Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: 14Fm5uhwepcXwGshK+muLki2X3vLXOeSDVWTCfbjryw=
Subject key identifier: 23:B6:75:B9:8A:0B:48:3E:DD:82:DC:0A:B7:FD:CA:7B:1F:80:4B:5F
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019A0110DEEBD5D660A319E29886459FAFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 0623
Signing time: Mon 20 Oct 2025 10:01:14 +0000
Manifest this update: Mon 20 Oct 2025 10:01:14 +0000
Manifest next update: Tue 21 Oct 2025 10:01:14 +0000
Files and hashes: 1: UxDhbbGiLqhG0cjqvQTDDPyodT8.roa (hash: /jH4fHuxOiDmcdoWH8bkN08eFhE6HPAkApmfAQgC6ts=)
2: iV5FZuMGLlixAMw0jkwzk7P8BYc.roa (hash: C9ucIF2yO9TSTl7qwXNqjkxkNJQX9XDq0UvZWNrPjQU=)
3: inOwk0rr2hBBrYALexzKTS-HXaE.roa (hash: BGYPbxUWdEW8PUtIUA1rv4TAk1J/uLjxsHUKD6zhw0w=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: WtfcWuP7hc7HIiTqGjyz3VCk0ioW2UvrMpO60CVB1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:de:eb:d5:d6:60:a3:19:e2:98:86:45:9f:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Oct 20 10:01:14 2025 GMT
Not After : Oct 21 10:01:14 2025 GMT
Subject: CN=23b675b98a0b483edd82dc0ab7fdca7b1f804b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6a:ce:e2:a8:44:8c:0d:23:01:13:8f:2d:9b:
7e:aa:8c:b0:a4:a3:fb:0a:42:03:38:17:2a:ce:b7:
4c:c7:74:e4:fd:d0:e8:9e:ee:2a:6a:fa:72:4f:a4:
90:5b:dc:df:7a:0b:26:29:15:87:0a:7f:64:b4:63:
dc:30:f2:db:be:bb:3d:67:69:d6:f4:f7:69:72:3f:
66:c4:ce:11:39:11:25:2b:b7:84:c8:20:13:f6:62:
01:3f:fd:b1:99:50:6a:6c:90:1b:3c:30:38:b8:ff:
a4:90:70:41:9b:dd:11:c5:61:d8:cd:68:71:99:56:
40:81:63:22:87:88:8f:10:ba:ae:d3:23:13:f6:4f:
13:3a:f8:46:58:28:0f:7b:ff:69:1b:16:1e:7f:c7:
3c:95:5a:84:73:19:03:c7:43:96:3d:5b:3b:a7:9c:
73:ff:cc:ed:4f:0b:d1:f9:57:8a:b0:ff:35:19:96:
b9:fd:2d:69:88:4e:d5:3f:f5:d6:55:4e:ce:0f:3e:
09:b0:96:15:f1:72:67:e9:bb:87:7d:5a:9e:ee:83:
54:37:c7:8b:23:ce:a6:fc:47:dd:8b:b7:81:d3:e5:
1f:66:5d:7c:d9:e7:6e:33:33:66:6b:33:ee:cd:65:
9d:0d:f0:2d:22:43:ae:a2:c8:a8:0a:27:0b:c3:5e:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:75:B9:8A:0B:48:3E:DD:82:DC:0A:B7:FD:CA:7B:1F:80:4B:5F
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:6b:43:c5:12:a7:39:bd:40:f6:0f:82:8a:25:64:f1:af:
76:23:9b:a0:65:93:89:24:0c:a1:06:66:38:09:61:cb:f8:98:
e0:85:7c:24:f5:c2:bd:17:38:ff:12:02:38:a2:cc:21:f1:1a:
7b:30:a6:25:e4:16:19:5b:67:79:27:77:d1:37:ab:b3:fd:07:
a6:50:b2:be:57:bf:46:4e:8d:57:3a:c5:14:26:db:43:20:49:
de:96:c5:0c:b6:6a:6f:45:ab:65:29:40:30:d8:73:53:13:4c:
8f:72:15:c6:e3:61:6f:20:6a:bc:04:3f:7d:f3:ba:53:6b:47:
6d:da:c9:8e:e7:7f:98:5e:2b:66:93:bd:d3:36:9b:9f:09:31:
a3:3d:12:20:5a:02:1a:d3:e9:7a:a5:6c:88:79:e5:a7:56:7a:
d2:f5:8e:ca:ce:30:e9:15:83:d1:5f:45:2c:4a:f4:41:cb:6a:
d7:80:c4:47:ac:97:cb:90:d4:75:7c:46:67:7b:17:80:6b:0f:
40:ba:4c:9c:da:cd:ed:eb:1f:9d:0c:ae:9d:cc:f7:51:cc:cc:
d8:cb:9a:1d:29:26:de:a8:9e:a9:11:f4:fa:f9:b1:45:fa:0b:
9f:14:79:11:89:49:9b:1c:d3:40:67:96:66:db:27:13:57:51:
d0:f6:d2:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEN7r1dZgoxnimIZFn6/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjFiMjJiMjA1NDUwMmJmZDM4ODkxMzgyOTExMDNkODNi
NmE1MGUwHhcNMjUxMDIwMTAwMTE0WhcNMjUxMDIxMTAwMTE0WjAzMTEwLwYDVQQD
EygyM2I2NzViOThhMGI0ODNlZGQ4MmRjMGFiN2ZkY2E3YjFmODA0YjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWrO4qhEjA0jAROPLZt+qoywpKP7
CkIDOBcqzrdMx3Tk/dDonu4qavpyT6SQW9zfegsmKRWHCn9ktGPcMPLbvrs9Z2nW
9Pdpcj9mxM4RORElK7eEyCAT9mIBP/2xmVBqbJAbPDA4uP+kkHBBm90RxWHYzWhx
mVZAgWMih4iPELqu0yMT9k8TOvhGWCgPe/9pGxYef8c8lVqEcxkDx0OWPVs7p5xz
/8ztTwvR+VeKsP81GZa5/S1piE7VP/XWVU7ODz4JsJYV8XJn6buHfVqe7oNUN8eL
I86m/Efdi7eB0+UfZl182eduMzNmazPuzWWdDfAtIkOuosioCicLw14fWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO2dbmKC0g+3YLcCrf9ynsfgEtfMB8GA1UdIwQY
MBaAFKPxsisgVFAr/TiJE4KRED2DtqUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQt
MjRkMjcyY2UxMWUzLzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQtMjRkMjcyY2UxMWUz
LzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcitrQ8US
pzm9QPYPgoolZPGvdiOboGWTiSQMoQZmOAlhy/iY4IV8JPXCvRc4/xICOKLMIfEa
ezCmJeQWGVtneSd30Ters/0HplCyvle/Rk6NVzrFFCbbQyBJ3pbFDLZqb0WrZSlA
MNhzUxNMj3IVxuNhbyBqvAQ/ffO6U2tHbdrJjud/mF4rZpO90zabnwkxoz0SIFoC
GtPpeqVsiHnlp1Z60vWOys4w6RWD0V9FLEr0Qctq14DER6yXy5DUdXxGZ3sXgGsP
QLpMnNrN7esfnQyuncz3UczM2MuaHSkm3qieqRH0+vmxRfoLnxR5EYlJmxzTQGeW
ZtsnE1dR0PbSBw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:18 2025 by rpki-client