Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
File: O9lDbSE1wISJe3TGrTbaFwCnqY0.mft (raw, json)
Hash identifier: KfXVSne5aVgEPjTSjiW7H0uCD1EhccAy2DcE1Fddy70=
Subject key identifier: 60:01:C1:CA:0E:49:D7:85:10:54:04:56:BC:9E:C5:6A:2E:4B:BA:40
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 0199FB45D0D98BBFC94ED659DEE53EEA017F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
Manifest number: 14C8
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: MkGUvFc5JSBVNeM_VILad8s5zXE.roa (hash: y7TqFtSF44B35KxghjCNu7WMj5pJpzLxmoZgRpNM7r8=)
2: O9lDbSE1wISJe3TGrTbaFwCnqY0.crl (hash: Kd5+l0fwRT7aCM2Y3i9GmquyT0sNlu756O7A9aOjR+g=)
3: VekG2JeXHUDy0fRDzXtFdNU8lfE.roa (hash: S50KN9jOHHSMt2/wCQRFtxbSHAYvoJTEJC1VbDgG6ns=)
4: XlsfqVnPq85M-ZJSh02UMv7bAq8.roa (hash: RvxcNQlHBl5xgY24wu2zM7ZcwbvvsV992ncfxEdC62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d0:d9:8b:bf:c9:4e:d6:59:de:e5:3e:ea:01:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=6001c1ca0e49d78510540456bc9ec56a2e4bba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:50:46:8c:31:21:1c:be:8e:e0:d6:a2:bb:
7f:d6:55:81:6c:73:3a:07:95:bb:65:38:cf:50:a6:
27:9f:3f:11:1b:43:3f:8e:1b:36:9d:c0:23:f8:29:
ce:65:b8:f3:67:a4:d1:78:79:65:c5:99:41:e3:7a:
83:ff:34:20:4b:ce:88:52:72:27:93:b2:84:30:c8:
eb:f2:12:b1:ed:c1:de:69:15:93:0b:fb:9f:29:a9:
92:c7:23:00:df:e5:28:98:6b:bc:b8:1c:93:83:ea:
64:9f:12:65:18:91:27:3e:fd:5e:16:22:52:c8:74:
df:8b:05:43:a3:e2:93:21:73:c1:72:66:b9:78:eb:
53:60:b2:96:7c:72:01:c6:0e:87:f3:01:0d:5f:02:
c6:9d:95:e2:fe:8c:17:00:3f:06:b3:30:86:c0:46:
c4:cc:48:92:a9:ca:91:0d:6c:04:87:8d:0a:63:55:
71:84:89:5d:6d:a6:00:f8:99:d6:a4:a2:82:55:da:
b7:56:ec:91:65:87:a3:6b:e4:a1:c2:71:37:fb:df:
70:d0:ac:e0:6d:bd:fd:b3:a2:d1:2d:31:ce:b0:6b:
58:e3:46:87:0f:94:65:31:71:05:67:86:2a:35:e1:
ab:89:d6:d2:a4:af:d6:90:15:4a:9b:78:e3:8e:e2:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:C1:CA:0E:49:D7:85:10:54:04:56:BC:9E:C5:6A:2E:4B:BA:40
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:17:51:05:2f:88:94:bb:e8:1f:50:ff:f8:e7:2b:35:02:75:
58:fa:8a:bc:9a:dc:b0:f0:e1:f0:34:8f:e1:04:d4:dc:bb:27:
24:f8:83:97:bc:bf:ee:69:84:d4:8a:17:17:88:f0:0e:b9:c1:
9b:bf:9b:4b:fd:bc:16:e4:22:cd:3a:a8:91:63:2f:89:eb:19:
5b:22:d2:49:f0:0f:bf:63:44:ba:b8:91:e4:ae:98:df:ab:78:
76:b7:6d:7d:f0:d5:f9:4d:47:13:5b:b0:0d:42:7f:67:9c:e8:
0e:14:b5:e2:69:cf:11:0b:62:4c:81:fb:c0:b9:4f:2b:8a:cc:
8b:d3:b7:52:b5:ab:4c:58:f8:09:cc:a2:b0:e1:1e:21:11:57:
07:70:2e:bd:32:87:16:ec:ea:79:de:5f:17:76:e6:b3:b7:cf:
50:55:85:38:5f:a2:8f:19:e6:8e:31:9a:4d:d7:df:67:5a:c0:
80:2b:ae:59:b2:c3:39:c8:0c:c1:7d:fd:e6:f2:b3:64:2d:73:
0b:69:84:fb:7d:93:de:69:38:2c:0f:b9:c8:cd:f4:8f:9d:f8:
85:83:7d:b5:5e:c8:10:51:19:74:75:84:0c:e5:c4:3c:e7:e9:
ae:af:6b:4d:92:51:c7:65:e8:ed:57:b0:e1:90:4c:23:20:ec:
6b:3d:3d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RdDZi7/JTtZZ3uU+6gF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDk0MzZkMjEzNWMwODQ4OTdiNzRjNmFkMzZkYTE3MDBh
N2E5OGQwHhcNMjUxMDE5MDcwMTIwWhcNMjUxMDIwMDcwMTIwWjAzMTEwLwYDVQQD
Eyg2MDAxYzFjYTBlNDlkNzg1MTA1NDA0NTZiYzllYzU2YTJlNGJiYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEdQRowxIRy+juDWort/1lWBbHM6
B5W7ZTjPUKYnnz8RG0M/jhs2ncAj+CnOZbjzZ6TReHllxZlB43qD/zQgS86IUnIn
k7KEMMjr8hKx7cHeaRWTC/ufKamSxyMA3+UomGu8uByTg+pknxJlGJEnPv1eFiJS
yHTfiwVDo+KTIXPBcma5eOtTYLKWfHIBxg6H8wENXwLGnZXi/owXAD8GszCGwEbE
zEiSqcqRDWwEh40KY1VxhIldbaYA+JnWpKKCVdq3VuyRZYeja+ShwnE3+99w0Kzg
bb39s6LRLTHOsGtY40aHD5RlMXEFZ4YqNeGridbSpK/WkBVKm3jjjuIhawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGABwcoOSdeFEFQEVryexWouS7pAMB8GA1UdIwQY
MBaAFDvZQ20hNcCEiXt0xq022hcAp6mNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTIt
MjYzN2QxMzMzOGYxLzEvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTItMjYzN2QxMzMzOGYx
LzEvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhdRBS+I
lLvoH1D/+OcrNQJ1WPqKvJrcsPDh8DSP4QTU3LsnJPiDl7y/7mmE1IoXF4jwDrnB
m7+bS/28FuQizTqokWMviesZWyLSSfAPv2NEuriR5K6Y36t4drdtffDV+U1HE1uw
DUJ/Z5zoDhS14mnPEQtiTIH7wLlPK4rMi9O3UrWrTFj4CcyisOEeIRFXB3AuvTKH
Fuzqed5fF3bms7fPUFWFOF+ijxnmjjGaTdffZ1rAgCuuWbLDOcgMwX395vKzZC1z
C2mE+32T3mk4LA+5yM30j534hYN9tV7IEFEZdHWEDOXEPOfprq9rTZJRx2Xo7Vew
4ZBMIyDsaz09+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:00 2025 by rpki-client