Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: uG3h4Gs+1Sv/QZtZs4TQDoj8Z0D+QKPgp7PddylzX/Q=
Subject key identifier: A6:51:3A:6C:CB:35:68:38:EF:74:BB:9F:A6:29:E6:B7:7F:4D:83:8A
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019A4D3D4DC160975ABF33632D1221DAD62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 040A
Signing time: Tue 04 Nov 2025 05:00:54 +0000
Manifest this update: Tue 04 Nov 2025 05:00:54 +0000
Manifest next update: Wed 05 Nov 2025 05:00:54 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: vzUfzv/S4YfQg4DFVDGauun2wBdfzDigJEoVXHTxb84=)
2: zSJ_P5pv1HzQ8hvu19sQp2HnlDA.roa (hash: qAEiL4ToqpIPLGT1RE35tlHZ4lj+5tb3m4XW3uq1NSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:4d:c1:60:97:5a:bf:33:63:2d:12:21:da:d6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Nov 4 05:00:54 2025 GMT
Not After : Nov 5 05:00:54 2025 GMT
Subject: CN=a6513a6ccb356838ef74bb9fa629e6b77f4d838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:1c:c6:db:d3:27:39:c5:d5:db:3e:d7:00:
d7:28:c7:cd:cb:ce:df:19:3a:93:75:4d:2c:44:f6:
09:15:86:25:21:40:3c:95:5e:b8:a8:82:73:6f:94:
0a:6e:16:af:ba:e4:a9:7f:9b:d1:eb:bb:15:ed:65:
26:64:7d:47:c1:b3:85:8f:5e:f6:80:07:a9:da:eb:
87:8f:f3:aa:63:20:6c:1b:15:54:45:f2:d1:7c:16:
fc:34:d6:16:b7:bc:7e:ef:45:dc:d1:4c:bc:00:6e:
4d:42:a9:53:3a:4e:14:93:79:3a:2e:6a:88:b8:db:
c6:3f:1d:9c:83:04:90:c9:81:1f:34:1b:c3:ef:4a:
31:94:7d:f9:1d:67:93:f3:4f:f8:46:f7:30:bc:f4:
4e:4e:f8:5e:95:39:dd:0a:b3:d4:81:a2:4b:ec:44:
87:9b:db:40:a4:40:4c:42:4d:1e:4b:38:89:15:d4:
ec:72:d6:11:6e:47:bc:ef:3d:b6:46:11:87:ad:58:
2f:18:1f:75:3e:c2:5e:bc:33:72:ec:22:ac:de:8a:
95:19:01:0d:54:e8:ef:1d:18:3d:94:3b:56:9b:90:
2d:f0:b7:61:b5:9e:1e:e9:f3:e6:36:8c:15:ec:a4:
98:71:68:8c:58:6e:96:38:ec:c8:ac:ed:3f:75:8d:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:3A:6C:CB:35:68:38:EF:74:BB:9F:A6:29:E6:B7:7F:4D:83:8A
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1a:50:8c:91:ca:e5:54:27:53:7d:c0:f3:40:16:20:81:da:
f5:df:80:8c:2d:f5:b2:dd:14:6b:d1:c7:7b:64:cf:28:36:ec:
9b:ee:b6:c5:84:e6:72:64:2e:23:87:7d:ce:8e:0c:b3:d6:2d:
ed:e4:69:54:a4:95:a6:6d:fc:65:bb:f7:29:7b:3d:2a:10:81:
52:0e:9a:62:f2:9c:6b:88:69:40:a0:ed:04:05:5f:7f:0e:3d:
e9:fd:e0:d5:9d:92:6e:19:ed:70:5a:45:cc:7c:78:da:a2:dc:
25:51:72:31:be:df:a0:fd:98:ae:93:bb:00:ee:3f:4e:37:e6:
46:b7:80:05:92:b7:14:e1:3e:0f:37:7f:6e:c4:25:ea:5e:2e:
d1:dd:2f:02:6d:e9:6f:07:9a:cf:46:22:21:e3:21:a5:43:23:
cc:9e:ca:33:1f:50:a5:6c:29:0b:78:27:ba:28:a8:e5:bf:d3:
40:70:a1:06:0b:6d:18:0a:18:f7:f3:7d:cb:fc:2d:e4:9e:90:
a8:ba:d3:06:25:07:60:21:4b:d8:fa:d4:9c:79:80:74:c7:12:
74:74:e9:6b:7b:61:82:46:69:2c:11:75:09:59:c6:93:d1:7f:
b3:de:cc:18:84:a8:df:0f:75:bf:c4:b8:e8:13:70:d9:2a:bf:
4c:58:0e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPU3BYJdavzNjLRIh2tYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi
NWIxYjcwHhcNMjUxMTA0MDUwMDU0WhcNMjUxMTA1MDUwMDU0WjAzMTEwLwYDVQQD
EyhhNjUxM2E2Y2NiMzU2ODM4ZWY3NGJiOWZhNjI5ZTZiNzdmNGQ4MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriocxtvTJznF1ds+1wDXKMfNy87f
GTqTdU0sRPYJFYYlIUA8lV64qIJzb5QKbhavuuSpf5vR67sV7WUmZH1HwbOFj172
gAep2uuHj/OqYyBsGxVURfLRfBb8NNYWt7x+70Xc0Uy8AG5NQqlTOk4Uk3k6LmqI
uNvGPx2cgwSQyYEfNBvD70oxlH35HWeT80/4RvcwvPROTvhelTndCrPUgaJL7ESH
m9tApEBMQk0eSziJFdTsctYRbke87z22RhGHrVgvGB91PsJevDNy7CKs3oqVGQEN
VOjvHRg9lDtWm5At8LdhtZ4e6fPmNowV7KSYcWiMWG6WOOzIrO0/dY0DPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZROmzLNWg473S7n6Yp5rd/TYOKMB8GA1UdIwQY
MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt
OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4
LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBpQjJHK
5VQnU33A80AWIIHa9d+AjC31st0Ua9HHe2TPKDbsm+62xYTmcmQuI4d9zo4Ms9Yt
7eRpVKSVpm38Zbv3KXs9KhCBUg6aYvKca4hpQKDtBAVffw496f3g1Z2SbhntcFpF
zHx42qLcJVFyMb7foP2YrpO7AO4/TjfmRreABZK3FOE+Dzd/bsQl6l4u0d0vAm3p
bweaz0YiIeMhpUMjzJ7KMx9QpWwpC3gnuiio5b/TQHChBgttGAoY9/N9y/wt5J6Q
qLrTBiUHYCFL2PrUnHmAdMcSdHTpa3thgkZpLBF1CVnGk9F/s97MGISo3w91v8S4
6BNw2Sq/TFgO3A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:07 2025 by rpki-client