Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: LHFvBeWdF3J3BA18KAel7rrG/sll/jKUCUnhjPu32VA=
Subject key identifier: 65:E9:D8:6F:F3:5F:E6:38:BB:24:16:7D:C3:B2:68:7A:68:17:C2:F2
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 0199FC8F140A78BC63C4416D313022CA5BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 142B
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
2: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: VNCckV62U+c1VoP2lv1+PTTHpp8KKnzxBnQXVe4i7g0=)
3: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:14:0a:78:bc:63:c4:41:6d:31:30:22:ca:5b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=65e9d86ff35fe638bb24167dc3b2687a6817c2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:76:22:95:d1:26:c9:a0:f1:76:0f:3c:9e:
ff:1d:b6:89:09:8d:e4:0d:f2:d0:40:4e:0e:da:e6:
97:2e:d6:73:5d:0f:74:22:8c:45:4e:98:9f:a8:5d:
32:80:52:d9:4c:17:0b:7e:d6:55:4a:a4:d3:cd:cf:
cb:28:84:76:e3:ce:01:17:59:ac:20:11:35:aa:e2:
89:87:81:88:ec:64:77:13:7b:54:f1:09:fe:cb:c6:
0d:6b:53:f1:d9:2f:43:f3:cc:5f:fc:fa:03:d1:63:
a9:f1:ae:46:65:74:fc:aa:72:da:76:65:5d:46:16:
df:6f:53:90:bd:b4:c4:04:75:92:93:3a:64:db:2b:
92:d1:51:72:4a:25:4b:4a:c3:29:3a:60:a5:dc:2f:
ba:ea:a6:1d:9a:3a:36:da:67:d9:71:47:b6:79:23:
fd:d7:98:47:b5:21:f4:37:3b:80:55:06:df:ca:1f:
ee:8d:48:f9:e1:6d:9f:e5:10:f7:3f:36:a3:50:c3:
f7:64:0b:30:3d:85:60:87:36:1e:10:03:83:58:24:
4f:2f:8a:52:ee:df:68:81:35:ff:7a:2d:15:35:35:
8e:39:b2:6d:45:5b:ff:f7:f9:73:72:3d:c9:f4:a9:
6a:9b:b5:0e:0f:71:df:0d:ed:74:50:30:2d:63:0a:
00:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E9:D8:6F:F3:5F:E6:38:BB:24:16:7D:C3:B2:68:7A:68:17:C2:F2
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:29:d1:c3:8c:b8:e7:2c:cd:c9:b6:e2:5e:17:dd:5b:db:
43:76:43:cc:37:36:29:63:bd:30:d5:16:bb:51:6b:9d:d5:c8:
c0:ef:b9:d0:72:76:42:3c:e3:0f:93:29:9e:27:6c:21:74:9e:
00:d0:b7:2b:ed:40:fa:78:6b:1f:1e:42:70:c2:26:e0:57:86:
a8:de:2c:a0:4c:8f:7b:9b:90:96:24:dd:f1:bb:9a:ef:6e:e6:
71:50:5c:5b:30:e9:f4:5d:ea:57:b2:0f:96:2f:e5:63:bd:d4:
f1:06:13:65:a8:85:6d:60:86:9a:94:90:1e:fd:5e:7f:a1:58:
3c:24:93:1c:b2:d3:82:80:19:4c:18:d7:86:17:72:37:8c:16:
06:7b:ab:47:3c:2f:10:98:10:10:0b:e4:54:10:c3:0e:cf:3a:
bd:66:a0:89:fa:fb:f9:fa:43:2d:3f:e4:0d:0e:f7:b1:58:b1:
bd:13:b0:d8:1d:66:91:96:5a:47:24:d3:95:24:46:c2:59:24:
97:18:44:c6:94:38:77:65:19:08:4d:08:bc:4c:be:bd:cc:87:
07:00:37:73:21:50:32:01:ae:76:ae:92:d4:f2:e8:86:5a:1f:
06:10:0e:58:be:c6:5f:42:a2:75:a3:1f:56:5a:36:63:8f:c4:
a2:e7:c4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jxQKeLxjxEFtMTAiyluuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1
ZGY1MTQwHhcNMjUxMDE5MTMwMDU5WhcNMjUxMDIwMTMwMDU5WjAzMTEwLwYDVQQD
Eyg2NWU5ZDg2ZmYzNWZlNjM4YmIyNDE2N2RjM2IyNjg3YTY4MTdjMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FB2IpXRJsmg8XYPPJ7/HbaJCY3k
DfLQQE4O2uaXLtZzXQ90IoxFTpifqF0ygFLZTBcLftZVSqTTzc/LKIR2484BF1ms
IBE1quKJh4GI7GR3E3tU8Qn+y8YNa1Px2S9D88xf/PoD0WOp8a5GZXT8qnLadmVd
Rhbfb1OQvbTEBHWSkzpk2yuS0VFySiVLSsMpOmCl3C+66qYdmjo22mfZcUe2eSP9
15hHtSH0NzuAVQbfyh/ujUj54W2f5RD3PzajUMP3ZAswPYVghzYeEAODWCRPL4pS
7t9ogTX/ei0VNTWOObJtRVv/9/lzcj3J9Klqm7UOD3HfDe10UDAtYwoAeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXp2G/zX+Y4uyQWfcOyaHpoF8LyMB8GA1UdIwQY
MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt
MTRjNTkwZmVjN2UzLzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz
LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ24p0cOM
uOcszcm24l4X3VvbQ3ZDzDc2KWO9MNUWu1FrndXIwO+50HJ2QjzjD5MpnidsIXSe
ANC3K+1A+nhrHx5CcMIm4FeGqN4soEyPe5uQliTd8bua727mcVBcWzDp9F3qV7IP
li/lY73U8QYTZaiFbWCGmpSQHv1ef6FYPCSTHLLTgoAZTBjXhhdyN4wWBnurRzwv
EJgQEAvkVBDDDs86vWagifr7+fpDLT/kDQ73sVixvROw2B1mkZZaRyTTlSRGwlkk
lxhExpQ4d2UZCE0IvEy+vcyHBwA3cyFQMgGudq6S1PLohlofBhAOWL7GX0KidaMf
Vlo2Y4/EoufE3A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:13 2025 by rpki-client