Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: Az/coqeI9GceulVwmqhOd9qhlVL1NKRrK3X347s0BIg=
Subject key identifier: B8:4F:5D:7F:5F:4E:EE:BB:08:20:5E:10:4B:FE:5B:04:43:AC:A5:C8
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 0199FBEC0E60E474FD9935788A9E59D8B45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: c4Qb2xyjkGTGkMnfap5DA0iFODoI8IGDXt8rHfusC6Y=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0e:60:e4:74:fd:99:35:78:8a:9e:59:d8:b4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=b84f5d7f5f4eeebb08205e104bfe5b0443aca5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:31:53:5f:b9:84:af:c0:61:1b:98:12:1c:
34:08:c8:67:8c:55:9b:69:1c:4d:7f:57:3a:5b:7e:
23:e2:52:68:a0:55:95:ea:34:98:05:30:41:70:bb:
39:e7:ea:12:ba:38:af:3e:6b:08:27:17:71:28:a8:
d6:2c:cc:2c:37:91:e5:33:3f:ec:55:25:b2:ce:fc:
db:c7:57:f2:7b:65:b0:e7:ed:70:f0:74:52:0b:91:
51:23:22:38:0a:81:b9:fd:30:67:dc:36:d5:f7:55:
7b:93:5b:6e:23:5e:b8:76:a4:ce:88:50:39:b9:a7:
39:68:d7:89:e5:0a:30:0e:64:52:0f:f3:92:5b:40:
1b:e9:1a:62:81:d5:8d:85:f2:35:21:83:02:44:ca:
f3:41:1d:c8:1f:21:4e:fb:df:08:c9:56:f2:eb:6b:
63:9c:dc:e0:f3:c7:62:87:78:65:34:42:7f:6c:2d:
4c:02:9a:a3:ee:17:d8:d3:73:2e:46:c2:1d:9f:b4:
9e:f0:8c:fd:1f:20:13:28:5f:5f:e8:8a:60:a8:be:
80:94:16:53:7b:85:db:1f:01:6c:95:8a:92:de:1c:
0d:5d:5e:a7:58:07:37:28:3b:13:52:4a:86:6a:e0:
d9:d8:8c:ad:cb:ae:db:62:78:2a:5f:51:4a:fa:ce:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:5D:7F:5F:4E:EE:BB:08:20:5E:10:4B:FE:5B:04:43:AC:A5:C8
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ce:03:86:36:5b:36:c6:1f:e5:cc:27:56:7c:1b:f9:59:e0:
5d:bb:fd:2c:c0:63:e8:9c:ec:90:f3:9e:af:e6:ea:56:ff:5d:
a0:ac:91:0a:d8:7f:89:5b:dc:d6:a7:3f:3a:c9:e1:0d:4f:7f:
a4:73:1c:3e:76:67:8f:a7:70:a7:12:85:c6:0d:59:bf:7c:0f:
54:c3:3d:1d:93:e6:bd:53:09:92:df:83:0b:56:f4:fa:08:48:
c2:93:0a:19:e1:34:4e:29:81:07:84:e7:07:46:bd:2d:e6:51:
f7:74:62:6a:50:64:48:8b:ed:13:09:96:83:75:93:e4:d7:72:
31:d3:8c:82:fa:9a:c8:90:01:25:c3:de:03:50:f8:82:5c:28:
ed:bf:cc:e9:eb:3f:4a:13:b5:91:40:16:62:9e:91:06:c3:5d:
5a:c9:97:45:cf:0c:a7:10:cc:d7:25:23:a4:35:ce:7d:bf:83:
c7:f3:a8:bb:f6:80:fc:d0:a9:61:af:7c:11:9a:ec:d6:b0:b4:
35:ca:91:69:eb:dc:e9:13:71:65:2b:6b:80:40:ac:37:31:a0:
d9:d3:b4:d1:aa:09:33:2f:cb:cf:b2:39:f8:b8:18:c0:44:ed:
2d:db:12:f9:94:4f:4c:20:5e:38:74:6e:42:91:01:5e:dc:08:
97:85:0e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77A5g5HT9mTV4ip5Z2LRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGZkNzYwNGRmYTBlYjhhZTIwZTkwZmNmMTMwMzkzYjhh
ODU2NGEwHhcNMjUxMDE5MTAwMjU1WhcNMjUxMDIwMTAwMjU1WjAzMTEwLwYDVQQD
EyhiODRmNWQ3ZjVmNGVlZWJiMDgyMDVlMTA0YmZlNWIwNDQzYWNhNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtksxU1+5hK/AYRuYEhw0CMhnjFWb
aRxNf1c6W34j4lJooFWV6jSYBTBBcLs55+oSujivPmsIJxdxKKjWLMwsN5HlMz/s
VSWyzvzbx1fye2Ww5+1w8HRSC5FRIyI4CoG5/TBn3DbV91V7k1tuI164dqTOiFA5
uac5aNeJ5QowDmRSD/OSW0Ab6RpigdWNhfI1IYMCRMrzQR3IHyFO+98IyVby62tj
nNzg88dih3hlNEJ/bC1MApqj7hfY03MuRsIdn7Se8Iz9HyATKF9f6IpgqL6AlBZT
e4XbHwFslYqS3hwNXV6nWAc3KDsTUkqGauDZ2Iyty67bYngqX1FK+s5ffwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhPXX9fTu67CCBeEEv+WwRDrKXIMB8GA1UdIwQY
MBaAFDvf12BN+g64riDpD88TA5O4qFZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2Mt
ZWY2YzllYWQ2MTFjLzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2MtZWY2YzllYWQ2MTFj
LzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJc4DhjZb
NsYf5cwnVnwb+VngXbv9LMBj6JzskPOer+bqVv9doKyRCth/iVvc1qc/OsnhDU9/
pHMcPnZnj6dwpxKFxg1Zv3wPVMM9HZPmvVMJkt+DC1b0+ghIwpMKGeE0TimBB4Tn
B0a9LeZR93RialBkSIvtEwmWg3WT5NdyMdOMgvqayJABJcPeA1D4glwo7b/M6es/
ShO1kUAWYp6RBsNdWsmXRc8MpxDM1yUjpDXOfb+Dx/Oou/aA/NCpYa98EZrs1rC0
NcqRaevc6RNxZStrgECsNzGg2dO00aoJMy/Lz7I5+LgYwETtLdsS+ZRPTCBeOHRu
QpEBXtwIl4UOZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:59 2025 by rpki-client