Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: bYno8qJKKRiiu8Riqc/+/Thf6/U5UyKgs3XvLni4biM=
Subject key identifier: FF:BD:B8:F5:57:8C:93:B6:64:5A:3A:3C:8F:54:F9:05:FC:ED:53:E5
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 0199FCC627CECEFB16962A10916D42AD8646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0645
Signing time: Sun 19 Oct 2025 14:01:08 +0000
Manifest this update: Sun 19 Oct 2025 14:01:08 +0000
Manifest next update: Mon 20 Oct 2025 14:01:08 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: aO8lUz7KkPxRL5W6Y4Xr3JiOQoql/I8F909n6uycs7k=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:27:ce:ce:fb:16:96:2a:10:91:6d:42:ad:86:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Oct 19 14:01:08 2025 GMT
Not After : Oct 20 14:01:08 2025 GMT
Subject: CN=ffbdb8f5578c93b6645a3a3c8f54f905fced53e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:bf:e5:3a:e7:96:ac:01:26:91:11:54:05:
b4:86:98:ff:2d:62:03:9e:b0:ee:cc:4c:cf:1a:4e:
57:8a:6d:63:70:e7:86:94:df:5b:be:f9:6b:d8:0b:
89:ba:d0:0e:1a:58:61:2e:8b:e6:8f:a8:c7:e0:cc:
4c:34:40:6c:49:71:6b:00:59:02:a2:fd:98:9e:fe:
02:80:d0:e6:3a:c0:dd:8c:03:6a:a7:43:5a:e2:fe:
5e:cd:cc:98:af:61:2e:32:a6:27:54:4a:a4:5d:06:
54:24:8f:bf:7f:a2:9e:b1:ca:ef:6a:41:0a:93:17:
62:c3:fe:4f:9c:23:4e:fa:53:20:5f:3d:71:87:03:
9e:e5:5a:13:d2:db:29:37:02:8f:88:61:41:fe:e0:
cb:33:d2:a9:37:97:0f:45:de:01:cd:f7:e0:6b:6a:
73:81:6d:0a:5e:71:73:5a:b2:1a:23:51:0f:ac:e1:
1d:94:71:8c:70:14:b7:b1:3a:46:ab:14:39:f9:38:
8c:ba:e6:0e:fe:93:cf:f7:98:0b:05:60:97:58:61:
54:76:db:0f:e3:c0:71:62:66:9f:84:c0:e3:27:7d:
93:90:c0:a1:e6:5f:68:a2:8d:24:76:fc:3a:78:de:
14:d6:5e:0e:b6:e5:e3:da:76:8a:fc:35:ff:8d:f6:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:B8:F5:57:8C:93:B6:64:5A:3A:3C:8F:54:F9:05:FC:ED:53:E5
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:f3:9a:02:a7:2d:b0:ab:2f:f1:5b:40:ec:43:f3:fe:73:
a5:54:b0:d5:c4:81:c1:45:b4:6a:0e:ed:f5:b8:dc:64:df:eb:
a3:6c:87:d3:66:18:4d:d6:37:8d:e1:9c:38:4e:73:e7:e2:14:
1d:a3:2a:60:6a:30:a3:d5:59:21:87:ef:5f:d9:25:e2:93:2c:
d9:83:27:cf:fe:7f:89:a7:53:9b:ba:b5:76:d1:80:ae:7a:4b:
bd:60:7b:b7:ac:a4:e3:21:f3:50:4e:dd:28:6f:15:d6:45:5a:
38:d4:35:f4:a2:37:1f:c8:e7:9e:c0:5b:05:2d:44:12:4d:fe:
c2:49:82:48:3f:dd:6a:21:65:c0:08:27:5f:36:36:cf:c4:b3:
54:73:f3:5d:86:b1:ea:8c:1e:fc:9e:ae:89:d5:2d:83:56:33:
d1:98:fe:30:d2:f9:7d:99:12:a5:4d:78:2b:93:b4:33:ce:4e:
f0:f8:8a:b7:b7:25:a6:90:54:59:57:2d:23:a9:4b:da:7e:5d:
17:be:02:5f:d4:91:35:cc:6b:c9:a4:b0:3b:4c:1d:bf:1f:bd:
8b:37:b5:01:b8:07:79:e2:fb:53:15:d7:1e:c8:23:f8:ba:ca:
56:47:d8:fb:e9:e3:3d:5f:f8:50:44:b5:c0:ee:0b:16:8c:67:
f6:1e:42:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xifOzvsWlioQkW1CrYZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4
MjNhMDIwHhcNMjUxMDE5MTQwMTA4WhcNMjUxMDIwMTQwMTA4WjAzMTEwLwYDVQQD
EyhmZmJkYjhmNTU3OGM5M2I2NjQ1YTNhM2M4ZjU0ZjkwNWZjZWQ1M2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1W/5TrnlqwBJpERVAW0hpj/LWID
nrDuzEzPGk5Xim1jcOeGlN9bvvlr2AuJutAOGlhhLovmj6jH4MxMNEBsSXFrAFkC
ov2Ynv4CgNDmOsDdjANqp0Na4v5ezcyYr2EuMqYnVEqkXQZUJI+/f6KescrvakEK
kxdiw/5PnCNO+lMgXz1xhwOe5VoT0tspNwKPiGFB/uDLM9KpN5cPRd4Bzffga2pz
gW0KXnFzWrIaI1EPrOEdlHGMcBS3sTpGqxQ5+TiMuuYO/pPP95gLBWCXWGFUdtsP
48BxYmafhMDjJ32TkMCh5l9ooo0kdvw6eN4U1l4OtuXj2naK/DX/jfZHoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+9uPVXjJO2ZFo6PI9U+QX87VPlMB8GA1UdIwQY
MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt
NmU5OWI3OWRhNTIwLzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw
LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS17zmgKn
LbCrL/FbQOxD8/5zpVSw1cSBwUW0ag7t9bjcZN/ro2yH02YYTdY3jeGcOE5z5+IU
HaMqYGowo9VZIYfvX9kl4pMs2YMnz/5/iadTm7q1dtGArnpLvWB7t6yk4yHzUE7d
KG8V1kVaONQ19KI3H8jnnsBbBS1EEk3+wkmCSD/daiFlwAgnXzY2z8SzVHPzXYax
6owe/J6uidUtg1Yz0Zj+MNL5fZkSpU14K5O0M85O8PiKt7clppBUWVctI6lL2n5d
F74CX9SRNcxryaSwO0wdvx+9ize1AbgHeeL7UxXXHsgj+LrKVkfY++njPV/4UES1
wO4LFoxn9h5C4g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:00 2025 by rpki-client