Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: TwPfn7kfYVUXCyceJp1Ubi1UPrN+TKCrJtLloO2098E=
Subject key identifier: 57:C6:F3:D4:47:DB:F0:5C:80:B3:97:E8:5C:C8:13:D5:0A:E3:15:23
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 0199FBB367B91A65182320B2E71D6BAF3FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: CF
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: iZ5NdmCFL2KJkofQQF0JS-Yd9_o.roa (hash: B8ZarSuY+q0UuVgF85bF6OWHBT26B3wpaZ1iEoRwKdI=)
2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: K5kei1CYRxTfpD3j8JnMt9EiDNYrdumpfkiHdZqO7ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:67:b9:1a:65:18:23:20:b2:e7:1d:6b:af:3f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=57c6f3d447dbf05c80b397e85cc813d50ae31523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:cd:50:8c:95:d6:0c:cb:c0:f6:5a:a7:f8:
fb:70:2f:64:87:75:67:93:d5:0f:53:c1:b7:cb:fa:
87:c1:1b:d9:d9:11:bb:49:7b:26:a0:75:b6:ac:47:
eb:a6:1d:7f:1f:ea:89:66:f3:6d:97:c8:52:95:55:
ff:91:b0:db:e7:aa:2d:c9:d5:7e:17:e2:4c:b0:b2:
3a:fd:65:77:ec:37:c0:55:8f:18:de:b0:6d:4d:86:
88:94:00:d1:2a:21:7e:38:1f:86:8c:c0:ee:89:87:
f7:04:65:85:de:51:27:25:ca:cc:ae:3b:c0:d6:01:
f2:c3:66:a0:42:a8:9f:ae:8b:65:a9:de:bf:b9:e4:
4b:1b:72:7f:1b:80:03:c1:d2:d0:68:6c:c5:07:f2:
a5:1c:ee:15:63:77:4f:48:f7:2b:83:08:37:27:a0:
8f:23:45:0d:c3:62:3d:48:4a:b6:cd:90:8e:7c:4f:
be:14:76:fc:76:03:34:5d:07:97:29:05:24:1a:c9:
cd:de:a4:b9:2b:5d:22:fb:31:b0:1c:2d:b6:f9:4d:
ad:cd:8e:92:d4:01:02:63:bf:36:eb:01:5c:4c:3f:
5b:4b:d3:2a:37:35:f5:9c:cf:6a:b8:08:5c:db:56:
47:63:a6:35:05:9e:7d:14:87:a0:92:af:70:ee:f0:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C6:F3:D4:47:DB:F0:5C:80:B3:97:E8:5C:C8:13:D5:0A:E3:15:23
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:89:0a:26:d5:4e:f1:2c:a3:be:79:00:5b:2a:04:6c:14:93:
65:1b:d8:8f:12:0b:68:7b:83:9a:b8:3d:29:e0:8f:cb:d3:54:
f4:ad:01:eb:66:cd:b5:df:36:ab:ef:5a:58:4c:66:48:ee:96:
04:23:12:0e:c1:7b:f0:b3:0f:98:9e:bd:7e:d4:01:f6:77:29:
66:b1:2d:13:5a:8c:35:fa:f1:dd:7a:76:70:d2:21:4d:18:e2:
f8:ec:af:c2:f2:ab:1e:2b:5e:56:67:8e:40:6f:33:d3:a8:1d:
a7:a7:77:92:a0:4a:91:e9:43:45:04:eb:d5:39:7a:08:2b:dc:
a2:e9:97:8f:ed:e8:e7:b3:c1:45:23:e5:1a:b4:d4:a1:e4:34:
58:e5:af:31:b3:24:a8:bc:ba:64:d3:a2:fc:8c:e9:05:ba:24:
04:eb:c3:e8:5e:71:fd:8e:2e:0b:c5:3f:ce:5f:e7:1e:2b:3e:
0c:e8:aa:2f:90:4f:53:33:94:1b:49:a7:da:46:8b:e7:39:95:
81:6a:29:ad:62:f6:e9:4a:16:13:13:63:7a:a2:52:2f:50:95:
e8:86:0f:76:7a:48:28:c9:44:db:de:89:2c:f5:ef:72:f0:95:
38:21:ec:59:84:8d:de:c8:d5:51:3c:8f:ff:04:67:73:bf:eb:
27:3e:1e:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2e5GmUYIyCy5x1rrz/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWI2NzBlODE0NmVmNTI3NGFlNDVlYjMwZDI5ZTk3MDA2
NWJhMmMwHhcNMjUxMDE5MDkwMTAyWhcNMjUxMDIwMDkwMTAyWjAzMTEwLwYDVQQD
Eyg1N2M2ZjNkNDQ3ZGJmMDVjODBiMzk3ZTg1Y2M4MTNkNTBhZTMxNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBbNUIyV1gzLwPZap/j7cC9kh3Vn
k9UPU8G3y/qHwRvZ2RG7SXsmoHW2rEfrph1/H+qJZvNtl8hSlVX/kbDb56otydV+
F+JMsLI6/WV37DfAVY8Y3rBtTYaIlADRKiF+OB+GjMDuiYf3BGWF3lEnJcrMrjvA
1gHyw2agQqifrotlqd6/ueRLG3J/G4ADwdLQaGzFB/KlHO4VY3dPSPcrgwg3J6CP
I0UNw2I9SEq2zZCOfE++FHb8dgM0XQeXKQUkGsnN3qS5K10i+zGwHC22+U2tzY6S
1AECY7826wFcTD9bS9MqNzX1nM9quAhc21ZHY6Y1BZ59FIegkq9w7vDBywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfG89RH2/BcgLOX6FzIE9UK4xUjMB8GA1UdIwQY
MBaAFKOrZw6BRu9SdK5F6zDSnpcAZbosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzIt
NjBkNWJlMWI3ZGE5LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMDE1NzYtYTQxMy00NzEyLTlmMzItNjBkNWJlMWI3ZGE5
LzEvbzZ0bkRvRkc3MUowcmtYck1OS2Vsd0JsdWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYkKJtVO
8SyjvnkAWyoEbBSTZRvYjxILaHuDmrg9KeCPy9NU9K0B62bNtd82q+9aWExmSO6W
BCMSDsF78LMPmJ69ftQB9ncpZrEtE1qMNfrx3Xp2cNIhTRji+OyvwvKrHiteVmeO
QG8z06gdp6d3kqBKkelDRQTr1Tl6CCvcoumXj+3o57PBRSPlGrTUoeQ0WOWvMbMk
qLy6ZNOi/IzpBbokBOvD6F5x/Y4uC8U/zl/nHis+DOiqL5BPUzOUG0mn2kaL5zmV
gWoprWL26UoWExNjeqJSL1CV6IYPdnpIKMlE296JLPXvcvCVOCHsWYSN3sjVUTyP
/wRnc7/rJz4esg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:15 2025 by rpki-client