Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: 7u62dkuj9g5oj1cNh0wEY/5Napc7OEbEzclvCKzbREw=
Subject key identifier: 67:F7:40:52:45:50:58:5F:79:AA:EB:6A:92:04:04:5E:64:38:1D:3C
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 0199FBEA89D809FE289CD9B30DE352A63A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 0F64
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=)
2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: 0llenQfvOd46vtX5ueY93z84gAPAHGNsGFlVzVx+Ud8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:89:d8:09:fe:28:9c:d9:b3:0d:e3:52:a6:3a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=67f740524550585f79aaeb6a9204045e64381d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:1b:59:71:8a:77:27:fe:a2:5a:7d:50:78:
d3:b4:ed:2f:73:b2:76:51:f7:fc:50:39:c6:7d:d3:
5c:cf:01:c6:f6:dc:c2:c3:25:4d:6d:f7:1d:50:a3:
a0:a6:72:3f:d8:d6:62:fc:0d:5b:d6:52:07:34:32:
9a:a1:2f:5e:ba:bc:0a:41:47:2c:b9:7b:4c:a4:98:
b1:f5:d7:df:dd:20:2b:51:9c:8c:b1:61:7e:14:b6:
6d:38:46:fd:64:f2:cd:98:c7:3d:bb:eb:74:2e:a7:
2d:47:72:96:65:b5:bb:0b:1c:37:de:b8:58:7e:d1:
35:62:76:c1:cb:50:ed:06:08:24:83:b6:2c:01:d0:
ed:40:7c:88:0c:e9:e7:d4:8e:c1:27:3d:7f:36:97:
91:c1:dd:11:c0:04:1c:bb:3d:ce:6a:d6:7b:b6:89:
fa:0c:21:4d:10:38:49:0d:76:d1:0c:26:e3:70:e7:
ef:e1:e9:6c:6d:00:1a:5c:7a:57:3d:c4:5d:f5:ed:
b9:64:ab:e8:af:6c:2f:01:16:7a:41:84:98:ec:d9:
fb:c3:b3:c6:31:63:cd:1d:3f:25:69:b3:b5:f8:ed:
9b:c0:d9:60:b7:46:df:24:74:b6:80:37:c9:b8:37:
c6:47:5e:91:7f:92:56:81:3a:43:e9:4e:82:4c:56:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F7:40:52:45:50:58:5F:79:AA:EB:6A:92:04:04:5E:64:38:1D:3C
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:74:55:ba:af:4c:f8:ee:45:45:69:17:dc:59:cc:ca:f7:b1:
2e:26:aa:37:ff:5f:7e:44:46:b0:f5:87:70:55:4e:71:8c:0a:
37:d8:27:b9:20:41:91:8b:d9:55:1d:7d:ee:6b:26:d7:18:9c:
fc:91:16:04:5b:74:b6:92:a7:ee:34:0b:ba:db:74:23:fd:cd:
95:45:e7:00:20:a5:d0:e8:8b:33:c7:fc:12:91:b0:3a:a8:4d:
28:c7:f6:8a:c0:24:ce:06:89:69:ec:48:e4:7f:98:59:4f:bb:
59:e6:53:53:95:de:0b:fc:ca:7a:5f:17:62:34:07:b4:bd:6e:
62:e1:8c:ad:a3:f0:6e:ee:cd:3a:fb:43:23:21:b0:d3:ec:83:
df:30:14:0e:09:5d:c6:c3:fc:04:d7:40:19:47:f5:b7:d0:ac:
2a:9a:2b:21:90:8f:98:1d:35:02:df:5b:05:39:f0:40:48:d0:
59:0e:b0:65:6e:5f:b8:f4:1e:00:fa:b8:15:f7:5c:e9:69:7f:
c3:fd:6a:60:d9:80:66:2c:3a:18:eb:20:f9:f6:9e:c9:e5:1f:
23:18:a8:aa:10:07:67:2b:69:9a:97:7d:be:83:93:30:9e:34:
1e:d7:6d:cf:49:2e:e5:8a:6b:58:15:91:c7:43:09:cd:84:1c:
42:51:51:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76onYCf4onNmzDeNSpjqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj
Y2ZlNzUwHhcNMjUxMDE5MTAwMTE1WhcNMjUxMDIwMTAwMTE1WjAzMTEwLwYDVQQD
Eyg2N2Y3NDA1MjQ1NTA1ODVmNzlhYWViNmE5MjA0MDQ1ZTY0MzgxZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk14bWXGKdyf+olp9UHjTtO0vc7J2
Uff8UDnGfdNczwHG9tzCwyVNbfcdUKOgpnI/2NZi/A1b1lIHNDKaoS9eurwKQUcs
uXtMpJix9dff3SArUZyMsWF+FLZtOEb9ZPLNmMc9u+t0LqctR3KWZbW7Cxw33rhY
ftE1YnbBy1DtBggkg7YsAdDtQHyIDOnn1I7BJz1/NpeRwd0RwAQcuz3OatZ7ton6
DCFNEDhJDXbRDCbjcOfv4elsbQAaXHpXPcRd9e25ZKvor2wvARZ6QYSY7Nn7w7PG
MWPNHT8labO1+O2bwNlgt0bfJHS2gDfJuDfGR16Rf5JWgTpD6U6CTFaQ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf3QFJFUFhfearrapIEBF5kOB08MB8GA1UdIwQY
MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt
ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh
LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnRVuq9M
+O5FRWkX3FnMyvexLiaqN/9ffkRGsPWHcFVOcYwKN9gnuSBBkYvZVR197msm1xic
/JEWBFt0tpKn7jQLutt0I/3NlUXnACCl0OiLM8f8EpGwOqhNKMf2isAkzgaJaexI
5H+YWU+7WeZTU5XeC/zKel8XYjQHtL1uYuGMraPwbu7NOvtDIyGw0+yD3zAUDgld
xsP8BNdAGUf1t9CsKporIZCPmB01At9bBTnwQEjQWQ6wZW5fuPQeAPq4Ffdc6Wl/
w/1qYNmAZiw6GOsg+faeyeUfIxioqhAHZytpmpd9voOTMJ40Htdtz0ku5YprWBWR
x0MJzYQcQlFRag==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:16 2025 by rpki-client