Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: elAOb2NDfnKv/l4dtd6Wi0asvii0CoTNFKj/CizN194=
Subject key identifier: 66:DB:96:BA:6E:31:0C:5B:06:2C:7C:7D:C8:81:26:2A:9C:46:1D:28
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 0199FBEBBB981F21C05D22CAB4649B4682CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: iKHY9X/nc6nlqe/wREgLHMnG7DEhSS/Pj1KcdexLf3U=)
2: bxRO7kfiXfIBzrwx6__-lx4GD-Q.roa (hash: Yl6am4vWUQXhAPFuVgrQF79QPPtS7MoD02zbAbTLBHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bb:98:1f:21:c0:5d:22:ca:b4:64:9b:46:82:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=66db96ba6e310c5b062c7c7dc881262a9c461d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:a1:00:6c:28:64:32:73:c8:2c:b7:3f:ce:
a9:4c:67:1d:83:fe:06:93:68:c9:2b:d8:f5:62:31:
ae:b2:dd:9a:aa:00:a5:b1:1e:30:78:f3:46:bd:22:
10:c1:cc:9d:a2:0a:f4:9f:d1:09:89:8c:e7:d0:02:
4e:f4:59:80:1f:9f:9e:0b:aa:4b:6c:6c:74:36:11:
53:c4:63:bf:88:a4:c6:57:d7:23:9e:c8:a8:50:e5:
04:1e:ba:3b:76:5c:ea:71:b3:42:ce:91:d2:2a:20:
d5:4c:82:b3:e8:27:d3:d1:56:2c:81:b8:79:d5:ef:
b2:05:0e:c8:c6:c2:2c:cb:18:44:be:2d:ef:e6:8e:
b2:79:20:98:26:a8:c8:98:65:f8:d1:f8:29:98:33:
10:3f:c1:2c:46:01:f0:39:10:fb:f5:a1:c4:12:7a:
de:4d:01:87:92:54:fa:c1:c2:1b:70:1b:1b:4a:f2:
0c:23:25:f9:74:c6:70:af:98:ff:22:08:cc:ec:4f:
10:e7:90:3c:a8:e3:71:17:52:5f:43:65:be:75:06:
72:5b:f3:6f:68:b1:7d:e1:ce:4a:0a:bd:c8:a8:6c:
80:00:31:61:3e:26:38:cb:dd:e6:da:f1:68:d1:1c:
2a:75:53:bf:f5:d9:73:1a:a0:64:9e:df:a4:ca:e7:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DB:96:BA:6E:31:0C:5B:06:2C:7C:7D:C8:81:26:2A:9C:46:1D:28
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:eb:06:40:8e:7e:76:bf:48:9a:a8:6c:c9:f9:58:f3:9a:2c:
cd:83:8c:3d:2f:1e:99:62:b3:9d:86:c5:46:90:8a:f7:2a:d5:
ce:32:c6:f3:21:02:11:93:3b:e8:02:a9:da:c1:be:0d:97:52:
fd:0f:28:a0:36:b8:06:0b:c2:49:b2:8f:fd:cf:a2:68:58:1d:
b7:f4:fa:8b:e4:87:13:47:97:8d:10:a3:69:e5:bd:01:97:95:
5f:c8:cb:03:e2:30:69:6e:79:96:f7:9b:74:60:d8:b6:32:ad:
47:fd:0a:c7:4b:80:fe:ae:e9:74:bb:87:ff:77:02:c6:14:a6:
88:cf:af:3e:72:94:ba:97:a4:c6:6e:6d:0f:8f:0b:21:76:9b:
71:d6:2a:99:25:9a:14:9a:1c:d5:51:a7:42:81:b9:72:41:5b:
f9:5c:4a:55:94:3e:a8:0f:f4:ce:7c:d3:8d:63:56:ae:e9:59:
05:03:28:72:5e:95:0c:42:0a:cf:4b:e0:f7:65:77:c9:d7:5d:
3e:ee:5a:9f:c9:cf:7d:97:4e:2e:69:dc:67:65:a9:bb:ce:2b:
03:19:65:ff:ec:a2:5e:f7:05:4a:8e:5f:87:f3:7b:66:c2:b9:
20:ad:13:68:62:20:0f:7d:f8:df:c9:a3:1c:93:1f:42:da:08:
a1:ac:50:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767uYHyHAXSLKtGSbRoLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTk1OTNkMjkwZTAyNTAyNzhhNzNiMzEzNTUwMzI5MzI3
YmQ1ODkwHhcNMjUxMDE5MTAwMjM0WhcNMjUxMDIwMTAwMjM0WjAzMTEwLwYDVQQD
Eyg2NmRiOTZiYTZlMzEwYzViMDYyYzdjN2RjODgxMjYyYTljNDYxZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa+hAGwoZDJzyCy3P86pTGcdg/4G
k2jJK9j1YjGust2aqgClsR4wePNGvSIQwcydogr0n9EJiYzn0AJO9FmAH5+eC6pL
bGx0NhFTxGO/iKTGV9cjnsioUOUEHro7dlzqcbNCzpHSKiDVTIKz6CfT0VYsgbh5
1e+yBQ7IxsIsyxhEvi3v5o6yeSCYJqjImGX40fgpmDMQP8EsRgHwORD79aHEEnre
TQGHklT6wcIbcBsbSvIMIyX5dMZwr5j/IgjM7E8Q55A8qONxF1JfQ2W+dQZyW/Nv
aLF94c5KCr3IqGyAADFhPiY4y93m2vFo0RwqdVO/9dlzGqBknt+kyufJRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbblrpuMQxbBix8fciBJiqcRh0oMB8GA1UdIwQY
MBaAFDvpWT0pDgJQJ4pzsxNVAykye9WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NDRhNmUtZjNhMi00MGRkLWEwMmUt
NGVhYjA2MGYxNWZhLzEvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83NDRhNmUtZjNhMi00MGRkLWEwMmUtNGVhYjA2MGYxNWZh
LzEvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJusGQI5+
dr9ImqhsyflY85oszYOMPS8emWKznYbFRpCK9yrVzjLG8yECEZM76AKp2sG+DZdS
/Q8ooDa4BgvCSbKP/c+iaFgdt/T6i+SHE0eXjRCjaeW9AZeVX8jLA+IwaW55lveb
dGDYtjKtR/0Kx0uA/q7pdLuH/3cCxhSmiM+vPnKUupekxm5tD48LIXabcdYqmSWa
FJoc1VGnQoG5ckFb+VxKVZQ+qA/0znzTjWNWrulZBQMocl6VDEIKz0vg92V3yddd
Pu5an8nPfZdOLmncZ2Wpu84rAxll/+yiXvcFSo5fh/N7ZsK5IK0TaGIgD33438mj
HJMfQtoIoaxQcA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:27 2025 by rpki-client