Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: o64NAoJZHvHpcCemg/8rNGzkgs44r4gPhTw+QvTMCAE=
Subject key identifier: C2:85:AA:4C:6E:CE:9C:A1:F2:C7:D7:9C:9E:39:89:5C:C7:58:D9:C4
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 0199FEB51D23FF86D2DBEB72BD6B3F8ECE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:46 +0000
Manifest this update: Sun 19 Oct 2025 23:01:46 +0000
Manifest next update: Mon 20 Oct 2025 23:01:46 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: UtY+u/mnP3QKDPrEDtGQBIWpWIXD2j1iHzWZ/YsKw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:1d:23:ff:86:d2:db:eb:72:bd:6b:3f:8e:ce:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Oct 19 23:01:46 2025 GMT
Not After : Oct 20 23:01:46 2025 GMT
Subject: CN=c285aa4c6ece9ca1f2c7d79c9e39895cc758d9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:be:71:d6:b1:b5:23:55:be:b6:c7:b4:64:
ad:1f:15:0d:dc:10:79:cf:79:44:d0:6b:d0:54:c3:
02:7c:59:d1:a6:65:72:e7:7f:66:9b:50:81:d0:18:
cf:2b:df:db:54:ff:c4:cd:ea:ed:4b:90:b2:5c:60:
56:fc:ec:52:9e:50:bc:75:1f:ad:1b:a0:7e:6c:30:
bc:63:e0:83:7b:f2:35:90:6b:a5:3d:89:70:7c:dd:
9e:62:a6:c2:bc:65:6e:b2:8e:47:75:af:33:64:fd:
be:db:b4:81:11:a0:a8:e6:2c:c3:d4:a7:ac:06:d4:
17:5d:40:96:8e:68:db:bd:ef:2d:38:55:8b:04:91:
c0:43:70:ce:aa:a7:8f:b4:7f:e0:a2:7d:50:79:72:
77:c0:91:c1:6f:0f:69:80:0c:9e:8b:d2:96:e8:b3:
00:cb:00:2c:20:58:35:ea:7f:6d:e2:b6:10:51:eb:
f3:fb:71:68:b2:e8:5e:f3:1b:35:82:75:eb:12:7c:
88:ab:c9:89:db:17:54:63:84:c8:45:30:34:bb:6a:
41:1f:8d:27:d5:12:28:99:98:a0:5d:bf:cc:83:90:
7b:06:94:fe:f4:c7:f4:3e:ed:df:53:79:c1:37:e1:
0c:2b:e5:a6:bc:b8:a4:d2:77:e7:41:02:b1:13:cd:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:85:AA:4C:6E:CE:9C:A1:F2:C7:D7:9C:9E:39:89:5C:C7:58:D9:C4
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:28:42:e3:8d:11:bb:a7:06:cc:f8:84:7b:93:ad:eb:b3:71:
8e:d7:6e:78:45:82:83:df:21:2c:d2:2b:47:16:cf:43:e2:9f:
87:e1:4a:f0:d5:21:90:ef:a6:ab:2e:ec:32:8d:5e:68:ad:04:
4b:f0:56:a5:69:57:da:f9:fa:6b:f8:96:e2:20:73:79:46:a8:
9f:3f:6f:68:a8:35:2f:31:6d:a7:56:d2:94:73:23:70:8a:36:
83:b3:58:6e:33:de:0a:0a:c6:90:76:12:cd:1c:d7:09:b9:f9:
02:8d:58:8b:76:e8:a9:27:e2:4e:a2:99:66:fa:1e:0a:18:09:
d1:be:95:ce:cb:f7:72:03:cf:37:09:be:c8:72:4b:59:20:52:
66:41:32:89:55:2e:4a:d9:06:5f:20:f6:39:0a:17:8f:f2:02:
3d:85:d2:09:b9:51:c8:b7:e8:da:88:f5:0c:c1:80:5d:00:80:
77:23:74:c8:19:b4:0a:2e:33:38:44:5f:6b:c6:e0:16:52:08:
5b:a8:34:cc:44:87:fc:4b:c3:2b:95:bd:b9:99:e5:85:26:db:
8e:3d:fb:55:5f:8e:ef:75:cc:d8:00:35:44:8e:99:ac:48:4b:
d8:3e:fc:13:4c:e1:a6:0e:5d:27:87:dd:e9:ba:08:88:7c:fb:
de:65:3e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tR0j/4bS2+tyvWs/js49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzhhMGNhNzg5ODQyODNmYWI5ODZjOWI4MGE1YjA0MDk3
N2U1NTYwHhcNMjUxMDE5MjMwMTQ2WhcNMjUxMDIwMjMwMTQ2WjAzMTEwLwYDVQQD
EyhjMjg1YWE0YzZlY2U5Y2ExZjJjN2Q3OWM5ZTM5ODk1Y2M3NThkOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3C+cdaxtSNVvrbHtGStHxUN3BB5
z3lE0GvQVMMCfFnRpmVy539mm1CB0BjPK9/bVP/EzertS5CyXGBW/OxSnlC8dR+t
G6B+bDC8Y+CDe/I1kGulPYlwfN2eYqbCvGVuso5Hda8zZP2+27SBEaCo5izD1Kes
BtQXXUCWjmjbve8tOFWLBJHAQ3DOqqePtH/gon1QeXJ3wJHBbw9pgAyei9KW6LMA
ywAsIFg16n9t4rYQUevz+3Fosuhe8xs1gnXrEnyIq8mJ2xdUY4TIRTA0u2pBH40n
1RIomZigXb/Mg5B7BpT+9Mf0Pu3fU3nBN+EMK+WmvLik0nfnQQKxE82PWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKFqkxuzpyh8sfXnJ45iVzHWNnEMB8GA1UdIwQY
MBaAFKPIoMp4mEKD+rmGybgKWwQJd+VWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhpZ3luaVlRb1A2dVliSnVBcGJCQWwzNVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jMzM5ZGQtNDQzZi00YmE5LWE5NTkt
NjZkYjI1ZTE5OTBjLzEvbzhpZ3luaVlRb1A2dVliSnVBcGJCQWwzNVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jMzM5ZGQtNDQzZi00YmE5LWE5NTktNjZkYjI1ZTE5OTBj
LzEvbzhpZ3luaVlRb1A2dVliSnVBcGJCQWwzNVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUShC440R
u6cGzPiEe5Ot67NxjtdueEWCg98hLNIrRxbPQ+Kfh+FK8NUhkO+mqy7sMo1eaK0E
S/BWpWlX2vn6a/iW4iBzeUaonz9vaKg1LzFtp1bSlHMjcIo2g7NYbjPeCgrGkHYS
zRzXCbn5Ao1Yi3boqSfiTqKZZvoeChgJ0b6Vzsv3cgPPNwm+yHJLWSBSZkEyiVUu
StkGXyD2OQoXj/ICPYXSCblRyLfo2oj1DMGAXQCAdyN0yBm0Ci4zOERfa8bgFlII
W6g0zESH/EvDK5W9uZnlhSbbjj37VV+O73XM2AA1RI6ZrEhL2D78E0zhpg5dJ4fd
6boIiHz73mU+bA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:33 2025 by rpki-client