Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier: 6i/98jvCvauY9Lf4aAAwoGjFSopwIFlALDXsouX2O0g=
Subject key identifier: 3B:B9:E8:B9:1F:EC:45:17:5A:E8:CF:91:17:D9:01:50:EC:F4:FA:8F
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer: /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial: 0199FCC6964BB96AE070FE6815B89BF2DC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number: 111A
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=)
2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: Vq3YQvQEoRE9ZCvL8mqeiNPL2STiE6VTx2FHf07gbm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:96:4b:b9:6a:e0:70:fe:68:15:b8:9b:f2:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=3bb9e8b91fec45175ae8cf9117d90150ecf4fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:ff:d4:f7:a1:d2:02:44:d8:fc:78:16:c4:
59:38:8a:8a:c1:49:73:a9:10:93:34:58:66:4a:47:
eb:31:5a:ca:0b:0f:fb:2e:32:a6:22:f8:fd:15:f1:
1c:4e:97:12:49:fe:00:7e:65:b4:93:76:9e:21:2e:
63:99:65:47:b3:26:8c:a6:22:80:9e:e2:5b:f6:80:
d1:12:ce:c7:dd:53:53:11:5e:0e:39:42:f0:76:dc:
f6:09:11:4e:5d:d2:3a:0d:ba:a0:32:08:09:3b:cd:
a2:f2:67:d7:f5:d9:f5:7c:2d:7a:6a:d7:ce:5c:3a:
34:8c:47:ce:b9:e1:d2:2f:e4:e6:35:35:d0:29:75:
d3:44:66:d1:6a:5f:44:a7:11:34:7f:25:b4:00:45:
a9:fe:8b:52:49:2b:d4:cd:86:67:52:99:5e:5e:84:
10:6d:a4:b4:a4:11:d0:e9:f3:2e:a4:ef:ef:e4:ba:
da:28:34:b2:7b:d9:e8:24:01:b8:e1:c9:44:e9:fa:
12:8f:82:f7:eb:70:72:fa:be:ce:f5:84:4f:be:42:
d8:aa:f5:96:61:54:13:b4:29:c9:59:50:14:98:50:
b2:f7:fd:32:30:60:a4:56:71:e7:fd:16:94:7a:bc:
21:c8:d6:16:bc:7f:cf:19:3e:f7:f0:55:bd:02:cc:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:E8:B9:1F:EC:45:17:5A:E8:CF:91:17:D9:01:50:EC:F4:FA:8F
X509v3 Authority Key Identifier:
keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3d:3b:d3:e3:80:de:a1:29:81:b1:5d:0b:f6:41:ef:69:46:
ce:29:e8:e1:8c:0f:0e:0a:a5:a8:fe:8d:39:d1:c9:2f:6a:b5:
38:48:91:27:8f:eb:5c:14:70:d2:b7:71:01:f4:77:9d:3c:f9:
4b:e1:99:b7:04:4e:f8:fc:71:6a:e0:d7:42:62:95:e8:ba:97:
d7:01:d3:36:0a:86:74:cc:16:5d:a3:56:48:32:bc:86:12:6d:
6f:cb:87:83:03:d4:0f:77:e6:d5:d3:5b:47:24:ce:8c:83:18:
75:d6:67:16:b4:55:c7:44:76:21:53:f8:4d:37:0b:e0:35:1b:
98:46:60:59:26:e7:0a:47:20:4b:c6:5f:45:30:21:c2:9f:6b:
5e:d8:ee:b3:83:4f:c9:bf:e3:20:04:3f:0a:45:c1:aa:cc:43:
c8:34:93:7c:69:43:42:a8:ac:e2:e7:3b:33:a3:60:3d:ee:50:
43:a8:8a:08:60:b8:6a:a6:61:08:76:4c:db:aa:b7:3c:25:27:
17:97:d9:e0:0d:0b:51:9d:26:f0:3c:8b:5d:44:11:00:0c:af:
fe:21:21:18:58:f7:c3:a0:e3:66:57:0c:c0:f1:24:0f:af:b3:
03:8b:0a:73:4b:f9:05:42:4e:74:33:50:89:01:a7:6f:71:88:
51:59:62:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpZLuWrgcP5oFbib8tx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2Q5MGNiNjM3ZDNkMmM3M2Q5OWRlYTlhNGZlODEzZTY0
ODU4NDMwHhcNMjUxMDE5MTQwMTM2WhcNMjUxMDIwMTQwMTM2WjAzMTEwLwYDVQQD
EygzYmI5ZThiOTFmZWM0NTE3NWFlOGNmOTExN2Q5MDE1MGVjZjRmYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bn/1Peh0gJE2Px4FsRZOIqKwUlz
qRCTNFhmSkfrMVrKCw/7LjKmIvj9FfEcTpcSSf4AfmW0k3aeIS5jmWVHsyaMpiKA
nuJb9oDREs7H3VNTEV4OOULwdtz2CRFOXdI6DbqgMggJO82i8mfX9dn1fC16atfO
XDo0jEfOueHSL+TmNTXQKXXTRGbRal9EpxE0fyW0AEWp/otSSSvUzYZnUpleXoQQ
baS0pBHQ6fMupO/v5LraKDSye9noJAG44clE6foSj4L363By+r7O9YRPvkLYqvWW
YVQTtCnJWVAUmFCy9/0yMGCkVnHn/RaUerwhyNYWvH/PGT738FW9AswcTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu56Lkf7EUXWujPkRfZAVDs9PqPMB8GA1UdIwQY
MBaAFDrNkMtjfT0sc9md6ppP6BPmSFhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzct
YmU4Yzc4YzA2ZmM3LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzctYmU4Yzc4YzA2ZmM3
LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjz070+OA
3qEpgbFdC/ZB72lGzino4YwPDgqlqP6NOdHJL2q1OEiRJ4/rXBRw0rdxAfR3nTz5
S+GZtwRO+PxxauDXQmKV6LqX1wHTNgqGdMwWXaNWSDK8hhJtb8uHgwPUD3fm1dNb
RyTOjIMYddZnFrRVx0R2IVP4TTcL4DUbmEZgWSbnCkcgS8ZfRTAhwp9rXtjus4NP
yb/jIAQ/CkXBqsxDyDSTfGlDQqis4uc7M6NgPe5QQ6iKCGC4aqZhCHZM26q3PCUn
F5fZ4A0LUZ0m8DyLXUQRAAyv/iEhGFj3w6DjZlcMwPEkD6+zA4sKc0v5BUJOdDNQ
iQGnb3GIUVlicw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:51 2025 by rpki-client