Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
File: o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft (raw, json)
Hash identifier: pYKy0pNDuI9U6n7GbOa7vOTJrlf10PMOHXXonoWEbBI=
Subject key identifier: E0:0E:39:FC:5F:83:3D:47:3D:9B:36:24:BD:90:24:90:CC:07:4B:51
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Certificate issuer: /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial: 0199FC218E97FFA4B6B8032AA449B15F184F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
Manifest number: 0840
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: borZkxzd7Q70fU1OWvln2Q1-HRc.roa (hash: WT5cBwBGRYqcO3GRfgSJfVkJ2Niz57/GzD/KCZQzgos=)
2: o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl (hash: W4505o+VDKSmtQQXj8XDKZwp3V6rBqp2l2NCvQZiC18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8e:97:ff:a4:b6:b8:03:2a:a4:49:b1:5f:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=e00e39fc5f833d473d9b3624bd902490cc074b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:9a:60:05:4b:20:3a:e7:e7:53:2f:4c:0c:
5c:c7:54:a3:52:dd:f0:4f:7b:5c:5c:6d:f9:17:6d:
e0:29:c8:81:4d:76:a2:df:24:22:cf:8e:22:42:07:
fb:78:81:c2:05:53:16:03:ea:c0:bc:bd:93:27:03:
97:8a:bb:55:b5:65:79:9a:eb:20:2f:a1:23:16:93:
be:e2:32:a9:58:05:9e:6f:ad:22:a4:f5:48:ae:8e:
8f:d6:99:7a:f6:0d:9e:73:fb:93:92:e4:16:a8:22:
c0:e1:40:dc:c7:2e:92:99:99:e8:a1:db:7a:a9:22:
1e:d1:de:84:35:c1:3b:b9:29:45:70:cd:50:fb:f5:
ac:64:c3:02:bc:ec:d7:55:ad:8a:ad:3c:e5:d1:1d:
93:70:4d:72:13:5e:a6:03:ff:98:db:d4:db:ba:0d:
85:e3:ed:31:ca:02:c3:df:3c:5f:26:11:ac:c8:a0:
7e:97:c1:ca:91:82:3f:41:b2:a0:71:86:bf:3a:aa:
6f:94:0c:01:29:1f:02:97:dc:0a:e2:e0:ae:17:1e:
a0:49:23:e4:74:03:f3:78:d9:4e:e4:8d:47:c1:7a:
03:58:c3:9e:69:99:e3:30:28:bd:3a:2f:fc:5b:70:
13:9c:32:23:59:b3:0e:cf:fe:f1:3b:f9:c6:cf:79:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0E:39:FC:5F:83:3D:47:3D:9B:36:24:BD:90:24:90:CC:07:4B:51
X509v3 Authority Key Identifier:
keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ed:51:99:bf:25:ea:44:67:1e:e6:cb:b6:72:03:f2:d2:17:
47:b2:6f:ff:fc:3d:01:34:d4:a3:4e:15:66:36:d7:2b:e8:8a:
99:c9:2d:89:40:67:bd:b9:f7:94:68:e9:b2:7b:c7:ab:ff:0c:
6c:af:82:47:8b:b1:86:59:2f:c5:6a:6a:1e:4a:75:20:f3:25:
d4:93:af:44:bb:3f:2f:1e:ea:be:63:2b:7a:47:55:82:8c:71:
dd:11:e5:5c:7c:a3:8a:68:e6:c0:41:98:ce:e0:4a:cd:da:27:
5c:c1:62:fb:9f:8b:8e:17:b3:19:0c:3f:b1:00:12:0c:0d:99:
0a:34:4e:0c:23:66:aa:35:46:20:c2:bf:9e:9a:b2:c5:ce:73:
57:da:4f:da:3d:6c:86:cb:77:56:17:9d:ff:8f:69:21:36:33:
9e:a8:1d:03:d5:1a:6c:fd:09:19:3f:5d:63:4a:90:f6:3a:6a:
6d:72:71:b0:48:fa:de:24:c5:ad:44:3a:f5:ef:ab:ff:47:4e:
d5:ee:8b:3e:aa:f4:62:c8:18:29:79:0c:12:b2:c4:74:aa:b8:
3e:ff:39:53:26:07:c9:89:7d:44:46:74:e2:e5:87:65:b8:7b:
f4:63:01:83:0e:b3:ef:7b:60:d3:ba:fe:36:3e:be:74:9b:92:
05:1f:0d:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IY6X/6S2uAMqpEmxXxhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNDY0ODIwZGNjNDY3NjlmZDE1NGM4Y2JhZTY2YjhiYjM4
ZmVhMDMwHhcNMjUxMDE5MTEwMTIxWhcNMjUxMDIwMTEwMTIxWjAzMTEwLwYDVQQD
EyhlMDBlMzlmYzVmODMzZDQ3M2Q5YjM2MjRiZDkwMjQ5MGNjMDc0YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SaaYAVLIDrn51MvTAxcx1SjUt3w
T3tcXG35F23gKciBTXai3yQiz44iQgf7eIHCBVMWA+rAvL2TJwOXirtVtWV5musg
L6EjFpO+4jKpWAWeb60ipPVIro6P1pl69g2ec/uTkuQWqCLA4UDcxy6SmZnoodt6
qSIe0d6ENcE7uSlFcM1Q+/WsZMMCvOzXVa2KrTzl0R2TcE1yE16mA/+Y29Tbug2F
4+0xygLD3zxfJhGsyKB+l8HKkYI/QbKgcYa/OqpvlAwBKR8Cl9wK4uCuFx6gSSPk
dAPzeNlO5I1HwXoDWMOeaZnjMCi9Oi/8W3ATnDIjWbMOz/7xO/nGz3mYmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAOOfxfgz1HPZs2JL2QJJDMB0tRMB8GA1UdIwQY
MBaAFKNGSCDcxGdp/RVMjLrma4uzj+oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMmMzOWQtMWIxZi00ZTQxLTkyYjAt
ZTBhMmEyYzc5NDJlLzEvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMmMzOWQtMWIxZi00ZTQxLTkyYjAtZTBhMmEyYzc5NDJl
LzEvbzBaSUlOekVaMm45RlV5TXV1WnJpN09QNmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu1Rmb8l
6kRnHubLtnID8tIXR7Jv//w9ATTUo04VZjbXK+iKmcktiUBnvbn3lGjpsnvHq/8M
bK+CR4uxhlkvxWpqHkp1IPMl1JOvRLs/Lx7qvmMrekdVgoxx3RHlXHyjimjmwEGY
zuBKzdonXMFi+5+LjhezGQw/sQASDA2ZCjRODCNmqjVGIMK/npqyxc5zV9pP2j1s
hst3Vhed/49pITYznqgdA9UabP0JGT9dY0qQ9jpqbXJxsEj63iTFrUQ69e+r/0dO
1e6LPqr0YsgYKXkMErLEdKq4Pv85UyYHyYl9REZ04uWHZbh79GMBgw6z73tg07r+
Nj6+dJuSBR8NPg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:44 2025 by rpki-client