Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: IB/sS/8PvFuRWqfVZNTM+Kj7/Ts5nb+yG0+ee4jfOeY=
Subject key identifier: D8:8E:16:6A:2F:3F:91:13:8B:FF:52:64:2B:75:28:71:E9:0C:B9:5E
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019A4D73D3BDBFF14895F5D67B55CC6CA55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 168B
Signing time: Tue 04 Nov 2025 06:00:27 +0000
Manifest this update: Tue 04 Nov 2025 06:00:27 +0000
Manifest next update: Wed 05 Nov 2025 06:00:27 +0000
Files and hashes: 1: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (hash: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: yMehdczkuh8EQX93PMH+W53mRQ3HZkCaGfZf3RA/ekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d3:bd:bf:f1:48:95:f5:d6:7b:55:cc:6c:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Nov 4 06:00:27 2025 GMT
Not After : Nov 5 06:00:27 2025 GMT
Subject: CN=d88e166a2f3f91138bff52642b752871e90cb95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:b8:4e:81:ef:de:0b:52:5a:dd:09:66:b3:
63:a9:7d:27:49:ac:34:a0:9f:e7:42:3b:18:08:eb:
2f:81:13:d3:f8:d2:47:07:e2:2b:5b:e7:a6:04:3f:
f0:aa:dd:30:2b:7c:ea:49:d3:c2:c6:b3:e1:14:a3:
25:80:b1:fe:84:ef:4c:cd:4e:4b:3d:2b:45:54:d8:
96:93:15:5a:b7:df:7a:0b:a6:7c:df:8a:83:a3:94:
6e:0f:c8:c5:66:b5:88:ff:77:a9:80:b7:55:57:51:
e2:fb:7d:d5:69:7e:1a:37:8e:a9:34:31:0c:99:94:
49:2e:9b:dd:03:00:68:10:a9:de:63:e8:1d:e0:3e:
c3:7a:5a:fe:05:2d:15:bb:60:3f:48:40:60:0e:6a:
1f:1a:c0:92:7c:a9:8f:c4:ba:95:c3:97:0a:c6:3c:
a7:a8:a0:24:e9:92:8d:06:9d:e2:b1:d5:4c:7b:9e:
d1:18:6d:5b:50:d3:fb:24:2d:f8:6c:e2:ba:96:4f:
54:fa:f5:69:7f:ab:d6:a1:3e:10:9e:e9:1a:94:d2:
b7:a8:b6:5f:1d:f6:7b:a7:75:4b:87:2c:ea:8c:84:
12:54:fd:f8:6c:d0:e2:b3:9b:79:94:e1:0c:6c:60:
02:69:46:b6:36:22:36:8a:af:c1:04:0a:b4:0c:a3:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:16:6A:2F:3F:91:13:8B:FF:52:64:2B:75:28:71:E9:0C:B9:5E
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e1:86:c5:86:41:5a:60:ac:cc:5b:29:87:84:cf:9f:49:e6:
f7:1d:b6:68:84:3c:da:7d:0d:8d:1b:6d:2d:20:11:35:8e:a5:
13:6e:94:74:dd:e2:65:ad:f3:8a:5d:48:4e:28:5e:66:68:67:
0f:30:a3:ab:c0:4b:fe:ee:ed:d4:22:48:e1:21:51:54:83:d7:
57:29:bb:51:fc:ed:0d:72:b7:76:b2:58:a3:93:4f:2e:75:34:
fd:9b:72:70:b4:85:18:c3:ee:98:91:1d:34:4c:d5:7c:55:65:
e5:97:a9:e3:ca:d6:11:a3:78:b8:d3:96:46:57:0c:65:d4:33:
66:ad:a7:15:56:36:16:e8:db:c2:17:2a:79:23:c5:4e:82:ed:
c3:86:76:64:e0:5d:16:f0:1a:49:73:f6:5b:30:03:ac:6b:52:
7d:aa:56:00:de:99:ee:06:88:42:48:ea:c1:c9:75:06:c9:3f:
28:a0:09:d3:9d:47:73:84:d1:3f:83:d4:b6:33:81:0b:4c:7b:
b5:45:10:2f:d0:9e:19:e5:eb:15:02:98:0d:88:f2:5d:12:3e:
07:94:cf:0b:6b:07:47:7b:32:78:44:a5:5d:c3:3c:03:d8:be:
3c:be:66:d7:b1:5d:6c:0a:c4:24:c9:96:81:55:a7:e2:5b:39:
31:9b:76:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc9O9v/FIlfXWe1XMbKVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZWNlYWM4MTI1NTM0YTU3OTQ3OTYyZGIyODkwM2ZhZDdh
YzNhZjkwHhcNMjUxMTA0MDYwMDI3WhcNMjUxMTA1MDYwMDI3WjAzMTEwLwYDVQQD
EyhkODhlMTY2YTJmM2Y5MTEzOGJmZjUyNjQyYjc1Mjg3MWU5MGNiOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfW4ToHv3gtSWt0JZrNjqX0nSaw0
oJ/nQjsYCOsvgRPT+NJHB+IrW+emBD/wqt0wK3zqSdPCxrPhFKMlgLH+hO9MzU5L
PStFVNiWkxVat996C6Z834qDo5RuD8jFZrWI/3epgLdVV1Hi+33VaX4aN46pNDEM
mZRJLpvdAwBoEKneY+gd4D7Delr+BS0Vu2A/SEBgDmofGsCSfKmPxLqVw5cKxjyn
qKAk6ZKNBp3isdVMe57RGG1bUNP7JC34bOK6lk9U+vVpf6vWoT4QnukalNK3qLZf
HfZ7p3VLhyzqjIQSVP34bNDis5t5lOEMbGACaUa2NiI2iq/BBAq0DKOIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiOFmovP5ETi/9SZCt1KHHpDLleMB8GA1UdIwQY
MBaAFKPs6sgSVTSleUeWLbKJA/rXrDr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQt
YTliZDVlNDEwYWVkLzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kOTExODctNzU0NS00MWU3LTk4OTQtYTliZDVlNDEwYWVk
LzEvby16cXlCSlZOS1Y1UjVZdHNva0QtdGVzT3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeGGxYZB
WmCszFsph4TPn0nm9x22aIQ82n0NjRttLSARNY6lE26UdN3iZa3zil1ITiheZmhn
DzCjq8BL/u7t1CJI4SFRVIPXVym7UfztDXK3drJYo5NPLnU0/ZtycLSFGMPumJEd
NEzVfFVl5Zep48rWEaN4uNOWRlcMZdQzZq2nFVY2FujbwhcqeSPFToLtw4Z2ZOBd
FvAaSXP2WzADrGtSfapWAN6Z7gaIQkjqwcl1Bsk/KKAJ051Hc4TRP4PUtjOBC0x7
tUUQL9CeGeXrFQKYDYjyXRI+B5TPC2sHR3syeESlXcM8A9i+PL5m17FdbArEJMmW
gVWn4ls5MZt2hQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:47 2025 by rpki-client