Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: DmX7HAVk26DbnO1gluxead6aXmf+tLeirlb/TBBT4aU=
Subject key identifier: 6C:34:34:62:AE:3D:17:0D:1C:59:67:48:A3:FA:3F:4C:B8:39:56:8B
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 0199FD6B5D5098559D8DCAA3902A1152B560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0924
Signing time: Sun 19 Oct 2025 17:01:35 +0000
Manifest this update: Sun 19 Oct 2025 17:01:35 +0000
Manifest next update: Mon 20 Oct 2025 17:01:35 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: zH5+1U3LZAirOd4j3lQq7kerl0U/OyCueQ661DQqf4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5d:50:98:55:9d:8d:ca:a3:90:2a:11:52:b5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Oct 19 17:01:35 2025 GMT
Not After : Oct 20 17:01:35 2025 GMT
Subject: CN=6c343462ae3d170d1c596748a3fa3f4cb839568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:e8:d9:77:be:0d:0d:c8:71:08:ad:69:a9:
bf:71:e7:a6:48:55:69:f3:f6:4c:91:5d:89:89:c8:
14:ec:5c:34:e3:6e:eb:c3:bc:b5:4f:4b:08:d7:cf:
42:54:33:8c:10:c2:a1:6d:77:88:a4:66:bd:65:9d:
91:ad:6b:fd:67:74:d6:24:a4:49:be:55:4f:40:c7:
81:6d:15:a7:ea:68:f2:c1:d5:8b:f8:d0:5b:1d:00:
e6:76:97:f0:bf:9c:79:20:bb:4c:4f:7f:47:4e:be:
9b:a9:87:3a:df:56:e0:d5:cd:1d:00:7e:2c:c3:e1:
1c:26:ad:f5:2c:dd:63:66:01:2e:4d:f2:4e:eb:be:
31:a8:5e:a2:78:aa:bd:9e:4d:7b:a0:eb:c7:fd:fe:
25:79:be:99:7c:62:fa:66:65:32:5f:8e:83:bc:a9:
9f:18:1f:8c:23:51:5f:6a:7c:90:fc:e3:11:d4:c3:
86:28:42:c4:f0:dc:03:c0:18:05:68:65:f3:5e:a7:
fc:c9:71:0f:85:4e:fd:49:4b:ae:6d:3c:4f:24:04:
49:84:73:5e:4b:1f:67:91:f1:aa:01:41:ac:48:50:
61:f2:e1:53:6b:df:5d:ec:56:bf:15:b4:84:97:3e:
c8:91:70:cf:6a:97:54:f3:6e:a1:a1:33:2f:c8:49:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:34:62:AE:3D:17:0D:1C:59:67:48:A3:FA:3F:4C:B8:39:56:8B
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a0:90:8b:58:f5:77:a0:70:d2:16:24:e7:33:ce:36:bd:ae:
2e:69:f5:51:b1:b6:c5:ce:52:a7:4e:94:55:ca:5c:9d:e5:7d:
0c:fe:29:ca:d2:d7:4f:e0:9c:62:a8:dc:3a:82:d3:d6:b8:bc:
10:ab:33:9d:db:d7:c9:5c:64:ee:8d:f5:8c:ba:25:55:f3:e5:
b1:f0:32:62:31:62:38:e4:5a:c9:ca:4c:f7:df:79:85:0b:0c:
53:69:09:fb:16:a3:df:0d:02:57:c8:3e:83:71:3c:44:6b:3d:
11:99:e3:ff:f7:5e:f3:88:41:59:15:01:88:97:25:a9:9b:db:
1f:8a:52:4b:aa:78:6a:07:f7:c5:31:a9:2b:11:7b:e4:18:0e:
c8:e7:bb:55:52:6f:de:1b:3d:e8:6f:0e:2c:60:a1:7d:a4:f5:
60:65:fa:9c:9a:1e:18:d0:46:bb:83:b5:66:2f:2f:a8:e2:e9:
6b:93:e5:07:94:9b:b2:df:7b:bc:eb:e5:15:46:8d:35:8f:ba:
94:31:13:4d:ed:52:97:0f:08:17:8f:f7:2b:8d:60:48:a4:f8:
69:c1:c8:4e:df:83:ed:a3:a6:f8:48:f2:68:5f:03:bb:0a:47:
ee:a3:98:b2:2b:e1:f2:a5:68:be:46:ae:a6:c2:f6:12:ad:67:
24:13:48:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9a11QmFWdjcqjkCoRUrVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYWQ5Y2Q1MDM0ZjgxNTU4ZjgzZDIzOGVjYTQwNjMzMmJk
N2JhODUwHhcNMjUxMDE5MTcwMTM1WhcNMjUxMDIwMTcwMTM1WjAzMTEwLwYDVQQD
Eyg2YzM0MzQ2MmFlM2QxNzBkMWM1OTY3NDhhM2ZhM2Y0Y2I4Mzk1NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt7o2Xe+DQ3IcQitaam/ceemSFVp
8/ZMkV2JicgU7Fw0427rw7y1T0sI189CVDOMEMKhbXeIpGa9ZZ2RrWv9Z3TWJKRJ
vlVPQMeBbRWn6mjywdWL+NBbHQDmdpfwv5x5ILtMT39HTr6bqYc631bg1c0dAH4s
w+EcJq31LN1jZgEuTfJO674xqF6ieKq9nk17oOvH/f4leb6ZfGL6ZmUyX46DvKmf
GB+MI1FfanyQ/OMR1MOGKELE8NwDwBgFaGXzXqf8yXEPhU79SUuubTxPJARJhHNe
Sx9nkfGqAUGsSFBh8uFTa99d7Fa/FbSElz7IkXDPapdU826hoTMvyEmm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGw0NGKuPRcNHFlnSKP6P0y4OVaLMB8GA1UdIwQY
MBaAFDutnNUDT4FVj4PSOOykBjMr17qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgt
NGJhNWYyMDZmNjVhLzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgtNGJhNWYyMDZmNjVh
LzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKCQi1j1
d6Bw0hYk5zPONr2uLmn1UbG2xc5Sp06UVcpcneV9DP4pytLXT+CcYqjcOoLT1ri8
EKszndvXyVxk7o31jLolVfPlsfAyYjFiOORaycpM9995hQsMU2kJ+xaj3w0CV8g+
g3E8RGs9EZnj//de84hBWRUBiJclqZvbH4pSS6p4agf3xTGpKxF75BgOyOe7VVJv
3hs96G8OLGChfaT1YGX6nJoeGNBGu4O1Zi8vqOLpa5PlB5Sbst97vOvlFUaNNY+6
lDETTe1Slw8IF4/3K41gSKT4acHITt+D7aOm+EjyaF8DuwpH7qOYsivh8qVovkau
psL2Eq1nJBNIjQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:11 2025 by rpki-client