Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: OnUZN1OuSHAfqEoM//l/NryzqNLuii+loFuaR4SVw6o=
Subject key identifier: 81:D1:93:D1:C4:E4:C5:ED:3F:BE:7A:AB:3E:ED:0D:C9:08:FC:85:1E
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 0199FB0F0BB8CDCEE056F21ADEAD9A2476DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 11
Signing time: Sun 19 Oct 2025 06:01:31 +0000
Manifest this update: Sun 19 Oct 2025 06:01:31 +0000
Manifest next update: Mon 20 Oct 2025 06:01:31 +0000
Files and hashes: 1: cErth6LGJ37Tdtl1lcefLoJD4nM.roa (hash: OoCTZM3oJW/h0+9oZEB+kSNNGcZqSaTzGyAN+23CU/M=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: h1TiQj884knY1/bE6Cur/0+IdMxNVvcVjTIiSxg8PQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:0b:b8:cd:ce:e0:56:f2:1a:de:ad:9a:24:76:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Oct 19 06:01:31 2025 GMT
Not After : Oct 20 06:01:31 2025 GMT
Subject: CN=81d193d1c4e4c5ed3fbe7aab3eed0dc908fc851e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:a8:dd:4e:92:10:f8:eb:b3:ee:a1:48:c1:
8d:25:43:d3:c5:bd:0a:a5:02:06:7f:37:9a:02:44:
13:28:4f:6b:fb:b4:7d:f3:5f:c4:54:da:35:ff:a5:
32:6e:db:69:d7:69:2c:b6:9e:91:28:e9:55:0c:8d:
1a:60:77:3f:cb:41:76:9b:40:34:d4:65:4b:ca:12:
f7:c8:71:e3:09:34:c4:ee:5e:4d:6f:1d:1b:ea:cf:
0f:fa:05:97:a6:43:e8:cd:c9:d0:c7:7b:da:01:ab:
ad:bc:da:b2:b8:73:04:93:d8:0a:13:3c:59:c1:c7:
ef:81:e8:40:98:57:0f:29:fb:28:61:3f:c7:30:ec:
29:6d:b5:9d:f1:cc:90:38:64:61:60:40:eb:a4:2d:
87:55:5f:31:2b:6f:63:49:81:55:c3:77:15:2b:e6:
b4:3a:e8:25:fe:bd:b4:b1:f9:26:f2:6e:39:b7:94:
ba:4f:62:98:f4:6a:08:20:91:2b:9a:ea:3c:f3:1e:
39:89:87:84:a2:31:34:3b:fb:01:1d:d6:d4:ff:83:
51:e7:c3:86:ee:e6:a6:c6:c6:90:b4:8b:d0:52:d9:
2a:d8:d1:3f:5e:63:19:6f:6d:6f:36:e4:2c:22:8d:
b6:c9:d7:10:18:88:ee:83:cf:06:20:bf:b9:ed:37:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D1:93:D1:C4:E4:C5:ED:3F:BE:7A:AB:3E:ED:0D:C9:08:FC:85:1E
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d5:df:30:aa:fc:1a:98:12:bd:0c:fa:18:af:17:e3:00:17:
23:f1:fc:1b:e8:2e:77:89:b8:2f:71:07:8f:42:d0:76:03:60:
5d:6b:3a:36:e5:70:79:61:e2:f3:80:cd:ab:ce:64:14:60:3e:
38:b5:ba:f2:50:ea:46:58:91:4f:f9:13:24:7d:20:a9:d5:40:
23:15:eb:15:8b:74:1f:01:0a:97:6c:1a:65:fb:92:44:00:70:
dd:b9:6c:e1:52:34:24:3b:b5:10:43:26:91:2a:d0:77:68:08:
57:13:8a:04:93:6c:42:14:e5:9f:49:d8:74:4b:00:6a:6d:b5:
9a:07:af:d0:2f:62:74:d6:54:bd:53:6f:93:99:92:3c:d6:ff:
4b:45:b7:96:e8:ca:9d:9a:68:03:00:ac:ba:71:2b:31:a3:35:
80:b8:af:f1:4f:91:c7:56:1d:a1:7c:1b:f2:30:8d:96:af:8a:
23:34:5f:79:26:37:36:0d:e9:24:3d:76:aa:ac:22:c2:4c:3e:
29:46:4f:96:6e:94:ec:81:35:6e:8f:01:b0:0d:d8:09:63:58:
b4:07:db:dc:cb:3b:58:48:78:44:b7:66:4a:43:1d:84:05:8c:
4c:7b:d1:69:14:22:f3:8c:79:7a:fc:04:60:5d:4c:02:3c:43:
2b:d3:1d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dwu4zc7gVvIa3q2aJHbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjlmNGI3OGNjNGQ5MzVmYjFmMzliYmRlY2M4YTQxM2Iw
ZmFmOWQwHhcNMjUxMDE5MDYwMTMxWhcNMjUxMDIwMDYwMTMxWjAzMTEwLwYDVQQD
Eyg4MWQxOTNkMWM0ZTRjNWVkM2ZiZTdhYWIzZWVkMGRjOTA4ZmM4NTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl6o3U6SEPjrs+6hSMGNJUPTxb0K
pQIGfzeaAkQTKE9r+7R981/EVNo1/6Uybttp12kstp6RKOlVDI0aYHc/y0F2m0A0
1GVLyhL3yHHjCTTE7l5Nbx0b6s8P+gWXpkPozcnQx3vaAautvNqyuHMEk9gKEzxZ
wcfvgehAmFcPKfsoYT/HMOwpbbWd8cyQOGRhYEDrpC2HVV8xK29jSYFVw3cVK+a0
Ougl/r20sfkm8m45t5S6T2KY9GoIIJErmuo88x45iYeEojE0O/sBHdbU/4NR58OG
7uamxsaQtIvQUtkq2NE/XmMZb21vNuQsIo22ydcQGIjug88GIL+57TeluQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHRk9HE5MXtP756qz7tDckI/IUeMB8GA1UdIwQY
MBaAFKNp9LeMxNk1+x85u97MikE7D6+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUt
YjBhZGVjOTM0NjcxLzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUtYjBhZGVjOTM0Njcx
LzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNXfMKr8
GpgSvQz6GK8X4wAXI/H8G+gud4m4L3EHj0LQdgNgXWs6NuVweWHi84DNq85kFGA+
OLW68lDqRliRT/kTJH0gqdVAIxXrFYt0HwEKl2waZfuSRABw3bls4VI0JDu1EEMm
kSrQd2gIVxOKBJNsQhTln0nYdEsAam21mgev0C9idNZUvVNvk5mSPNb/S0W3lujK
nZpoAwCsunErMaM1gLiv8U+Rx1YdoXwb8jCNlq+KIzRfeSY3Ng3pJD12qqwiwkw+
KUZPlm6U7IE1bo8BsA3YCWNYtAfb3Ms7WEh4RLdmSkMdhAWMTHvRaRQi84x5evwE
YF1MAjxDK9MdNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:55 2025 by rpki-client