Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: rzNH5Na1b4+cEcnAaToirs6PWgSpmxmsCRYxqyy61p0=
Subject key identifier: 45:7A:EB:13:A7:CC:0F:7B:49:22:0A:10:2E:84:16:9F:55:EF:30:44
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 0199FC58456964D0421691927B6E18E75F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 137D
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: oQCzXhdOgpRpQbBYRRNSXaW9jTsTropDHUKa7ui8Jjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:45:69:64:d0:42:16:91:92:7b:6e:18:e7:5f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=457aeb13a7cc0f7b49220a102e84169f55ef3044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:22:b5:a0:ea:49:dc:43:b4:ef:d1:57:fe:
f9:64:6f:f6:0b:f8:49:96:06:e8:b8:c0:6c:ec:0c:
54:a6:a2:a6:4f:0b:9b:43:14:04:cf:64:33:09:0b:
cc:3a:33:dd:a0:55:ae:42:1a:14:62:63:df:d1:29:
23:6b:b9:ec:68:8a:4b:04:4f:b9:7c:9f:68:a3:07:
b1:7a:9e:35:fc:5a:2b:fe:92:4b:5a:0f:15:4e:cd:
32:63:e9:91:a6:6c:af:75:01:79:7d:a1:2a:1f:68:
a0:3c:4f:78:6a:37:e5:2d:db:70:f9:f7:1f:c4:38:
44:16:4c:af:7c:ba:9e:90:21:34:cf:05:c6:34:4d:
e5:b5:98:88:fb:47:16:32:fc:8b:66:81:3d:41:4d:
1c:24:c3:65:9a:17:7e:25:4b:c1:2a:63:7b:62:31:
2e:2e:cf:77:10:7e:b3:b4:d3:da:be:14:4e:ca:c8:
64:0d:48:b9:62:28:27:4d:6f:28:98:2d:59:f1:db:
45:11:8f:80:51:29:86:a8:1f:a0:e8:0f:bd:27:e1:
32:45:51:d1:46:e2:19:98:0a:7d:68:39:9d:46:76:
63:80:6f:7a:21:5f:ac:be:54:f2:18:cc:59:f9:93:
a9:cb:56:3b:14:e3:f2:99:1f:0e:40:37:29:8b:8b:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7A:EB:13:A7:CC:0F:7B:49:22:0A:10:2E:84:16:9F:55:EF:30:44
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1d:e2:f3:85:97:68:bc:66:54:35:78:ac:28:c4:3e:ff:b5:
d0:90:0f:a3:36:4b:d7:47:8f:28:89:6d:ab:cb:32:89:5b:42:
57:79:0b:df:e9:de:f1:48:af:3e:06:27:e2:7d:be:e5:e0:5a:
cc:78:8e:ef:5c:33:1a:8a:c1:53:9d:dd:af:11:f2:1c:5b:30:
f8:ae:a9:e3:6f:76:99:cf:c1:44:fb:cb:7c:77:3c:42:8c:77:
48:6e:9f:6a:e4:35:78:48:96:bd:1f:e5:1a:9d:ac:cc:cb:4a:
b5:fe:aa:14:e0:35:76:80:56:c0:9a:de:90:f7:a5:e8:1e:8e:
b1:0b:0c:17:16:ff:20:5c:d5:48:59:62:18:98:12:c8:ae:99:
1f:f1:ec:d2:be:f1:6d:b9:a8:ff:d8:9b:78:e0:d9:18:69:69:
2d:ed:0b:48:82:cf:d6:ef:21:82:2a:b0:2e:db:85:a1:e3:a0:
08:11:24:9c:6a:90:b5:43:37:42:86:a8:d2:92:c7:f0:33:0c:
8b:5f:8b:d4:d0:49:64:e0:df:1a:65:ab:97:88:af:87:cc:17:
8d:b0:25:f8:98:82:27:eb:32:83:3e:1f:a4:c4:cc:c0:ef:28:
40:28:7b:f9:9d:2d:a2:d8:0d:0e:ab:23:3a:22:3d:ed:b4:c3:
24:4e:21:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEVpZNBCFpGSe24Y519nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYjg1ZmUyYjJjMjY5OTFiMWYzMWM2NmZjNjdhYzBjOGEx
MDk3NDYwHhcNMjUxMDE5MTIwMTA3WhcNMjUxMDIwMTIwMTA3WjAzMTEwLwYDVQQD
Eyg0NTdhZWIxM2E3Y2MwZjdiNDkyMjBhMTAyZTg0MTY5ZjU1ZWYzMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J8itaDqSdxDtO/RV/75ZG/2C/hJ
lgbouMBs7AxUpqKmTwubQxQEz2QzCQvMOjPdoFWuQhoUYmPf0Skja7nsaIpLBE+5
fJ9oowexep41/For/pJLWg8VTs0yY+mRpmyvdQF5faEqH2igPE94ajflLdtw+fcf
xDhEFkyvfLqekCE0zwXGNE3ltZiI+0cWMvyLZoE9QU0cJMNlmhd+JUvBKmN7YjEu
Ls93EH6ztNPavhROyshkDUi5YignTW8omC1Z8dtFEY+AUSmGqB+g6A+9J+EyRVHR
RuIZmAp9aDmdRnZjgG96IV+svlTyGMxZ+ZOpy1Y7FOPymR8OQDcpi4v3xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV66xOnzA97SSIKEC6EFp9V7zBEMB8GA1UdIwQY
MBaAFKO4X+KywmmRsfMcZvxnrAyKEJdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEt
NzZiYjcxZWIwYTVhLzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEtNzZiYjcxZWIwYTVh
LzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIB3i84WX
aLxmVDV4rCjEPv+10JAPozZL10ePKIltq8syiVtCV3kL3+ne8UivPgYn4n2+5eBa
zHiO71wzGorBU53drxHyHFsw+K6p4292mc/BRPvLfHc8Qox3SG6fauQ1eEiWvR/l
Gp2szMtKtf6qFOA1doBWwJrekPel6B6OsQsMFxb/IFzVSFliGJgSyK6ZH/Hs0r7x
bbmo/9ibeODZGGlpLe0LSILP1u8hgiqwLtuFoeOgCBEknGqQtUM3Qoao0pLH8DMM
i1+L1NBJZODfGmWrl4ivh8wXjbAl+JiCJ+sygz4fpMTMwO8oQCh7+Z0totgNDqsj
OiI97bTDJE4hzQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:17 2025 by rpki-client