Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: b99as7XM2oefQllHbSPYzF97OYGie0i2RQ8F7a3Z7m0=
Subject key identifier: 9A:CB:17:A8:64:86:26:BE:1C:A0:B7:13:1A:A6:D3:0D:1B:D0:33:F5
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 019A5263945288ED141AFFAFEE0C9F2D6761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 0362
Signing time: Wed 05 Nov 2025 05:00:49 +0000
Manifest this update: Wed 05 Nov 2025 05:00:49 +0000
Manifest next update: Thu 06 Nov 2025 05:00:49 +0000
Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: ZR/tu6UyRnj+9jjOm/+lWnmeBad9t/58Jquhux33GXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:94:52:88:ed:14:1a:ff:af:ee:0c:9f:2d:67:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Nov 5 05:00:49 2025 GMT
Not After : Nov 6 05:00:49 2025 GMT
Subject: CN=9acb17a8648626be1ca0b7131aa6d30d1bd033f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:ef:da:09:87:51:76:8d:e7:a3:66:44:81:
1a:e5:31:78:e9:9b:ec:de:a5:d3:2d:5a:bd:36:fd:
f9:f9:6a:14:a5:3c:02:90:e2:30:ca:1c:88:54:1c:
56:5b:ea:dc:97:22:a8:66:1f:2d:64:27:d7:9a:5c:
48:65:50:a8:80:ea:42:c5:fc:d8:17:0d:f7:af:44:
31:d0:87:c9:a0:8c:80:8d:4e:06:9b:78:44:ba:11:
c1:5a:e0:4c:32:af:71:f2:ce:a7:2f:fd:b3:96:6a:
59:d4:b9:d9:a4:37:ce:56:d1:5e:f7:5b:dd:aa:6f:
a1:17:cb:de:07:9f:15:9a:b1:f4:fa:9a:6c:8a:4c:
57:78:97:42:3c:5e:36:e3:a5:c8:89:a4:6a:b4:2b:
84:f1:68:7d:50:50:8c:2f:78:fd:4b:c6:c9:cb:c4:
16:ec:b7:f6:f3:59:db:0b:b6:4a:15:de:8e:13:7c:
b5:33:93:f1:8f:b3:45:2c:e7:c2:7c:89:c4:c2:30:
18:f0:14:4b:89:d2:66:34:66:37:7a:e1:27:82:51:
6c:3a:f4:c0:03:b5:d9:a5:7f:8c:5b:81:9f:58:80:
3b:17:80:81:88:ca:fa:d1:0e:73:27:07:29:df:fc:
5e:a9:a2:ab:62:ff:bd:7f:b2:19:79:16:12:64:6a:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CB:17:A8:64:86:26:BE:1C:A0:B7:13:1A:A6:D3:0D:1B:D0:33:F5
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:51:96:fa:aa:d0:f8:21:a4:6b:80:0e:8b:b7:fd:e0:83:08:
00:a5:3a:57:c3:35:40:7a:04:fa:1f:88:36:12:e5:34:8c:39:
67:a4:c2:cb:aa:44:c2:12:83:01:8c:27:05:6b:89:40:9f:8d:
d6:37:af:4a:bc:90:ff:fa:0a:51:d9:7b:d4:5d:ba:67:10:65:
e5:35:95:8a:7f:f3:23:e5:63:67:85:e5:55:50:84:cc:b5:83:
7f:19:0c:60:8e:77:3c:3a:e3:bc:85:a6:76:78:70:52:dd:95:
d3:d3:47:c9:75:c9:9b:08:39:ad:26:80:47:0b:f4:a7:68:ba:
a4:a6:b0:d8:0e:63:3d:06:ae:2a:a5:65:9a:8a:bb:3f:0c:48:
1a:22:5e:3a:0e:6a:fc:b8:d3:71:37:bd:2b:0d:53:c5:ac:36:
17:83:03:58:0a:10:8f:b7:da:87:4b:30:f4:0b:c6:3a:d1:ba:
47:dd:10:08:45:ee:48:64:c3:46:ac:0d:d2:39:5d:ba:45:dd:
8a:6f:d0:1d:25:f7:b0:d8:19:cd:a0:d6:9d:4b:ca:3e:d8:f1:
c8:38:27:71:d3:7d:1d:6f:3c:98:32:3f:e7:88:82:af:8c:3b:
b5:ad:e8:7c:84:08:e5:b6:d4:8c:69:7d:65:f5:35:f4:c6:81:
34:ca:be:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY5RSiO0UGv+v7gyfLWdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTNmYjg2Nzg2MWRhYWZkNzgxMjc5ODk3ZmUyNWE4ZWIz
NzE0NjgwHhcNMjUxMTA1MDUwMDQ5WhcNMjUxMTA2MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg5YWNiMTdhODY0ODYyNmJlMWNhMGI3MTMxYWE2ZDMwZDFiZDAzM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JHv2gmHUXaN56NmRIEa5TF46Zvs
3qXTLVq9Nv35+WoUpTwCkOIwyhyIVBxWW+rclyKoZh8tZCfXmlxIZVCogOpCxfzY
Fw33r0Qx0IfJoIyAjU4Gm3hEuhHBWuBMMq9x8s6nL/2zlmpZ1LnZpDfOVtFe91vd
qm+hF8veB58VmrH0+ppsikxXeJdCPF4246XIiaRqtCuE8Wh9UFCML3j9S8bJy8QW
7Lf281nbC7ZKFd6OE3y1M5Pxj7NFLOfCfInEwjAY8BRLidJmNGY3euEnglFsOvTA
A7XZpX+MW4GfWIA7F4CBiMr60Q5zJwcp3/xeqaKrYv+9f7IZeRYSZGrTAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrLF6hkhia+HKC3Exqm0w0b0DP1MB8GA1UdIwQY
MBaAFGzj+4Z4Ydqv14EnmJf+JajrNxRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMt
ZTQzOTFmYmNhZjE0LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jM2Y5OTUtODZlZi00YTY3LWFjYWMtZTQzOTFmYmNhZjE0
LzEvYk9QN2huaGgycV9YZ1NlWWxfNGxxT3MzRkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFGW+qrQ
+CGka4AOi7f94IMIAKU6V8M1QHoE+h+INhLlNIw5Z6TCy6pEwhKDAYwnBWuJQJ+N
1jevSryQ//oKUdl71F26ZxBl5TWVin/zI+VjZ4XlVVCEzLWDfxkMYI53PDrjvIWm
dnhwUt2V09NHyXXJmwg5rSaARwv0p2i6pKaw2A5jPQauKqVlmoq7PwxIGiJeOg5q
/LjTcTe9Kw1Txaw2F4MDWAoQj7fah0sw9AvGOtG6R90QCEXuSGTDRqwN0jldukXd
im/QHSX3sNgZzaDWnUvKPtjxyDgncdN9HW88mDI/54iCr4w7ta3ofIQI5bbUjGl9
ZfU19MaBNMq+NA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:18 2025 by rpki-client