Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: nIUyjHRy1GoMEwHxWL0kWO9pO3D/H2Ip3LpV3RG4dG0=
Subject key identifier: 76:C3:27:7C:62:59:DD:39:6A:8A:5F:23:B9:06:F1:65:D9:78:3F:43
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 0199FB0F3145B17569252C296CD2C1BCCFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 0EA7
Signing time: Sun 19 Oct 2025 06:01:40 +0000
Manifest this update: Sun 19 Oct 2025 06:01:40 +0000
Manifest next update: Mon 20 Oct 2025 06:01:40 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: GRGwLe7gJIjLxJbz4ODpP9zcSij1/UwKhB5yxmTzs0s=)
2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:31:45:b1:75:69:25:2c:29:6c:d2:c1:bc:cf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Oct 19 06:01:40 2025 GMT
Not After : Oct 20 06:01:40 2025 GMT
Subject: CN=76c3277c6259dd396a8a5f23b906f165d9783f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:46:6a:a0:33:30:6f:9b:f5:a8:73:ec:ea:
84:6a:52:87:ce:23:aa:23:52:6d:4a:4e:ed:89:a8:
3e:df:f0:07:17:c6:a3:a8:2a:39:e4:ed:61:cf:dd:
dd:a3:a3:41:d3:16:63:9f:54:a4:a2:4e:e0:a8:3e:
22:fb:34:da:08:0a:1d:a8:ee:6a:9f:0c:51:18:b5:
a8:2f:ca:54:ce:99:f7:ee:0e:0d:cf:2d:03:24:67:
ca:23:82:d3:c9:31:7f:ed:f1:0e:2b:42:36:92:a5:
6f:22:2b:a9:d4:b7:35:a1:06:e1:41:c1:11:4b:ed:
28:8c:74:90:f2:65:7b:24:a9:a2:03:6c:1d:c1:7f:
b2:77:3a:bd:eb:53:aa:68:b0:bc:67:33:8b:80:72:
83:60:9e:27:92:30:3f:29:61:92:90:26:60:43:82:
e5:45:dd:17:e2:bc:44:18:f7:34:b2:96:3b:97:74:
b2:28:ca:58:cc:ef:d1:48:09:28:44:bb:84:84:15:
1e:7f:6c:7f:99:bd:d5:58:07:46:20:a2:8f:b1:02:
0e:c8:62:08:8f:d7:7a:7e:69:41:a9:4d:28:ad:82:
bf:c5:f1:6e:9a:70:d7:81:1e:04:ae:8b:67:fd:4b:
fd:50:63:0d:ca:f5:fd:70:b9:77:d5:05:16:a5:05:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:27:7C:62:59:DD:39:6A:8A:5F:23:B9:06:F1:65:D9:78:3F:43
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:28:02:43:f8:3f:9b:69:17:e9:33:2e:35:eb:4f:62:c7:4b:
0e:ce:a4:47:10:14:59:6d:44:a7:fb:40:8a:93:e4:4c:83:75:
4a:82:8a:59:6a:1d:84:72:a2:04:ef:ff:7a:bd:b3:e5:0b:8c:
9c:bb:f1:68:3d:6b:5b:79:1b:95:45:f6:a9:10:20:f5:34:c1:
41:1e:9c:b1:ee:3c:6a:cd:0f:8e:8b:ca:fa:a9:25:b2:e3:4a:
fc:4b:82:32:dd:82:80:86:1d:c8:17:f3:e6:17:8e:0b:8d:f7:
3b:a3:97:bf:a9:5c:ca:07:ab:76:9d:38:15:68:50:29:2f:ca:
2b:23:a3:67:be:1e:bb:11:14:dd:ff:71:2a:ab:d2:98:bc:76:
03:47:6d:21:46:17:ff:8c:b6:fb:0c:10:fe:b7:ec:25:d8:90:
f1:a2:2c:73:70:cc:37:2d:17:ae:b1:dd:d5:2d:3b:f0:ce:da:
dc:8a:3f:df:08:24:37:c9:9b:11:f9:d0:09:b7:c1:53:b8:c7:
c2:d6:fa:f8:77:19:2d:76:b7:f4:45:99:2a:7c:a4:59:d8:75:
93:fb:e1:9f:4e:a3:08:3d:84:5b:4e:d1:38:3d:25:04:ac:1e:
9a:25:19:8e:27:97:ed:31:ea:88:90:6b:d2:fe:6b:ae:3b:a2:
93:29:cd:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DzFFsXVpJSwpbNLBvM+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTRmYTYwYjMyN2EwODAzZGM4NWU5NzBhOWI3NmE0NTE0
Y2ViNWUwHhcNMjUxMDE5MDYwMTQwWhcNMjUxMDIwMDYwMTQwWjAzMTEwLwYDVQQD
Eyg3NmMzMjc3YzYyNTlkZDM5NmE4YTVmMjNiOTA2ZjE2NWQ5NzgzZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ5GaqAzMG+b9ahz7OqEalKHziOq
I1JtSk7tiag+3/AHF8ajqCo55O1hz93do6NB0xZjn1Skok7gqD4i+zTaCAodqO5q
nwxRGLWoL8pUzpn37g4Nzy0DJGfKI4LTyTF/7fEOK0I2kqVvIiup1Lc1oQbhQcER
S+0ojHSQ8mV7JKmiA2wdwX+ydzq961OqaLC8ZzOLgHKDYJ4nkjA/KWGSkCZgQ4Ll
Rd0X4rxEGPc0spY7l3SyKMpYzO/RSAkoRLuEhBUef2x/mb3VWAdGIKKPsQIOyGII
j9d6fmlBqU0orYK/xfFumnDXgR4Erotn/Uv9UGMNyvX9cLl31QUWpQV08QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbDJ3xiWd05aopfI7kG8WXZeD9DMB8GA1UdIwQY
MBaAFDtU+mCzJ6CAPchelwqbdqRRTOteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTct
NDQyNzZmNjA0MjMzLzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTctNDQyNzZmNjA0MjMz
LzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACgCQ/g/
m2kX6TMuNetPYsdLDs6kRxAUWW1Ep/tAipPkTIN1SoKKWWodhHKiBO//er2z5QuM
nLvxaD1rW3kblUX2qRAg9TTBQR6cse48as0PjovK+qklsuNK/EuCMt2CgIYdyBfz
5heOC433O6OXv6lcygerdp04FWhQKS/KKyOjZ74euxEU3f9xKqvSmLx2A0dtIUYX
/4y2+wwQ/rfsJdiQ8aIsc3DMNy0XrrHd1S078M7a3Io/3wgkN8mbEfnQCbfBU7jH
wtb6+HcZLXa39EWZKnykWdh1k/vhn06jCD2EW07ROD0lBKwemiUZjieX7THqiJBr
0v5rrjuikynNxg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:59 2025 by rpki-client