Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: QV1lD5pgnEhnukQmaUIAII3CLv55uwgrmz4dYTxTJSM=
Subject key identifier: FD:E5:59:5C:FF:AF:B1:CF:47:8A:67:11:E9:1B:BD:8C:97:47:90:1D
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 0199FEEB88F32AD2F6AAF6DA8CA4C9FA2387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 05A8
Signing time: Mon 20 Oct 2025 00:01:12 +0000
Manifest this update: Mon 20 Oct 2025 00:01:12 +0000
Manifest next update: Tue 21 Oct 2025 00:01:12 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: 8lFi0ahMdV9o2p03ZhPm6JOA6e1lbYlysoT3ef+v2QA=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:88:f3:2a:d2:f6:aa:f6:da:8c:a4:c9:fa:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Oct 20 00:01:12 2025 GMT
Not After : Oct 21 00:01:12 2025 GMT
Subject: CN=fde5595cffafb1cf478a6711e91bbd8c9747901d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:d7:0c:77:41:a2:f3:9a:e2:18:79:1e:ba:
1e:9b:9c:2d:fc:80:a9:db:9d:13:f4:1c:e0:b1:79:
a5:71:de:81:59:ce:cc:c5:ef:39:4f:89:06:29:d0:
cc:eb:73:6b:05:cd:db:13:69:0b:19:9b:45:9a:7f:
c0:a0:68:b7:13:dc:16:2b:6e:2f:52:bf:9b:50:82:
0e:7c:52:43:9f:6e:c1:19:79:fd:bf:22:de:aa:55:
dc:cf:f6:eb:14:62:bc:cb:4b:7c:0c:35:e1:1b:e5:
5c:49:9f:fb:28:d6:28:87:01:4c:41:41:d0:e4:42:
22:6b:b7:e2:f8:02:24:0e:a4:83:01:86:df:a9:2a:
95:56:f7:d8:11:27:cf:81:46:13:f3:26:82:41:fa:
74:33:b7:02:2f:e6:12:f4:1c:e3:33:34:8f:d1:1f:
49:b1:ef:88:f0:2c:fb:62:e9:80:f2:84:9a:dd:37:
e4:75:6c:9e:ea:05:56:5f:54:05:7c:c0:fa:0e:54:
9f:47:36:4b:82:30:cd:55:77:ce:68:36:77:0e:b0:
fb:3f:df:e1:42:e7:a3:34:8b:68:bb:eb:d3:9d:d9:
45:a2:b3:a8:e2:3c:b2:96:6b:56:8d:82:c9:11:fc:
8c:54:27:e8:01:5e:a8:f8:71:c9:0d:e3:b6:c7:d8:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:59:5C:FF:AF:B1:CF:47:8A:67:11:E9:1B:BD:8C:97:47:90:1D
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:31:18:53:98:20:41:7a:7c:58:18:dc:96:f6:8c:a6:75:98:
07:dc:57:42:80:37:cd:5a:5f:ce:e6:3e:65:62:6e:cc:b3:71:
fb:18:4a:f9:17:04:f1:9f:14:dd:fe:af:b0:eb:c7:2e:60:f1:
f3:7a:27:cc:8d:5a:8b:71:7c:14:79:4e:32:da:2c:14:98:23:
67:26:6f:6b:86:6a:a4:f3:cc:06:9a:1d:aa:6e:43:68:17:5f:
41:b9:60:66:ab:0b:bf:e1:59:2a:9b:0c:60:49:9e:6b:3b:4b:
68:28:d6:b8:2f:c2:d8:1b:e1:6e:c5:32:23:66:69:93:7e:e0:
b1:9e:73:86:3c:48:87:50:3a:35:c4:a9:f9:9e:f2:10:29:09:
51:b7:0f:a3:9d:ef:14:31:dc:05:71:c0:1b:b4:bd:a0:32:b1:
87:13:48:fd:39:45:e3:2f:95:00:08:eb:7f:d4:ad:26:eb:c4:
37:ec:c0:f4:26:1c:9f:1c:93:af:eb:5f:85:73:e6:f3:43:20:
ab:62:4f:2d:af:34:e1:46:5c:64:fc:cd:da:0a:cb:6d:50:75:
7c:14:f7:c3:3e:27:da:16:34:c8:9d:3d:38:4d:f9:0c:04:35:
6c:c6:af:c0:4d:67:f3:18:54:a3:be:7c:3a:68:6e:92:f8:d8:
f0:ed:77:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+64jzKtL2qvbajKTJ+iOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTA1Y2IyOTY3MWQzMGE1N2EzZTg0NDRmNDFmZTAzNGNm
NzUyMzEwHhcNMjUxMDIwMDAwMTEyWhcNMjUxMDIxMDAwMTEyWjAzMTEwLwYDVQQD
EyhmZGU1NTk1Y2ZmYWZiMWNmNDc4YTY3MTFlOTFiYmQ4Yzk3NDc5MDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP3XDHdBovOa4hh5Hroem5wt/ICp
250T9BzgsXmlcd6BWc7Mxe85T4kGKdDM63NrBc3bE2kLGZtFmn/AoGi3E9wWK24v
Ur+bUIIOfFJDn27BGXn9vyLeqlXcz/brFGK8y0t8DDXhG+VcSZ/7KNYohwFMQUHQ
5EIia7fi+AIkDqSDAYbfqSqVVvfYESfPgUYT8yaCQfp0M7cCL+YS9BzjMzSP0R9J
se+I8Cz7YumA8oSa3TfkdWye6gVWX1QFfMD6DlSfRzZLgjDNVXfOaDZ3DrD7P9/h
QuejNItou+vTndlForOo4jyylmtWjYLJEfyMVCfoAV6o+HHJDeO2x9hn3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3lWVz/r7HPR4pnEekbvYyXR5AdMB8GA1UdIwQY
MBaAFDugXLKWcdMKV6PoRE9B/gNM91IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZCY3NwWngwd3BYby1oRVQwSC1BMHozVWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wOWVjODMtODVlMi00ZTljLWE3OWMt
NGM5NTlmNjA3N2EwLzEvTzZCY3NwWngwd3BYby1oRVQwSC1BMHozVWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wOWVjODMtODVlMi00ZTljLWE3OWMtNGM5NTlmNjA3N2Ew
LzEvTzZCY3NwWngwd3BYby1oRVQwSC1BMHozVWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADEYU5gg
QXp8WBjclvaMpnWYB9xXQoA3zVpfzuY+ZWJuzLNx+xhK+RcE8Z8U3f6vsOvHLmDx
83onzI1ai3F8FHlOMtosFJgjZyZva4ZqpPPMBpodqm5DaBdfQblgZqsLv+FZKpsM
YEmeaztLaCjWuC/C2BvhbsUyI2Zpk37gsZ5zhjxIh1A6NcSp+Z7yECkJUbcPo53v
FDHcBXHAG7S9oDKxhxNI/TlF4y+VAAjrf9StJuvEN+zA9CYcnxyTr+tfhXPm80Mg
q2JPLa804UZcZPzN2grLbVB1fBT3wz4n2hY0yJ09OE35DAQ1bMavwE1n8xhUo758
OmhukvjY8O139g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:00 2025 by rpki-client