Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: MO6n1crnv7ryW77RTyp/zqYyMnVuLx19eSJGEXPjZ74=
Subject key identifier: 69:09:CA:03:0C:7B:A5:C0:19:49:4D:D8:0F:A5:6C:0F:68:B6:B6:3C
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 0199FB7CB51E20CBC91A4CA480D300D53B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0AE1
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: p+DEKSraJ1Y8QzDl+mGtOUfh1c/G3TTyTUkHrHpspkA=)
2: bEP6BpgWEwuDr5XbU9fjHciv2p8.roa (hash: HB6oz88QvFlDq+Znta3S+P5pPZ539cdh6eC3HVLovgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b5:1e:20:cb:c9:1a:4c:a4:80:d3:00:d5:3b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=6909ca030c7ba5c019494dd80fa56c0f68b6b63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:a1:df:74:f3:8f:2d:2c:1d:5b:6d:9d:d3:
3f:b6:9d:19:3b:96:c0:46:e1:8a:82:41:ed:28:5e:
40:51:27:07:11:3a:3b:f5:3c:01:c8:e9:ad:50:f7:
0c:7c:d4:c7:c5:59:dc:0d:91:49:78:41:2e:8b:ac:
4e:f0:d7:1f:3a:50:49:41:5d:dc:89:c1:24:af:f5:
e0:7d:e9:2c:d1:8b:15:96:96:16:66:f8:2d:73:de:
de:48:39:41:c2:5b:18:29:8d:c7:5f:ed:08:3d:ae:
51:ea:2b:bb:80:5d:09:d4:f5:6e:ed:1c:bc:df:0b:
bf:a1:8c:09:74:00:4e:3c:e2:19:20:91:a7:3a:78:
01:36:50:5f:d6:80:3f:4d:1b:72:5c:45:4e:3f:9b:
dd:39:68:90:c7:0b:fe:1a:8e:0c:07:5e:04:a6:d4:
11:c0:fc:a2:53:0d:62:fa:28:25:3c:22:ee:bc:b9:
0d:66:8a:1c:2d:1f:b4:b5:c5:11:4a:0d:13:db:89:
d6:e7:32:6c:60:83:6d:0a:df:2b:ef:a2:8c:0a:7b:
35:0e:4a:48:83:6f:69:b8:95:3f:f6:c3:9a:e1:13:
48:e8:ae:e4:43:1e:9c:16:c5:3a:9c:c5:b4:39:27:
a5:2b:a9:76:2e:33:4c:28:2a:03:40:66:f2:a5:fe:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:CA:03:0C:7B:A5:C0:19:49:4D:D8:0F:A5:6C:0F:68:B6:B6:3C
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5d:70:98:6f:ed:7c:3c:b1:ed:bf:2e:15:19:0b:06:fd:1e:
ad:5c:5d:0c:76:d8:1c:ca:5f:42:e1:f3:52:ed:0f:fe:ec:d0:
fb:ff:a4:e9:d4:b3:7a:8d:6d:d8:14:d5:89:20:50:05:b9:3d:
33:54:7d:dd:d3:42:96:97:30:2b:0c:02:34:6f:c2:45:03:35:
eb:dc:e8:4c:1c:d5:e0:dc:a9:fd:b4:92:a1:98:68:41:0b:84:
c4:8e:42:c7:ba:9b:12:f9:24:9d:28:f6:1a:15:f0:00:cb:bc:
59:a0:4c:93:86:73:e3:b1:42:25:c9:c2:e6:24:45:71:e4:92:
64:ad:e7:df:d4:77:a1:91:74:7d:16:d3:87:3b:20:34:57:1f:
1b:85:4a:0f:29:52:9b:61:20:d3:aa:6a:24:e8:27:20:35:ca:
d9:a8:01:70:55:1e:ae:87:5b:cd:f9:d9:e6:67:cc:51:69:93:
2f:c0:2c:56:2d:f1:ac:ac:01:8e:7a:1d:7e:34:a7:65:d7:2d:
07:25:f8:52:37:70:52:70:a9:d0:03:ea:e5:21:03:c1:26:cc:
f5:2d:ae:19:12:79:49:5a:45:ae:14:d7:99:7f:36:4f:2d:29:
c6:56:15:ba:4e:27:6e:7e:d8:73:3c:3f:3a:80:90:32:97:3f:
09:d3:9a:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLUeIMvJGkykgNMA1TuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmZiNjA1ZGNlMzA2MGRmYjY2ZGNjY2E4OGViN2RhMGFj
NzRhZjEwHhcNMjUxMDE5MDgwMTE3WhcNMjUxMDIwMDgwMTE3WjAzMTEwLwYDVQQD
Eyg2OTA5Y2EwMzBjN2JhNWMwMTk0OTRkZDgwZmE1NmMwZjY4YjZiNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Sh33Tzjy0sHVttndM/tp0ZO5bA
RuGKgkHtKF5AUScHETo79TwByOmtUPcMfNTHxVncDZFJeEEui6xO8NcfOlBJQV3c
icEkr/Xgfeks0YsVlpYWZvgtc97eSDlBwlsYKY3HX+0IPa5R6iu7gF0J1PVu7Ry8
3wu/oYwJdABOPOIZIJGnOngBNlBf1oA/TRtyXEVOP5vdOWiQxwv+Go4MB14EptQR
wPyiUw1i+iglPCLuvLkNZoocLR+0tcURSg0T24nW5zJsYINtCt8r76KMCns1DkpI
g29puJU/9sOa4RNI6K7kQx6cFsU6nMW0OSelK6l2LjNMKCoDQGbypf7IowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkJygMMe6XAGUlN2A+lbA9otrY8MB8GA1UdIwQY
MBaAFDv/tgXc4wYN+2bczKiOt9oKx0rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2Ut
NmIxZDA3MTQ1NTRhLzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2UtNmIxZDA3MTQ1NTRh
LzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdV1wmG/t
fDyx7b8uFRkLBv0erVxdDHbYHMpfQuHzUu0P/uzQ+/+k6dSzeo1t2BTViSBQBbk9
M1R93dNClpcwKwwCNG/CRQM169zoTBzV4Nyp/bSSoZhoQQuExI5Cx7qbEvkknSj2
GhXwAMu8WaBMk4Zz47FCJcnC5iRFceSSZK3n39R3oZF0fRbThzsgNFcfG4VKDylS
m2Eg06pqJOgnIDXK2agBcFUerodbzfnZ5mfMUWmTL8AsVi3xrKwBjnodfjSnZdct
ByX4UjdwUnCp0APq5SEDwSbM9S2uGRJ5SVpFrhTXmX82Ty0pxlYVuk4nbn7Yczw/
OoCQMpc/CdOatQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:47 2025 by rpki-client