:40:cc:f1:ac:8a:75:79:5b:24:54:67:f0:c1:cb:
ff:34:63:ce:d6:24:13:af:df:99:a6:c3:c1:11:75:
c5:b2:3a:c0:8a:cb:25:33:61:a6:56:a6:02:1a:ef:
b9:23:ca:fc:52:f6:62:57:d7:07:83:f1:76:74:76:
47:67:74:52:9d:b3:56:2a:84:91:27:6c:12:ed:77:
3f:b7:4f:06:00:1f:aa:e6:ee:54:42:a3:5e:4a:6a:
34:40:b1:39:27:3c:14:3a:a7:46:21:7f:63:5b:4d:
c6:c0:16:7a:04:3b:3a:61:dc:e9:9f:47:09:1a:f9:
43:b7:7d:d6:a2:91:3d:d3:ee:c9:f9:80:d5:f7:ef:
6d:26:30:c9:ec:80:9b:0f:61:75:19:b7:bd:f9:45:
a7:e8:e2:b0:92:26:ab:4b:7f:fc:26:6d:70:12:22:
e3:bd:46:0b:d5:36:29:21:61:f1:2a:8a:93:9a:53:
9d:c9:85:ac:cd:6a:05:58:05:6d:1f:37:8c:97:50:
ab:b9:47:34:a9:d3:87:29:cb:1f:a2:cb:7d:28:3f:
15:9e:b8:ea:64:3a:bf:f3:3e:c4:70:9c:62:86:47:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C7:05:DF:9F:F1:54:D5:F6:C3:DE:69:9F:AC:C2:A5:BD:69:DC:43
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:be:7a:f9:1e:61:52:6b:9e:d9:7f:b4:2b:69:31:77:65:f2:
22:61:dd:19:26:ac:34:02:44:82:70:04:60:aa:60:00:9a:f0:
69:ef:79:bb:93:5f:3e:21:9a:ba:70:bb:1f:72:41:9d:88:74:
ef:2f:ca:da:46:87:04:cc:fe:ad:c3:ba:ed:f3:5d:af:93:9f:
83:1a:61:a3:94:2a:08:21:07:22:56:b3:4b:f5:ec:7f:df:57:
c6:cf:1d:e3:8a:41:95:52:b6:20:79:ef:40:7a:3e:e0:6e:c2:
a7:b2:cf:96:69:75:32:c0:92:d2:91:cc:5a:cc:3c:1e:2d:1e:
d8:fe:8c:55:f9:41:f6:17:51:be:41:32:c3:20:ef:cd:b8:24:
f1:57:6e:b7:ff:9c:c0:7c:fb:f8:b6:7d:8c:4a:24:ec:64:ac:
44:dd:da:3a:10:d2:f4:9c:35:b5:a6:26:ac:f2:44:5b:61:bc:
38:27:04:d8:b2:fd:f6:af:8a:77:38:a3:5d:e6:02:ed:67:07:
bd:13:0c:4b:6d:bd:9b:5f:a8:2f:ac:75:54:6f:34:8d:7a:01:
c8:11:49:bb:67:80:85:ea:cb:50:c2:ca:b4:63:8f:2e:bb:b7:
8b:db:76:8a:0d:27:1f:bd:45:51:42:bd:fc:c4:3a:f0:b5:6d:
75:3c:43:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x2zf8zfSH8fvGJ000vmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTU1NjA0NTk3YjA2YjBlYWNlODhhZmIxYTkwZmZmOTM3
ZDk3ZWEwHhcNMjUxMDIwMDQwMTIzWhcNMjUxMDIxMDQwMTIzWjAzMTEwLwYDVQQD
Eyg5MGM3MDVkZjlmZjE1NGQ1ZjZjM2RlNjk5ZmFjYzJhNWJkNjlkYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8QDGJD5SRTp6b4YfSbwGc4d67FL
0Iw3PQ9htbajQMzxrIp1eVskVGfwwcv/NGPO1iQTr9+ZpsPBEXXFsjrAisslM2Gm
VqYCGu+5I8r8UvZiV9cHg/F2dHZHZ3RSnbNWKoSRJ2wS7Xc/t08GAB+q5u5UQqNe
Smo0QLE5JzwUOqdGIX9jW03GwBZ6BDs6Ydzpn0cJGvlDt33WopE90+7J+YDV9+9t
JjDJ7ICbD2F1Gbe9+UWn6OKwkiarS3/8Jm1wEiLjvUYL1TYpIWHxKoqTmlOdyYWs
zWoFWAVtHzeMl1CruUc0qdOHKcsfost9KD8VnrjqZDq/8z7EcJxihkfJlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDHBd+f8VTV9sPeaZ+swqW9adxDMB8GA1UdIwQY
MBaAFKOlVgRZewaw6s6Ir7GpD/+TfZfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEt
ZmFjNGJiODNlZDI4LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEtZmFjNGJiODNlZDI4
LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL56+R5h
Umue2X+0K2kxd2XyImHdGSasNAJEgnAEYKpgAJrwae95u5NfPiGaunC7H3JBnYh0
7y/K2kaHBMz+rcO67fNdr5Ofgxpho5QqCCEHIlazS/Xsf99Xxs8d44pBlVK2IHnv
QHo+4G7Cp7LPlml1MsCS0pHMWsw8Hi0e2P6MVflB9hdRvkEywyDvzbgk8Vdut/+c
wHz7+LZ9jEok7GSsRN3aOhDS9Jw1taYmrPJEW2G8OCcE2LL99q+KdzijXeYC7WcH
vRMMS229m1+oL6x1VG80jXoByBFJu2eAherLUMLKtGOPLru3i9t2ig0nH71FUUK9
/MQ68LVtdTxDow==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:56 2025 by rpki-client