Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: /fXfCF/yv58OyLZdK5bq8h/6t3q7cR1nUrG3QJR7ezc=
Subject key identifier: 46:0D:55:68:F1:B7:9A:B7:94:EF:7A:7D:AE:F6:6E:98:B5:EA:4F:46
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 0199FBEBACF4F8798C800CD4803770F14788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 0F94
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: ZY3eyFlkySeVmS+Th9KFf2PueWa3gFPSmFKH2YatOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ac:f4:f8:79:8c:80:0c:d4:80:37:70:f1:47:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=460d5568f1b79ab794ef7a7daef66e98b5ea4f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:c7:9d:50:68:78:98:17:4f:13:01:38:f8:
50:ec:48:c0:70:f0:ed:54:10:c0:5b:75:7d:9c:cc:
a0:31:b7:b1:11:1b:a7:58:c3:46:46:56:20:11:a3:
4a:fb:ec:24:c0:63:4a:3e:8b:9e:f8:f2:5f:f9:0a:
b2:d4:fa:b3:c9:2a:a9:8d:54:aa:a4:e5:05:bf:a2:
1f:a7:ed:d4:8d:af:0a:0d:44:d6:c4:fe:3a:1b:d5:
78:dd:f8:3b:ae:e8:38:1e:51:9b:6e:67:4c:04:5f:
3b:b6:72:f1:d4:51:ef:e6:d9:4f:e5:0b:bf:42:f3:
de:63:af:b5:36:74:3b:17:9d:5d:17:50:b7:8d:ca:
50:e2:db:e8:0f:fe:2a:c1:2a:2a:9a:ea:93:18:b9:
de:5e:d1:f3:b5:33:d6:a5:11:c2:f8:24:e5:01:d7:
1a:28:ce:f8:fc:d8:89:a3:5f:87:ed:97:79:8b:84:
23:dc:38:cf:a6:07:da:ee:1d:eb:42:3f:a5:84:72:
c5:a1:3c:b9:a2:c7:54:cb:93:1d:b6:f7:8f:9a:bd:
fd:c4:1d:8e:91:cf:a1:7d:54:2a:38:94:0c:e6:a7:
d6:fe:11:bf:44:c3:94:a9:85:90:14:c7:72:00:ec:
07:9a:0f:92:6f:89:cd:9a:ed:83:47:a4:0f:20:c7:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:55:68:F1:B7:9A:B7:94:EF:7A:7D:AE:F6:6E:98:B5:EA:4F:46
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:0f:d8:57:fe:68:b2:a5:5f:88:26:38:4c:d2:83:59:db:
bf:b8:e8:aa:40:5f:93:69:78:f3:18:5b:7c:5b:81:3a:f2:37:
1b:23:5f:ed:70:a3:3c:fb:31:53:d3:e6:29:9c:94:d2:53:33:
e2:82:37:a7:4f:e9:e4:ed:f8:13:77:02:5c:5c:73:20:c3:01:
1d:7b:d2:e9:02:d4:90:77:ee:fd:29:c9:4b:5b:76:c6:8b:3e:
f8:da:9f:cd:18:de:d0:b9:a8:b7:6c:7b:ef:79:8a:7b:5d:c5:
61:0d:fc:5c:f3:57:cd:74:44:3e:bc:92:57:50:34:bb:11:71:
cd:0b:e3:24:47:5f:1c:07:f5:f6:0c:bf:6a:d5:e3:eb:60:b5:
7f:e0:1c:1f:fb:93:e4:9d:81:3e:bd:ce:a0:54:51:94:58:9a:
da:1c:e1:2b:42:ce:f5:17:83:55:38:76:1a:18:67:85:be:b2:
02:3a:2b:64:27:d0:e3:8e:78:93:8d:f4:ed:37:4d:36:48:8b:
01:f7:36:3f:64:93:03:55:52:15:e0:58:82:11:ac:3f:41:50:
5e:6e:71:0e:4e:3f:67:d7:74:93:90:57:8b:4d:66:0d:0a:c3:
46:91:22:16:0c:cd:f4:00:c7:f0:7b:57:fe:c6:5d:1c:4f:61:
f0:fd:b0:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn766z0+HmMgAzUgDdw8UeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzcxYzg2NDU5ZGU3NGJiZDM1YTNjY2JmZDhhZTVkOWNi
NGQyZDgwHhcNMjUxMDE5MTAwMjMwWhcNMjUxMDIwMTAwMjMwWjAzMTEwLwYDVQQD
Eyg0NjBkNTU2OGYxYjc5YWI3OTRlZjdhN2RhZWY2NmU5OGI1ZWE0ZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmzHnVBoeJgXTxMBOPhQ7EjAcPDt
VBDAW3V9nMygMbexERunWMNGRlYgEaNK++wkwGNKPoue+PJf+Qqy1PqzySqpjVSq
pOUFv6Ifp+3Uja8KDUTWxP46G9V43fg7rug4HlGbbmdMBF87tnLx1FHv5tlP5Qu/
QvPeY6+1NnQ7F51dF1C3jcpQ4tvoD/4qwSoqmuqTGLneXtHztTPWpRHC+CTlAdca
KM74/NiJo1+H7Zd5i4Qj3DjPpgfa7h3rQj+lhHLFoTy5osdUy5MdtvePmr39xB2O
kc+hfVQqOJQM5qfW/hG/RMOUqYWQFMdyAOwHmg+Sb4nNmu2DR6QPIMft7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYNVWjxt5q3lO96fa72bpi16k9GMB8GA1UdIwQY
MBaAFKPHHIZFnedLvTWjzL/Yrl2ctNLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTkt
MDkxNGFkMjRhM2U0LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYzhlN2EtZTQxMy00M2ZmLWFhNTktMDkxNGFkMjRhM2U0
LzEvbzhjY2hrV2Q1MHU5TmFQTXY5aXVYWnkwMHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdUP2Ff+
aLKlX4gmOEzSg1nbv7joqkBfk2l48xhbfFuBOvI3GyNf7XCjPPsxU9PmKZyU0lMz
4oI3p0/p5O34E3cCXFxzIMMBHXvS6QLUkHfu/SnJS1t2xos++NqfzRje0Lmot2x7
73mKe13FYQ38XPNXzXREPrySV1A0uxFxzQvjJEdfHAf19gy/atXj62C1f+AcH/uT
5J2BPr3OoFRRlFia2hzhK0LO9ReDVTh2Ghhnhb6yAjorZCfQ4454k4307TdNNkiL
Afc2P2STA1VSFeBYghGsP0FQXm5xDk4/Z9d0k5BXi01mDQrDRpEiFgzN9ADH8HtX
/sZdHE9h8P2w6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:45 2025 by rpki-client